Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/07VCnG3-zJxht_QD3wfV7m-Sw2Y.roa
File: 07VCnG3-zJxht_QD3wfV7m-Sw2Y.roa (raw, json)
Hash identifier: perAcHXyr7TNX61XIh0vAqdLW58d2npawvq6C9yjwcU=
Subject key identifier: D3:B5:42:9C:6D:FE:CC:9C:61:B7:F4:03:DF:07:D5:EE:6F:92:C3:66
Certificate issuer: /CN=99ea05fe601cb6801af83793e063f79e3940f030
Certificate serial: 0190C9BEF8B1C50C8A10025226EF4605333A
Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/07VCnG3-zJxht_QD3wfV7m-Sw2Y.roa
Signing time: Fri 19 Jul 2024 06:47:34 +0000
ROA not before: Fri 19 Jul 2024 06:47:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58010
IP address blocks: 185.98.185.0/24 maxlen: 24
185.98.186.0/24 maxlen: 24
185.98.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Aug 2024 20:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c9:be:f8:b1:c5:0c:8a:10:02:52:26:ef:46:05:33:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030
Validity
Not Before: Jul 19 06:47:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3b5429c6dfecc9c61b7f403df07d5ee6f92c366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:4e:01:a0:2e:cb:58:ce:36:a0:91:da:42:
13:20:a5:2a:a8:3e:5e:72:d3:97:3a:5f:cb:bc:70:
e7:64:b5:06:01:ce:a0:c6:29:f3:35:fd:0d:77:3c:
e0:94:6d:fd:42:a2:3d:09:02:45:76:8d:f0:9b:3b:
b2:69:69:a9:70:ad:27:8c:0a:30:e8:96:2d:25:dd:
82:a7:8b:2a:b2:5c:a4:ec:63:2f:23:ec:23:c3:11:
6f:f1:39:75:de:49:f0:f9:de:b6:d6:cb:76:84:a8:
81:51:73:a4:02:b2:27:c3:e6:67:51:f9:be:4f:fb:
61:5d:98:1c:40:f4:dc:59:69:01:2c:57:29:e6:fd:
06:77:cc:1e:27:18:51:4e:66:0a:f6:37:10:8f:4e:
94:73:aa:12:63:6a:36:88:c8:43:af:de:c9:a7:b5:
0c:8b:ac:3b:d7:31:b6:01:3e:63:1c:31:c6:81:cf:
6d:e9:9d:44:22:91:4f:1a:68:1c:93:ff:8a:17:78:
14:6d:d1:8d:a3:e2:c7:3f:9a:c8:74:b2:e6:47:f0:
dc:8c:80:c8:ff:65:2f:3a:8d:eb:4e:f2:b2:4c:da:
ef:97:9f:1d:c6:65:bf:bc:4d:72:a4:55:94:18:13:
10:3d:65:01:98:96:96:27:59:0d:11:cd:fa:ee:33:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B5:42:9C:6D:FE:CC:9C:61:B7:F4:03:DF:07:D5:EE:6F:92:C3:66
X509v3 Authority Key Identifier:
keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/07VCnG3-zJxht_QD3wfV7m-Sw2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.185.0-185.98.187.255
Signature Algorithm: sha256WithRSAEncryption
02:88:7c:ad:b8:2c:c1:de:ef:8f:43:4f:e6:b6:99:99:95:08:
23:12:27:88:20:c3:b8:2c:8e:64:ca:49:36:68:dc:8a:9c:11:
8c:cc:ec:dd:5c:31:34:60:08:e4:b7:da:06:2c:bb:a6:84:c0:
