Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/S7-WGfPJJF97-2XcVeIO8ZAxJnk.roa
File: S7-WGfPJJF97-2XcVeIO8ZAxJnk.roa (raw, json)
Hash identifier: n8CLOFt+lNWYynuROKfOel6cvBN7ZQ8h1ZieCZ/xyLE=
Subject key identifier: 4B:BF:96:19:F3:C9:24:5F:7B:FB:65:DC:55:E2:0E:F1:90:31:26:79
Certificate issuer: /CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Certificate serial: 018890ED031A7F1B5B4EA9FCF0E87B4D29BA
Authority key identifier: 4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/S7-WGfPJJF97-2XcVeIO8ZAxJnk.roa
Signing time: Tue 06 Jun 2023 13:37:11 +0000
ROA not before: Tue 06 Jun 2023 13:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 176.65.140.0/24 maxlen: 24
176.65.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Aug 2023 16:34:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:ed:03:1a:7f:1b:5b:4e:a9:fc:f0:e8:7b:4d:29:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca66f3c0f25774e696d2a46723277eb961128c3
Validity
Not Before: Jun 6 13:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bbf9619f3c9245f7bfb65dc55e20ef190312679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:51:76:c0:e4:62:c2:e6:c2:b0:08:67:90:da:
99:3c:08:35:fd:12:26:25:e7:3a:48:91:21:a7:22:
1f:3b:11:a8:72:d9:bc:cf:e1:dc:f2:bf:b4:18:28:
75:9b:bc:20:49:d9:0f:ee:75:fe:a6:f8:fc:78:3a:
65:7d:22:cb:b3:fe:ab:c7:8d:01:fd:30:1d:26:9e:
d1:40:42:b0:12:36:60:1e:73:cb:82:9a:01:00:2f:
34:b9:39:c9:f0:8a:95:10:9f:97:57:8e:12:22:98:
d1:2a:35:45:92:16:47:1c:48:ce:b1:f1:3a:20:1e:
d2:9d:cc:c7:40:0e:09:63:d6:de:09:bb:22:26:af:
62:85:41:a7:ea:03:43:3a:dc:ca:52:8b:8d:c7:fc:
65:55:d9:ba:01:ac:51:74:7d:a1:38:24:1d:ef:81:
a6:be:82:72:54:69:20:35:d3:76:fa:2c:cf:e7:43:
3e:a6:db:01:7f:fc:12:cb:99:81:eb:ea:60:45:29:
cf:38:1d:7b:9d:d5:a9:ab:f8:c2:35:47:1d:55:9e:
be:28:5e:a2:45:a6:0a:3f:74:14:f5:60:9c:41:3e:
76:45:39:de:59:62:8b:89:e2:6c:26:a6:d6:66:f3:
b3:2b:d2:bc:5c:2d:b8:17:1e:06:e7:59:9f:5e:00:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:96:19:F3:C9:24:5F:7B:FB:65:DC:55:E2:0E:F1:90:31:26:79
X509v3 Authority Key Identifier:
keyid:4C:A6:6F:3C:0F:25:77:4E:69:6D:2A:46:72:32:77:EB:96:11:28:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKZvPA8ld05pbSpGcjJ365YRKMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/S7-WGfPJJF97-2XcVeIO8ZAxJnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/204017-f046-4b69-b3e5-319b0c874440/1/TKZvPA8ld05pbSpGcjJ365YRKMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.65.140.0/23
