Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/gYbwz88dVljxKgGnylBcaKvuEUE.roa
File: gYbwz88dVljxKgGnylBcaKvuEUE.roa (raw, json)
Hash identifier: aPkzcjMIOenSHfCHuxVud7NcDw5vJROS8bYXfstfRrE=
Subject key identifier: 81:86:F0:CF:CF:1D:56:58:F1:2A:01:A7:CA:50:5C:68:AB:EE:11:41
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 018C2C7A9A0517571874A6C2AE1CECBAB9C9
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/gYbwz88dVljxKgGnylBcaKvuEUE.roa
Signing time: Sat 02 Dec 2023 21:41:21 +0000
ROA not before: Sat 02 Dec 2023 21:41:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 141.226.240.0/24 maxlen: 24
141.226.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Dec 2023 09:38:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2c:7a:9a:05:17:57:18:74:a6:c2:ae:1c:ec:ba:b9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Dec 2 21:41:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8186f0cfcf1d5658f12a01a7ca505c68abee1141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:22:8d:64:5d:ed:19:7c:a3:4e:d7:bc:26:
e9:a1:8a:ce:80:64:70:d8:af:91:ae:d4:f6:2f:54:
16:85:da:e9:de:06:94:47:73:e5:27:37:68:ce:65:
42:88:55:36:2c:8a:f4:e4:f1:41:c4:fd:79:97:7f:
c1:53:cc:66:5f:e3:57:f7:35:f9:a6:44:c5:2a:c0:
1b:0b:da:06:52:33:e6:d3:ea:f6:9b:c6:99:a2:a7:
bc:f3:ce:de:a4:96:3f:c2:7a:d8:ac:c4:e2:d8:c5:
fd:6e:61:bb:3e:ae:e5:cd:b2:1f:35:9c:0a:9f:4c:
de:3c:0c:df:24:43:60:22:bc:b7:43:c8:03:df:fa:
ae:cb:fd:a7:79:d1:e3:31:be:04:67:5e:07:15:06:
d1:05:c2:ea:a1:8e:47:b9:47:8d:5c:3d:3f:bb:6b:
ee:f3:eb:55:26:5e:ba:1d:06:e8:1f:64:9f:df:39:
be:68:de:c6:29:6f:cc:1f:91:31:fa:f2:15:b8:9d:
55:c0:ab:32:50:ef:75:0a:fb:32:cd:06:7e:ef:3e:
59:83:89:a5:0a:42:79:5a:e5:04:ce:d3:d1:fd:97:
0f:dd:81:99:ad:97:43:1d:3d:b4:49:9d:1b:b7:b8:
6f:5c:f4:a2:a5:0b:13:8a:15:4b:a8:f9:30:33:a3:
b3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:86:F0:CF:CF:1D:56:58:F1:2A:01:A7:CA:50:5C:68:AB:EE:11:41
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/gYbwz88dVljxKgGnylBcaKvuEUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.226.240.0/24
141.226.246.0/24
Signature Algorithm: sha256WithRSAEncryption
74:cc:c3:d2:2d:f1:ff:f2:09:24:dc:d8:5b:b7:3c:79:48:4f:
43:7e:14:f6:03:be:4c:97:5a:5b:02:ae:33:e2:5b:23:79:5f:
e6:07:5b:b1:f9:54:34:7e:ec:68:99:26:5c:87:88:93:67:40:
df:2b:ab:9e:4b:09:35:89:b0:92:06:92:d6:7f:58:10:c4:a3:
50:53:92:1b:18:df:d8:5d:ec:27:42:5b:26:35:7b:0c:ab:53:
ca:a7:90:4a:2a:ef:0e:f1:c4:9e:1c:9d:9b:ec:07:a2:58:72:
94:4a:a4:6f:df:db:b9:b9:d3:e5:80:77:e0:6b:f7:d7:31:e8:
c2:61:a8:0c:58:a2:16:1f:9a:9a:72:ce:52:d1:ce:b1:03:70:
72:a3:ce:aa:c1:b8:3c:ef:4f:1e:c8:c9:b9:51:26:52:34:3a:
12:86:cd:70:5e:a1:35:65:cf:9d:a0:51:71:b6:65:ec:0f:b6:
52:bf:c1:cb:7c:7b:a3:de:b9:1d:7b:70:44:60:29:8c:b6:b3:
ad:2b:72:e5:bd:f4:c2:71:fe:43:95:08:5c:bd:fb:77:09:06:
64:f1:1b:fe:6c:0d:e6:ca:6a:87:8d:c2:c8:7b:64:82:fb:fb:
20:67:4f:d7:2a:a8:8e:11:78:14:65:77:ee:54:d0:0e:45:b7:
25:2d:3d:60
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYwsepoFF1cYdKbCrhzsurnJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjMxMjAyMjE0MTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTg2ZjBjZmNmMWQ1NjU4ZjEyYTAxYTdjYTUwNWM2OGFiZWUxMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzswijWRd7Rl8o07XvCbpoYrOgGRw
2K+RrtT2L1QWhdrp3gaUR3PlJzdozmVCiFU2LIr05PFBxP15l3/BU8xmX+NX9zX5
pkTFKsAbC9oGUjPm0+r2m8aZoqe8887epJY/wnrYrMTi2MX9bmG7Pq7lzbIfNZwK
n0zePAzfJENgIry3Q8gD3/quy/2nedHjMb4EZ14HFQbRBcLqoY5HuUeNXD0/u2vu
8+tVJl66HQboH2Sf3zm+aN7GKW/MH5Ex+vIVuJ1VwKsyUO91CvsyzQZ+7z5Zg4ml
CkJ5WuUEztPR/ZcP3YGZrZdDHT20SZ0bt7hvXPSipQsTihVLqPkwM6Oz4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIGG8M/PHVZY8SoBp8pQXGir7hFBMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvZ1lid3o4OGRWbGp4S2dHbnlsQmNhS3Z1RVVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjeLwAwQA
jeL2MA0GCSqGSIb3DQEBCwUAA4IBAQB0zMPSLfH/8gkk3Nhbtzx5SE9DfhT2A75M
l1pbAq4z4lsjeV/mB1ux+VQ0fuxomSZch4iTZ0DfK6ueSwk1ibCSBpLWf1gQxKNQ
U5IbGN/YXewnQlsmNXsMq1PKp5BKKu8O8cSeHJ2b7AeiWHKUSqRv39u5udPlgHfg
a/fXMejCYagMWKIWH5qacs5S0c6xA3Byo86qwbg8708eyMm5USZSNDoShs1wXqE1
Zc+doFFxtmXsD7ZSv8HLfHuj3rkde3BEYCmMtrOtK3LlvfTCcf5DlQhcvft3CQZk
8Rv+bA3mymqHjcLIe2SC+/sgZ0/XKqiOEXgUZXfuVNAORbclLT1g
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:38 2024 by rpki-client on console-ams.rpki-client.org