Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/jG6C1oxkXzf0NVN01Y-0P1jQJt8.roa
File: jG6C1oxkXzf0NVN01Y-0P1jQJt8.roa (raw, json)
Hash identifier: sj/9GakQL0VE53jRahu2FtnrcVQdoKC4SElEGxehvL4=
Subject key identifier: 8C:6E:82:D6:8C:64:5F:37:F4:35:53:74:D5:8F:B4:3F:58:D0:26:DF
Certificate issuer: /CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Certificate serial: 01856F42B264954D9E5EDCAB172733CB0B30
Authority key identifier: 2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/jG6C1oxkXzf0NVN01Y-0P1jQJt8.roa
Signing time: Sun 01 Jan 2023 21:35:20 +0000
ROA not before: Sun 01 Jan 2023 21:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6900
IP address blocks: 141.93.0.0/16 maxlen: 24
141.93.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Feb 2023 15:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:b2:64:95:4d:9e:5e:dc:ab:17:27:33:cb:0b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f117ada3cb9515a6d8a6dcc15f2b0b1a7d9be1d
Validity
Not Before: Jan 1 21:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c6e82d68c645f37f4355374d58fb43f58d026df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:e0:00:1a:e7:e2:75:e1:88:65:dc:22:99:
1b:35:a7:07:39:60:9c:14:da:25:fb:1b:26:52:1c:
00:29:b4:91:88:c2:dd:a7:18:a1:fb:a6:00:c4:c9:
2e:23:1b:b9:eb:00:cf:4a:33:1d:06:58:3a:9e:77:
ec:e9:5c:27:69:77:3f:16:47:c5:4a:74:b5:ad:73:
f6:f1:82:36:26:af:2b:0c:02:4b:85:04:b6:9d:5f:
9c:c2:5c:3f:42:82:c5:88:dd:29:47:c7:c1:f3:41:
7b:c4:dd:c6:d9:87:2b:10:f1:bc:1e:99:7c:61:ae:
ff:b4:66:f9:b1:1a:7d:4f:99:79:df:c3:b3:d9:a7:
9f:e1:d7:74:6a:07:80:57:d5:34:e4:a2:4e:34:cf:
6a:66:92:f7:6b:ed:9e:f9:08:93:4f:ec:e6:b3:e8:
22:fd:78:38:6a:83:2e:46:c3:c2:8e:2d:28:0f:6e:
e1:a2:07:a8:e8:be:15:09:14:b4:5f:55:56:6b:bd:
57:4f:a9:04:5c:da:6c:ed:4e:13:97:d6:7b:74:2d:
94:eb:5f:f0:4e:e9:d3:e9:36:df:7f:da:a5:e5:dc:
1e:5b:c5:db:3b:6d:77:1b:cd:80:97:d1:2c:41:b1:
93:bd:6b:ae:21:01:e7:14:34:7b:4c:e0:17:b3:41:
ae:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6E:82:D6:8C:64:5F:37:F4:35:53:74:D5:8F:B4:3F:58:D0:26:DF
X509v3 Authority Key Identifier:
keyid:2F:11:7A:DA:3C:B9:51:5A:6D:8A:6D:CC:15:F2:B0:B1:A7:D9:BE:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxF62jy5UVptim3MFfKwsafZvh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/jG6C1oxkXzf0NVN01Y-0P1jQJt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eff44d-24fd-4384-9507-7a034d170b85/1/LxF62jy5UVptim3MFfKwsafZvh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