f8:df:87:7f:5a:75:80:9a:2f:7e:d7:13:35:0f:95:0f:e7:9e:
a2:ae:16:53:61:51:8a:7e:aa:90:0c:1b:15:85:32:0e:41:0e:
97:00:e3:be:a4:a7:89:96:33:ed:40:fa:70:45:ad:31:24:bf:
e7:21:88:d5:09:1f:04:f7:df:9c:13:91:6c:2f:2c:ce:83:bc:
b4:a6:db:0f:4a:b9:3d:98:9e:04:1c:8a:0c:cd:d2:91:4f:51:
81:09:d5:3c:d5:2b:2b:26:45:4b:d9:ad:b5:2b:0e:82:c1:17:
13:4a:ef:49:f6:bf:cc:3a:ae:24:6a:b7:9d:88:28:7c:b9:a3:
a2:53:8f:d0:f8:e4:9c:92:7b:bb:ac:7c:78:fa:3e:cc:22:84:
9f:87:23:c0:99:00:10:7a:0e:68:2b:1f:12:f8:d9:2f:24:9c:
cc:3a:22:a3:54:50:c7:fd:46:ed:b7:e1:e9:03:3c:60:5d:90:
b0:eb:ac:77:b8:31:17:37:0a:46:28:47:6a:14:08:48:3c:a0:
07:ab:98:99
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZDJvvixxQyKEAJSJu9GBTM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZWEwNWZlNjAxY2I2ODAxYWY4Mzc5M2UwNjNmNzllMzk0
MGYwMzAwHhcNMjQwNzE5MDY0NzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2I1NDI5YzZkZmVjYzljNjFiN2Y0MDNkZjA3ZDVlZTZmOTJjMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohJOAaAuy1jONqCR2kITIKUqqD5e
ctOXOl/LvHDnZLUGAc6gxinzNf0NdzzglG39QqI9CQJFdo3wmzuyaWmpcK0njAow
6JYtJd2Cp4sqslyk7GMvI+wjwxFv8Tl13knw+d621st2hKiBUXOkArInw+ZnUfm+
T/thXZgcQPTcWWkBLFcp5v0Gd8weJxhRTmYK9jcQj06Uc6oSY2o2iMhDr97Jp7UM
i6w71zG2AT5jHDHGgc9t6Z1EIpFPGmgck/+KF3gUbdGNo+LHP5rIdLLmR/DcjIDI
/2UvOo3rTvKyTNrvl58dxmW/vE1ypFWUGBMQPWUBmJaWJ1kNEc367jOpkQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNO1Qpxt/sycYbf0A98H1e5vksNmMB8GA1UdIwQY
MBaAFJnqBf5gHLaAGvg3k+Bj9545QPAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVvRl9tQWN0b0FhLURlVDRHUDNuamxBOERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzBhNjktZTQ0Yy00OGRhLWI3NjMt
MzdjZmQ0YTY0ZmYxLzEvMDdWQ25HMy16SnhodF9RRDN3ZlY3bS1TdzJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85YzBhNjktZTQ0Yy00OGRhLWI3NjMtMzdjZmQ0YTY0ZmYx
LzEvbWVvRl9tQWN0b0FhLURlVDRHUDNuamxBOERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5YrkD
BAK5YrgwDQYJKoZIhvcNAQELBQADggEBAAKIfK24LMHe749DT+a2mZmVCCMSJ4gg
w7gsjmTKSTZo3IqcEYzM7N1cMTRgCOS32gYsu6aEwPjfh39adYCaL37XEzUPlQ/n
nqKuFlNhUYp+qpAMGxWFMg5BDpcA476kp4mWM+1A+nBFrTEkv+chiNUJHwT335wT
kWwvLM6DvLSm2w9KuT2YngQcigzN0pFPUYEJ1TzVKysmRUvZrbUrDoLBFxNK70n2
v8w6riRqt52IKHy5o6JTj9D45JySe7usfHj6PswihJ+HI8CZABB6DmgrHxL42S8k
nMw6IqNUUMf9Ru234ekDPGBdkLDrrHe4MRc3CkYoR2oUCEg8oAermJk=
-----END CERTIFICATE-----
Generated at Wed Aug 7 22:21:34 2024 by rpki-client on console-ams.rpki-client.org