Signature Algorithm: sha256WithRSAEncryption
78:42:de:60:0b:f4:c3:cf:a3:6c:8d:28:f6:e3:f2:03:0d:e0:
0f:c7:c6:dc:e4:69:cd:73:ae:d5:24:e1:dc:d9:77:51:75:55:
fd:10:ac:1a:58:e3:ba:47:10:19:9b:44:60:6c:ab:92:f6:13:
8b:e4:78:59:91:5f:5a:c8:c0:40:99:b8:0c:18:7c:16:52:f3:
67:97:d0:3f:ca:2b:b0:40:78:6b:87:7f:50:b5:e4:4b:47:17:
3d:0a:ee:64:b9:e7:39:81:87:8d:fc:9d:9c:a6:ac:44:78:3b:
65:f6:75:a1:45:dc:56:12:ab:54:41:86:5b:02:8e:42:84:77:
b5:70:9e:58:ab:36:b7:18:35:26:9f:65:ef:2f:90:cc:b0:be:
11:1e:8b:29:59:5d:2f:f6:0a:ae:ef:d0:cf:89:c1:56:53:a4:
89:16:72:e7:61:aa:ab:3a:c7:83:33:c6:ac:05:50:10:8b:0e:
2d:c3:42:6e:fe:76:21:7a:f1:17:8c:14:94:1e:01:4a:81:83:
09:c7:28:7b:8e:db:6c:84:5f:3f:d8:67:4f:af:01:c2:77:78:
5a:1d:15:d5:fd:c7:8c:16:13:c3:c7:8c:2a:85:43:2c:d3:d9:
80:e1:c5:4d:a1:23:89:03:87:23:36:7c:92:4d:48:47:bf:83:
a6:0f:99:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiQ7QMafxtbTqn88Oh7TSm6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTY2ZjNjMGYyNTc3NGU2OTZkMmE0NjcyMzI3N2ViOTYx
MTI4YzMwHhcNMjMwNjA2MTMzNzExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmJmOTYxOWYzYzkyNDVmN2JmYjY1ZGM1NWUyMGVmMTkwMzEyNjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFF2wORiwubCsAhnkNqZPAg1/RIm
Jec6SJEhpyIfOxGoctm8z+Hc8r+0GCh1m7wgSdkP7nX+pvj8eDplfSLLs/6rx40B
/TAdJp7RQEKwEjZgHnPLgpoBAC80uTnJ8IqVEJ+XV44SIpjRKjVFkhZHHEjOsfE6
IB7SnczHQA4JY9beCbsiJq9ihUGn6gNDOtzKUouNx/xlVdm6AaxRdH2hOCQd74Gm
voJyVGkgNdN2+izP50M+ptsBf/wSy5mB6+pgRSnPOB17ndWpq/jCNUcdVZ6+KF6i
RaYKP3QU9WCcQT52RTneWWKLieJsJqbWZvOzK9K8XC24Fx4G51mfXgA69wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEu/lhnzySRfe/tl3FXiDvGQMSZ5MB8GA1UdIwQY
MBaAFEymbzwPJXdOaW0qRnIyd+uWESjDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUt
MzE5YjBjODc0NDQwLzEvUzctV0dmUEpKRjk3LTJYY1ZlSU84WkF4Sm5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8yMDQwMTctZjA0Ni00YjY5LWIzZTUtMzE5YjBjODc0NDQw
LzEvVEtadlBBOGxkMDVwYlNwR2NqSjM2NVlSS01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsEGMMA0G
CSqGSIb3DQEBCwUAA4IBAQB4Qt5gC/TDz6NsjSj24/IDDeAPx8bc5GnNc67VJOHc
2XdRdVX9EKwaWOO6RxAZm0RgbKuS9hOL5HhZkV9ayMBAmbgMGHwWUvNnl9A/yiuw
QHhrh39QteRLRxc9Cu5kuec5gYeN/J2cpqxEeDtl9nWhRdxWEqtUQYZbAo5ChHe1
cJ5Yqza3GDUmn2XvL5DMsL4RHospWV0v9gqu79DPicFWU6SJFnLnYaqrOseDM8as
BVAQiw4tw0Ju/nYhevEXjBSUHgFKgYMJxyh7jttshF8/2GdPrwHCd3haHRXV/ceM
FhPDx4wqhUMs09mA4cVNoSOJA4cjNnySTUhHv4OmD5mb
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:30 2024 by rpki-client on console-ams.rpki-client.org