Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/OkgXwgagzQOJRi3kBK19WAuJOYw.roa
File: OkgXwgagzQOJRi3kBK19WAuJOYw.roa (raw, json)
Hash identifier: E5pMlUMfnZqukUxbZmHtoSxmLNFbkUeelL38PuOLn30=
Subject key identifier: 3A:48:17:C2:06:A0:CD:03:89:46:2D:E4:04:AD:7D:58:0B:89:39:8C
Certificate issuer: /CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Certificate serial: 018CCA99944C5018D554D94DF81359557C26
Authority key identifier: 78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/OkgXwgagzQOJRi3kBK19WAuJOYw.roa
Signing time: Tue 02 Jan 2024 14:35:11 +0000
ROA not before: Tue 02 Jan 2024 14:35:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209591
IP address blocks: 141.98.124.0/22 maxlen: 24
2a10:2980::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 10 May 2024 16:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:94:4c:50:18:d5:54:d9:4d:f8:13:59:55:7c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=780f86d044a4a2a233319418aa8da9ad837c76ea
Validity
Not Before: Jan 2 14:35:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a4817c206a0cd0389462de404ad7d580b89398c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:85:9b:96:a0:81:0f:ba:a4:b3:ec:45:60:
99:ad:8e:a8:27:05:a3:e4:86:cf:7d:39:4f:ec:a3:
8c:f3:90:0b:6e:a9:d0:db:f0:13:11:18:f8:7d:8c:
57:ab:db:49:bf:06:a6:14:c4:70:ed:a6:c8:a5:96:
40:84:5f:7b:d4:f5:7d:b1:d7:23:1a:db:ab:f9:54:
7c:7c:c1:9e:8e:39:68:19:61:cc:25:95:91:82:fe:
9c:3c:fe:32:da:eb:51:49:8f:ba:cd:b7:14:45:dd:
52:8e:ed:ea:57:0c:27:ff:92:24:f4:24:91:0c:85:
91:c9:2a:44:b7:0a:c6:bc:b9:46:03:b6:d3:e0:37:
a0:75:cb:5a:63:cc:08:35:ce:f7:47:e5:f0:02:80:
a4:1c:68:8d:7d:46:15:3a:43:3c:8a:83:8a:5f:ae:
d4:68:ab:d6:e3:9c:64:e6:33:18:a3:bf:fb:f4:12:
9d:e1:85:0c:99:15:25:43:de:47:4b:b2:04:e2:0d:
1b:c1:22:fc:c3:f4:65:96:80:ba:66:96:25:63:f0:
e2:e5:5e:ff:d3:a9:5b:c2:91:a1:63:b0:11:60:2e:
49:07:0a:35:0d:41:29:14:ec:a0:92:90:77:7d:2f:
c8:ed:e4:c6:20:28:db:04:8e:04:ac:da:2e:cb:ee:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:17:C2:06:A0:CD:03:89:46:2D:E4:04:AD:7D:58:0B:89:39:8C
X509v3 Authority Key Identifier:
keyid:78:0F:86:D0:44:A4:A2:A2:33:31:94:18:AA:8D:A9:AD:83:7C:76:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA-G0ESkoqIzMZQYqo2prYN8duo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/OkgXwgagzQOJRi3kBK19WAuJOYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03cc4f-60c2-475e-9e09-524803ee2949/1/eA-G0ESkoqIzMZQYqo2prYN8duo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.124.0/22
IPv6:
2a10:2980::/29
Signature Algorithm: sha256WithRSAEncryption
7e:fe:43:b3:0a:97:22:e7:94:6c:f4:5f:ee:80:e6:cf:63:55:
25:1e:a0:c8:3e:17:85:42:a6:91:34:28:8e:9b:91:8c:50:37:
c4:78:b6:5d:36:5e:de:b6:13:39:97:f3:48:9c:be:5d:72:2a:
75:4f:04:d6:2b:8d:0a:9e:e8:fc:f2:98:c0:f9:13:52:01:88:
de:13:af:1e:e6:6c:d0:ef:95:bc:91:47:1b:d4:2d:de:2a:c0:
f9:25:bc:33:d8:fa:71:60:d7:25:70:51:db:a5:7a:6a:9f:b3:
43:b8:5c:1b:e5:7e:a3:91:8a:b1:16:23:55:75:bd:1a:b5:24:
d9:af:0a:1c:7d:48:46:93:0f:1a:3a:ba:98:f7:d2:59:70:16:
6e:da:11:09:45:ba:05:7e:73:2d:cc:23:ec:ec:0d:e3:72:03:
7f:3c:31:12:ce:19:46:11:2e:a4:0e:23:88:b0:25:fe:99:d4:
8c:ac:5a:d5:3f:f2:f1:1d:33:a2:33:fe:96:b4:be:46:4d:28:
59:3d:fc:2a:24:6e:07:37:cc:62:68:98:9d:13:fd:f3:9e:f1:
e2:58:d9:93:69:61:e8:4c:70:f6:0d:21:1f:9e:7c:cb:22:a0:
86:49:0c:d3:33:60:4e:14:fc:89:3b:b6:c9:08:b6:43:d1:8a:
c1:19:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 19:34:12 2024 by rpki-client on console-ams.rpki-client.org