00:3f:b0:9f:35:31:06:e0:f1:05:b5:06:25:f4:04:ba:63:66:
64:5a:d9:62:36:6f:c9:dd:09:8a:ab:aa:1f:5d:58:9a:07:8e:
86:a9:b7:27:3f:99:1b:9e:21:c9:07:58:b6:1d:36:a9:08:c3:
65:a5:f1:c0:0e:5d:3c:f0:cf:c2:c9:52:60:7e:5c:cc:e7:a1:
ae:ae:15:66:7d:9d:70:e1:6a:fa:8e:ea:4f:02:52:1e:7e:31:
b3:46:98:9c:89:17:e2:63:c0:1f:9f:57:bd:8d:90:e3:59:d6:
54:0b:cc:05:d0:ec:2e:ab:ec:1c:23:17:44:d1:d7:b5:16:23:
f6:ca:ca:f2:aa:b8:62:5a:6d:bf:86:bf:82:3d:d8:19:fd:b5:
9f:d6:c4:6a:44:ff:c0:63:f2:d1:f3:2b:10:84:92:e0:3f:63:
10:ac:a9:28:07:1d:dd:be:94:0d:d6:cc:b6:9c:a2:ae:6d:81:
9a:52:19:cf:92:5c:62:59:aa:0e:bb:20:f5:7e:e1:1e:44:ff:
30:ac:d5:00:11:b5:ea:29:55:9f:4a:8b:82:ec:fa:8a:f6:08:
2e:d5:1b:2b:d9:33:e2:06:8e:eb:e8:01:ec:a6:8d:98:ab:b9:
a8:93:38:3d:b2:80:8f:53:b4:25:1e:7b:7b:f5:25:76:77:a7:
87:0d:10:ce
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVvQrJklU2eXtyrFyczywswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTE3YWRhM2NiOTUxNWE2ZDhhNmRjYzE1ZjJiMGIxYTdk
OWJlMWQwHhcNMjMwMTAxMjEzNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzZlODJkNjhjNjQ1ZjM3ZjQzNTUzNzRkNThmYjQzZjU4ZDAyNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlTgABrn4nXhiGXcIpkbNacHOWCc
FNol+xsmUhwAKbSRiMLdpxih+6YAxMkuIxu56wDPSjMdBlg6nnfs6VwnaXc/FkfF
SnS1rXP28YI2Jq8rDAJLhQS2nV+cwlw/QoLFiN0pR8fB80F7xN3G2YcrEPG8Hpl8
Ya7/tGb5sRp9T5l538Oz2aef4dd0ageAV9U05KJONM9qZpL3a+2e+QiTT+zms+gi
/Xg4aoMuRsPCji0oD27hogeo6L4VCRS0X1VWa71XT6kEXNps7U4Tl9Z7dC2U61/w
TunT6Tbff9ql5dweW8XbO213G82Al9EsQbGTvWuuIQHnFDR7TOAXs0GuHQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFIxugtaMZF839DVTdNWPtD9Y0CbfMB8GA1UdIwQY
MBaAFC8Reto8uVFabYptzBXysLGn2b4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDct
N2EwMzRkMTcwYjg1LzEvakc2QzFveGtYemYwTlZOMDFZLTBQMWpRSnQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lZmY0NGQtMjRmZC00Mzg0LTk1MDctN2EwMzRkMTcwYjg1
LzEvTHhGNjJqeTVVVnB0aW0zTUZmS3dzYWZadmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjV0wDQYJ
KoZIhvcNAQELBQADggEBAAA/sJ81MQbg8QW1BiX0BLpjZmRa2WI2b8ndCYqrqh9d
WJoHjoaptyc/mRueIckHWLYdNqkIw2Wl8cAOXTzwz8LJUmB+XMznoa6uFWZ9nXDh
avqO6k8CUh5+MbNGmJyJF+JjwB+fV72NkONZ1lQLzAXQ7C6r7BwjF0TR17UWI/bK
yvKquGJabb+Gv4I92Bn9tZ/WxGpE/8Bj8tHzKxCEkuA/YxCsqSgHHd2+lA3WzLac
oq5tgZpSGc+SXGJZqg67IPV+4R5E/zCs1QARteopVZ9Ki4Ls+or2CC7VGyvZM+IG
juvoAeymjZiruaiTOD2ygI9TtCUee3v1JXZ3p4cNEM4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org