Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/30QTPY09IdzFdU5rCQ-DbzQpt5A.roa
File: 30QTPY09IdzFdU5rCQ-DbzQpt5A.roa (raw, json)
Hash identifier: vvY/xvhJguyLZmFhwAZhXULbZ3zZT44PdDAiG3s2DZ8=
Subject key identifier: DF:44:13:3D:8D:3D:21:DC:C5:75:4E:6B:09:0F:83:6F:34:29:B7:90
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 0190E92306686B79D64FE7AA27DAB35D3EE0
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/30QTPY09IdzFdU5rCQ-DbzQpt5A.roa
Signing time: Thu 25 Jul 2024 09:05:04 +0000
ROA not before: Thu 25 Jul 2024 09:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 141.98.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:23:06:68:6b:79:d6:4f:e7:aa:27:da:b3:5d:3e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jul 25 09:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df44133d8d3d21dcc5754e6b090f836f3429b790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:5a:ea:10:f6:db:8a:3a:18:cb:d0:0e:be:
97:7a:40:3e:22:a1:47:c1:29:b0:80:2c:10:48:41:
03:75:89:f1:ca:3e:b9:16:ea:74:80:96:37:79:c3:
17:c0:cc:42:24:61:0a:60:25:68:3a:d3:86:99:3e:
da:ca:6e:9f:33:ab:cc:42:56:4e:fe:3b:8f:88:5c:
a1:48:94:b2:44:1f:04:72:b6:d3:ad:04:54:85:df:
2c:e2:50:b8:89:12:9a:4e:39:46:c0:20:a6:f1:e0:
06:44:4f:a3:e1:51:40:61:b6:ee:46:42:5a:dd:cc:
a3:bc:66:06:da:2e:b6:be:f9:10:fd:6f:b4:47:08:
ec:d4:4e:12:18:18:c3:b8:ae:f5:12:43:f9:ab:3b:
cd:f5:70:f7:98:5d:4c:98:21:75:e6:7b:f3:73:ab:
9f:5f:6b:ed:73:31:f7:f3:eb:a4:17:2c:1a:ec:e8:
d2:84:0a:4b:d9:b7:6e:8a:b0:56:e5:7b:83:e9:2f:
a1:1c:5b:53:84:f4:7e:05:fe:14:90:e6:a2:b4:3d:
60:0e:cc:40:1a:90:9c:21:92:97:25:fb:5f:2e:08:
e7:46:ff:4d:0d:8d:03:88:33:1e:b0:ff:71:16:d1:
36:18:e2:23:d0:16:fb:5a:61:db:c5:75:4d:dd:69:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:44:13:3D:8D:3D:21:DC:C5:75:4E:6B:09:0F:83:6F:34:29:B7:90
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/30QTPY09IdzFdU5rCQ-DbzQpt5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.139.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:d7:9e:4b:49:89:27:46:02:ac:ac:f0:25:e0:ad:1c:01:4d:
cb:07:f3:60:1f:0b:6b:56:fd:57:17:a9:52:3c:25:95:9f:a9:
39:2a:95:98:82:22:e4:fd:a6:63:41:15:6c:4d:9c:97:9e:dc:
31:f3:c2:ec:bb:9a:f3:73:1f:63:35:15:db:8c:3e:75:cc:c8:
58:34:f8:6c:01:fb:0b:73:4e:79:9b:fd:24:bd:32:19:05:6f:
32:6c:32:c1:06:7e:f7:9b:5a:1d:6d:7d:93:0c:29:8e:e9:7c:
a7:cf:bd:e0:e9:91:7b:e8:58:27:ce:71:f0:77:c4:3c:64:93:
bc:89:a5:2b:5a:06:7e:f6:55:2b:dd:76:23:63:a5:e3:43:cd:
b1:01:4f:9f:51:97:10:f3:18:5c:88:27:ea:92:e4:be:38:4a:
4c:56:1c:eb:b2:95:00:55:1e:9c:3e:b8:7e:66:f9:a9:ce:98:
2a:d1:ba:e5:5d:6d:6f:c9:e1:b5:0c:e1:8c:fa:41:87:54:1b:
78:13:3b:d2:39:8d:5c:9f:5c:4a:65:18:f8:15:cf:37:ee:ee:
49:e1:02:fa:22:14:dd:44:72:cc:62:73:96:78:7b:e7:df:2f:
6b:8c:55:a0:1a:20:36:5c:b2:62:82:7e:b7:cf:04:26:5e:19:
a1:ec:5f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 15:15:13 2024 by rpki-client on console-ams.rpki-client.org