Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/7nX6n5U5SzQvQWmt8_WQjOGtM8c.roa
File: 7nX6n5U5SzQvQWmt8_WQjOGtM8c.roa (raw, json)
Hash identifier: yRRi34WJSZmsZyTACNNQ9lfBGOVulj5zEc1WGAJcfAM=
Subject key identifier: EE:75:FA:9F:95:39:4B:34:2F:41:69:AD:F3:F5:90:8C:E1:AD:33:C7
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 01856D2F2881B4E7A42AC951744A28819777
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/7nX6n5U5SzQvQWmt8_WQjOGtM8c.roa
Signing time: Sun 01 Jan 2023 11:54:45 +0000
ROA not before: Sun 01 Jan 2023 11:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198394
IP address blocks: 141.105.164.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:28:81:b4:e7:a4:2a:c9:51:74:4a:28:81:97:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Jan 1 11:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee75fa9f95394b342f4169adf3f5908ce1ad33c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:86:f9:bf:47:5f:aa:de:92:8a:1f:8e:5c:ef:
dd:a6:0c:74:25:ff:1f:d9:2f:93:31:dd:fc:be:8c:
4e:d3:11:78:53:25:07:f4:9b:b1:bc:8d:22:08:8a:
ac:63:20:04:0a:f3:f6:b9:5d:97:5c:2a:14:83:77:
e0:94:b6:6a:9c:d6:d5:c4:51:46:36:5d:bf:46:6d:
b7:cf:68:9a:5d:eb:60:b6:29:95:30:c9:a5:65:0b:
b7:25:a1:a9:d4:15:c8:ff:fb:1e:34:3b:e7:3a:fc:
04:9a:48:bc:b1:17:20:de:d2:2e:ab:17:18:50:69:
71:e6:57:53:53:83:d0:c5:db:be:9a:b3:59:5c:f0:
a4:c3:6f:8d:2a:cf:9f:7a:ce:0a:3f:38:32:46:91:
cc:67:ab:1f:83:1c:ab:d4:b7:b2:43:29:9f:94:fa:
32:d5:88:ac:76:72:26:67:87:9f:1e:1e:50:dc:6a:
e2:a6:8a:e2:50:df:c0:e0:d9:02:12:a0:8c:41:74:
69:7f:6d:84:53:1a:6a:45:11:2b:be:8a:7b:5d:78:
1b:e3:26:ae:d9:d3:83:b0:78:4f:4e:47:68:86:65:
60:3e:5a:19:38:71:3a:bf:1e:43:4f:cc:c9:72:1b:
69:32:7a:0a:ed:79:2a:e9:ce:21:e6:1b:71:6b:cc:
b4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:75:FA:9F:95:39:4B:34:2F:41:69:AD:F3:F5:90:8C:E1:AD:33:C7
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/7nX6n5U5SzQvQWmt8_WQjOGtM8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.164.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:ef:8a:93:9c:3b:8c:e0:e6:73:44:85:88:6d:c9:15:4a:d5:
cd:2e:7f:fe:3a:72:eb:b9:33:90:32:48:65:b6:6f:c9:20:1f:
61:b0:0f:62:e4:bd:0c:82:7c:b7:6f:fe:52:07:57:3c:ca:2f:
4c:d9:7f:45:4c:69:1a:58:02:f3:41:20:a8:0a:43:3a:76:ac:
05:1f:52:db:c2:2d:33:0a:4a:e7:4f:89:91:c8:9d:5e:b6:d7:
ac:ad:e8:b8:1e:88:e1:81:59:2e:74:0d:06:fc:a0:ea:27:e5:
39:53:c7:12:07:67:e2:66:29:cb:3b:88:50:14:81:4c:5e:7b:
ff:7f:73:04:05:ed:4e:9c:09:e0:92:02:4c:55:52:67:05:90:
b9:23:e4:4a:62:8f:3f:76:aa:68:3f:73:63:85:92:03:01:d6:
37:4a:64:58:39:1c:06:5d:9f:27:5d:0d:95:c6:85:92:3c:bd:
da:ae:5e:20:97:ba:5b:dd:f8:31:62:b8:ae:09:cc:9e:99:44:
b6:7d:d5:57:72:93:82:a9:1c:e5:4c:9d:89:18:b1:94:00:c2:
62:3d:2b:eb:43:85:86:70:8b:26:91:66:ba:c4:09:b9:03:08:
aa:7e:6d:f5:f9:1f:fd:a7:d3:58:76:f4:d5:ae:76:94:c5:72:
82:88:e3:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtLyiBtOekKslRdEoogZd3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NzM2NGY1MDI1MzRlODc3MWEwYzYyNTk3OTRjMjZlMjZk
NGJjYTQwHhcNMjMwMTAxMTE1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTc1ZmE5Zjk1Mzk0YjM0MmY0MTY5YWRmM2Y1OTA4Y2UxYWQzM2M3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIb5v0dfqt6Sih+OXO/dpgx0Jf8f
2S+TMd38voxO0xF4UyUH9JuxvI0iCIqsYyAECvP2uV2XXCoUg3fglLZqnNbVxFFG
Nl2/Rm23z2iaXetgtimVMMmlZQu3JaGp1BXI//seNDvnOvwEmki8sRcg3tIuqxcY
UGlx5ldTU4PQxdu+mrNZXPCkw2+NKs+fes4KPzgyRpHMZ6sfgxyr1LeyQymflPoy
1YisdnImZ4efHh5Q3GriporiUN/A4NkCEqCMQXRpf22EUxpqRRErvop7XXgb4yau
2dODsHhPTkdohmVgPloZOHE6vx5DT8zJchtpMnoK7Xkq6c4h5htxa8y0PQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO51+p+VOUs0L0FprfP1kIzhrTPHMB8GA1UdIwQY
MBaAFClzZPUCU06HcaDGJZeUwm4m1LykMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUt
MGEwZjNlNzhhNDkzLzEvN25YNm41VTVTelF2UVdtdDhfV1FqT0d0TThjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8wNDU4MjAtMzU0Ni00MDdjLTgzYTUtMGEwZjNlNzhhNDkz
LzEvS1hOazlRSlRUb2R4b01ZbGw1VENiaWJVdktRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjWmkMA0G
CSqGSIb3DQEBCwUAA4IBAQA674qTnDuM4OZzRIWIbckVStXNLn/+OnLruTOQMkhl
tm/JIB9hsA9i5L0Mgny3b/5SB1c8yi9M2X9FTGkaWALzQSCoCkM6dqwFH1Lbwi0z
CkrnT4mRyJ1ettesrei4HojhgVkudA0G/KDqJ+U5U8cSB2fiZinLO4hQFIFMXnv/
f3MEBe1OnAngkgJMVVJnBZC5I+RKYo8/dqpoP3NjhZIDAdY3SmRYORwGXZ8nXQ2V
xoWSPL3arl4gl7pb3fgxYriuCcyemUS2fdVXcpOCqRzlTJ2JGLGUAMJiPSvrQ4WG
cIsmkWa6xAm5Awiqfm31+R/9p9NYdvTVrnaUxXKCiOOW
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:09 2024 by rpki-client on console-ams.rpki-client.org