Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/sYkJRoU7xgErIJ9Oq2U_0dPjaEo.roa
File: sYkJRoU7xgErIJ9Oq2U_0dPjaEo.roa (raw, json)
Hash identifier: /b1nGCp62f3saG4vOTFMn6+RIeEN3q+c05ZQWlRUf5U=
Subject key identifier: B1:89:09:46:85:3B:C6:01:2B:20:9F:4E:AB:65:3F:D1:D3:E3:68:4A
Certificate issuer: /CN=b7ae676ffc66234f33db5238798ab979f986c82d
Certificate serial: 01856FF98E1AFE375F98A11A8E81DB88244A
Authority key identifier: B7:AE:67:6F:FC:66:23:4F:33:DB:52:38:79:8A:B9:79:F9:86:C8:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t65nb_xmI08z21I4eYq5efmGyC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/sYkJRoU7xgErIJ9Oq2U_0dPjaEo.roa
Signing time: Mon 02 Jan 2023 00:55:03 +0000
ROA not before: Mon 02 Jan 2023 00:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31214
IP address blocks: 141.98.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 16 Jan 2023 09:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:8e:1a:fe:37:5f:98:a1:1a:8e:81:db:88:24:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae676ffc66234f33db5238798ab979f986c82d
Validity
Not Before: Jan 2 00:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1890946853bc6012b209f4eab653fd1d3e3684a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:59:f4:e1:b9:d5:29:87:ec:e0:55:8e:7f:e8:
91:f1:6c:a3:2a:85:c6:84:79:e7:1f:0e:96:9e:6a:
48:8c:e7:8c:b3:ed:7e:a4:2b:3b:aa:65:56:a7:95:
59:e5:66:fe:44:4f:e0:85:ee:b2:b8:60:4e:52:2c:
bc:89:78:ae:f4:26:4c:e8:37:f8:72:80:e8:10:d9:
f2:45:77:c0:e2:39:54:50:e8:a3:39:84:bb:f4:06:
ae:b1:bd:1d:20:3b:5d:bc:9d:84:c2:ab:d0:71:27:
b5:26:82:24:c1:d0:1c:42:aa:f3:70:a4:27:58:e2:
4a:3b:e0:eb:69:f6:49:ae:52:c8:e7:ba:a6:9d:79:
36:d6:17:98:4b:0e:d4:51:45:02:bb:d0:9a:fa:d9:
0b:e4:fd:17:38:c9:c6:15:ef:5a:a2:9b:96:f0:2c:
6c:2a:08:a9:76:ec:25:94:6f:bb:69:54:ca:9a:fd:
8f:92:66:ca:d5:e2:b3:42:ca:38:39:30:b8:34:24:
09:bc:87:71:cd:da:6d:fb:30:e7:ad:dc:c4:df:42:
49:9b:89:b1:fc:4d:51:7d:aa:7e:f8:79:3e:ab:bb:
a5:a3:bb:75:ac:a6:91:30:27:39:a9:0f:63:42:0e:
c2:21:53:d9:e7:c0:1f:cb:9b:fb:80:25:74:d4:52:
d9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:89:09:46:85:3B:C6:01:2B:20:9F:4E:AB:65:3F:D1:D3:E3:68:4A
X509v3 Authority Key Identifier:
keyid:B7:AE:67:6F:FC:66:23:4F:33:DB:52:38:79:8A:B9:79:F9:86:C8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t65nb_xmI08z21I4eYq5efmGyC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/sYkJRoU7xgErIJ9Oq2U_0dPjaEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/t65nb_xmI08z21I4eYq5efmGyC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.28.0/22
Signature Algorithm: sha256WithRSAEncryption
11:87:56:69:66:09:51:de:13:cf:4c:8d:4d:8c:27:b1:62:b5:
fe:65:fe:67:62:e8:29:27:3b:e0:c8:96:98:d4:bc:5b:86:dd:
b9:db:39:9a:e9:26:bd:5e:5b:13:2c:62:e0:de:a3:74:5c:d9:
20:7e:63:9b:48:6d:bc:5c:d2:41:89:3f:17:6b:4e:d4:c7:8e:
f2:f7:a5:c2:bb:41:cf:f3:57:45:72:2e:5e:44:a4:3f:64:e0:
36:90:0b:8c:54:c0:6d:c8:70:eb:40:97:7c:b6:8f:26:0d:b6:
60:89:ff:41:ca:da:e8:4b:00:c9:f1:ee:08:0a:6c:41:64:c0:
a1:bc:25:d5:0c:6c:01:f0:f3:65:64:25:48:5f:95:d1:8c:d6:
e7:69:1c:47:d6:80:2a:a2:67:0b:13:0c:67:cb:0a:8a:87:5e:
2e:18:63:db:5e:97:11:24:86:25:9d:39:95:83:06:3b:e4:ec:
6b:a9:6a:1f:05:5a:fe:60:aa:8a:cf:0b:b0:9d:51:a3:87:b9:
b2:42:83:44:93:a4:8e:40:a5:4d:de:0a:50:16:c5:32:1f:77:
dc:ef:f8:b4:68:0c:a0:aa:c7:9a:8a:95:23:dd:03:c7:be:03:
13:ca:47:5b:c1:45:e4:5d:ee:d4:e3:4a:a2:6f:26:69:25:e6:
a8:e8:6a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:17 2024 by rpki-client on console-ams.rpki-client.org