Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/upEbKQeA1_EZc7JzWkI9MaX8VII.roa
File: upEbKQeA1_EZc7JzWkI9MaX8VII.roa (raw, json)
Hash identifier: 7l3fiEjdPd4gCKpSXRnqAaRVByTpKMqYNRNG/fJvRsE=
Subject key identifier: BA:91:1B:29:07:80:D7:F1:19:73:B2:73:5A:42:3D:31:A5:FC:54:82
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 01910303C5E1DF11E1809F32F7554814B622
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/upEbKQeA1_EZc7JzWkI9MaX8VII.roa
Signing time: Tue 30 Jul 2024 09:41:04 +0000
ROA not before: Tue 30 Jul 2024 09:41:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207773
IP address blocks: 185.98.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:03:c5:e1:df:11:e1:80:9f:32:f7:55:48:14:b6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Jul 30 09:41:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba911b290780d7f11973b2735a423d31a5fc5482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:9f:6d:15:6f:2a:74:cd:b4:4b:3d:e7:5c:
5c:c7:77:8d:cd:24:a0:c8:43:14:54:4e:45:6d:fd:
42:9d:f9:e5:77:cf:42:9f:da:0d:b0:44:6a:06:4d:
70:7e:50:57:43:63:c5:04:14:a1:bb:70:8b:c7:19:
d6:4f:bd:d9:1f:24:3f:89:b8:a9:69:71:f3:58:de:
47:9a:8f:59:b9:87:95:4f:29:1d:19:e5:66:72:85:
78:91:ee:c6:5e:c6:df:80:38:e0:79:d7:c4:cf:91:
75:cc:cd:6a:aa:c2:8f:3b:ff:e5:07:66:43:1a:cc:
9f:a3:45:49:4b:9d:02:49:a5:8a:d3:1c:ab:f2:c6:
fe:2a:3b:32:3b:00:c7:85:fe:d3:17:c5:9a:7c:36:
96:66:cf:76:8b:4b:53:ef:99:69:18:c8:b0:c7:46:
e4:a0:cf:41:36:d3:94:76:6b:08:8d:cb:67:81:4d:
91:84:b9:5e:9a:37:68:29:93:63:0b:f7:80:12:78:
fa:6e:ae:29:f8:7f:e1:c0:e9:a6:9e:d1:01:db:8e:
d3:e4:13:5f:6b:b7:8b:c4:01:73:c4:14:dc:ae:ab:
a2:5a:1a:e6:95:03:3a:6b:37:19:c3:ac:fc:0f:70:
30:6b:47:77:d0:3e:99:3b:4c:12:8e:66:24:68:de:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:91:1B:29:07:80:D7:F1:19:73:B2:73:5A:42:3D:31:A5:FC:54:82
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/upEbKQeA1_EZc7JzWkI9MaX8VII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.15.0/24
Signature Algorithm: sha256WithRSAEncryption
09:14:e0:7a:5e:59:04:6b:48:6f:6e:c6:95:db:a7:54:13:ec:
1e:9d:b7:63:3a:de:44:8c:f7:5c:b3:3d:9c:a0:9a:46:86:4a:
80:13:71:f1:b2:0f:b3:68:b6:18:0d:a9:4d:4e:72:11:56:93:
53:b3:26:43:27:96:8c:85:d1:b3:3f:2f:28:0d:43:17:3c:39:
73:49:0f:35:42:d7:eb:9a:7a:f2:96:df:06:24:58:ff:fd:46:
b8:8f:df:c8:4b:ab:d2:20:61:03:4e:a4:fb:25:55:74:4e:82:
f9:7b:ef:ad:12:2d:50:f3:14:6e:c8:9a:51:40:3a:16:01:e8:
5c:e1:10:2b:46:64:af:fd:50:8b:ee:b5:2c:97:50:6a:e4:b6:
d2:ed:ba:30:3d:d6:b1:62:07:ea:41:7b:ae:c6:f3:25:cd:81:
8a:ae:9b:6d:1a:ba:9a:07:1f:05:bd:50:c2:a2:56:77:da:89:
e4:f6:0c:fb:67:cf:16:f8:28:cd:46:69:a4:f4:a2:d7:54:94:
eb:5c:53:b2:ba:9e:90:1d:55:c0:c1:b0:fd:2a:f0:60:90:e7:
29:b8:25:7c:08:e7:c5:12:96:4e:8b:6e:70:42:eb:72:ae:c8:
c6:5a:f8:37:30:6b:c0:6e:31:9f:3c:50:00:b9:f3:87:8f:57:
81:61:a2:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEDA8Xh3xHhgJ8y91VIFLYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OGE0OTE0ZDk2MDA5YjY4MjJkMTY4YTBlZDUzZTkzNmQz
YTQxZjgwHhcNMjQwNzMwMDk0MTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTkxMWIyOTA3ODBkN2YxMTk3M2IyNzM1YTQyM2QzMWE1ZmM1NDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygWfbRVvKnTNtEs951xcx3eNzSSg
yEMUVE5Fbf1Cnfnld89Cn9oNsERqBk1wflBXQ2PFBBShu3CLxxnWT73ZHyQ/ibip
aXHzWN5Hmo9ZuYeVTykdGeVmcoV4ke7GXsbfgDjgedfEz5F1zM1qqsKPO//lB2ZD
Gsyfo0VJS50CSaWK0xyr8sb+KjsyOwDHhf7TF8WafDaWZs92i0tT75lpGMiwx0bk
oM9BNtOUdmsIjctngU2RhLlemjdoKZNjC/eAEnj6bq4p+H/hwOmmntEB247T5BNf
a7eLxAFzxBTcrquiWhrmlQM6azcZw6z8D3Awa0d30D6ZO0wSjmYkaN5PewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLqRGykHgNfxGXOyc1pCPTGl/FSCMB8GA1UdIwQY
MBaAFNeKSRTZYAm2gi0Wig7VPpNtOkH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUt
MjMwZmRhNjZhYmNiLzEvdXBFYktRZUExX0VaYzdKeldrSTlNYVg4VklJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi83Y2Y0M2QtOGM4NS00ODE3LWJkNzUtMjMwZmRhNjZhYmNi
LzEvMTRwSkZObGdDYmFDTFJhS0R0VS1rMjA2UWZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWIPMA0G
CSqGSIb3DQEBCwUAA4IBAQAJFOB6XlkEa0hvbsaV26dUE+wenbdjOt5EjPdcsz2c
oJpGhkqAE3Hxsg+zaLYYDalNTnIRVpNTsyZDJ5aMhdGzPy8oDUMXPDlzSQ81Qtfr
mnrylt8GJFj//Ua4j9/IS6vSIGEDTqT7JVV0ToL5e++tEi1Q8xRuyJpRQDoWAehc
4RArRmSv/VCL7rUsl1Bq5LbS7bowPdaxYgfqQXuuxvMlzYGKrpttGrqaBx8FvVDC
olZ32onk9gz7Z88W+CjNRmmk9KLXVJTrXFOyup6QHVXAwbD9KvBgkOcpuCV8COfF
EpZOi25wQutyrsjGWvg3MGvAbjGfPFAAufOHj1eBYaKI
-----END CERTIFICATE-----
Generated at Wed Apr 23 04:01:36 2025 by rpki-client