Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/05eHwudqjMefN0NkhDR_DPGOw7w.roa
File: 05eHwudqjMefN0NkhDR_DPGOw7w.roa (raw, json)
Hash identifier: 69YxNYRPoIhV+Au5LSNHMbsQIYieFnD3EhKY03C8wNo=
Subject key identifier: D3:97:87:C2:E7:6A:8C:C7:9F:37:43:64:84:34:7F:0C:F1:8E:C3:BC
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A43964E4DF77AC6F84EDE6D62A65E
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/05eHwudqjMefN0NkhDR_DPGOw7w.roa
Signing time: Sun 01 Jan 2023 03:05:07 +0000
ROA not before: Sun 01 Jan 2023 03:05:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207288
IP address blocks: 141.101.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:43:96:4e:4d:f7:7a:c6:f8:4e:de:6d:62:a6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d39787c2e76a8cc79f37436484347f0cf18ec3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:af:0d:d5:bc:3f:e4:bf:d6:a0:9e:01:95:
28:7c:37:4d:b2:6a:83:72:25:0e:24:ff:ea:db:ea:
08:9d:e9:87:d7:c1:2c:52:56:cc:36:6b:2b:62:cc:
52:ac:36:5b:0c:07:2d:d3:02:8c:5e:0e:96:4f:7c:
c3:e3:fb:e2:4f:37:f3:70:15:23:b4:3a:2c:a8:05:
46:cc:6b:3e:f1:48:66:1f:1c:fb:b9:19:4f:84:b2:
bc:0b:cc:4b:69:4d:72:71:2e:99:75:0e:8a:74:b5:
b3:4f:3b:a7:e7:00:dc:8d:47:3e:c4:c5:34:a9:50:
15:69:f2:58:b3:66:68:38:64:ae:e6:b3:0a:58:af:
c2:99:d9:6e:c9:c9:b2:7c:74:9f:a9:f7:4f:6e:2f:
74:ff:47:dc:3b:b7:bd:84:9a:a2:e4:bc:3e:54:70:
58:2d:60:15:97:95:75:62:dd:79:83:e3:6c:d9:9c:
48:f7:73:2a:3c:1e:18:d5:7b:29:97:b1:cc:86:0d:
ab:fa:ba:df:50:75:fe:2d:96:35:ac:31:90:2c:8a:
e5:0f:ec:5d:13:96:d8:a0:d7:61:bb:99:b6:11:fe:
fd:30:03:50:23:5e:73:f1:0d:06:4a:31:59:0a:70:
ec:23:39:98:05:7e:b9:da:19:00:6f:7b:54:51:95:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:97:87:C2:E7:6A:8C:C7:9F:37:43:64:84:34:7F:0C:F1:8E:C3:BC
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/05eHwudqjMefN0NkhDR_DPGOw7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.223.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:40:46:73:11:bc:6b:d7:03:2b:47:95:68:d5:df:22:6d:86:
77:8e:51:13:e1:76:4e:d9:b0:f4:56:ce:c8:9a:44:b8:4b:c1:
3c:c1:8b:5c:00:28:20:76:c0:22:9d:7b:ac:ca:57:67:50:07:
31:92:73:98:8f:49:48:df:11:4e:53:ff:a0:e1:e9:22:e6:91:
4d:12:2d:d3:e9:7b:5d:64:e1:51:27:ac:3d:55:19:56:ca:81:
22:d3:50:83:67:b6:5e:3e:34:5e:d7:5f:66:dd:12:33:22:fe:
94:05:52:c0:e9:34:c9:fc:15:c4:2c:14:a8:32:19:53:a2:65:
a0:36:32:df:e3:8d:38:83:44:d7:db:3f:6d:3c:21:23:05:ca:
d4:78:4c:df:68:b5:a0:5b:58:3c:12:a7:67:7b:8b:fb:97:8c:
eb:a0:71:40:d2:cb:1c:ff:1c:54:86:99:91:a5:ee:74:b6:5a:
97:91:f1:b0:45:19:8b:22:6d:7e:6d:3b:75:68:ed:06:8c:59:
c4:07:30:6d:a2:bd:0f:fe:85:7a:6b:18:ec:b8:33:11:45:bb:
0d:97:a1:ce:5e:04:7f:69:01:5e:e7:15:74:fd:2c:a4:43:ca:
67:a0:93:97:ac:a6:59:a2:3a:c8:9f:cd:7f:fa:ab:62:53:27:
03:cf:54:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrSkOWTk33esb4Tt5tYqZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjMwMTAxMDMwNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzk3ODdjMmU3NmE4Y2M3OWYzNzQzNjQ4NDM0N2YwY2YxOGVjM2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8qvDdW8P+S/1qCeAZUofDdNsmqD
ciUOJP/q2+oInemH18EsUlbMNmsrYsxSrDZbDAct0wKMXg6WT3zD4/viTzfzcBUj
tDosqAVGzGs+8UhmHxz7uRlPhLK8C8xLaU1ycS6ZdQ6KdLWzTzun5wDcjUc+xMU0
qVAVafJYs2ZoOGSu5rMKWK/CmdluycmyfHSfqfdPbi90/0fcO7e9hJqi5Lw+VHBY
LWAVl5V1Yt15g+Ns2ZxI93MqPB4Y1Xspl7HMhg2r+rrfUHX+LZY1rDGQLIrlD+xd
E5bYoNdhu5m2Ef79MANQI15z8Q0GSjFZCnDsIzmYBX652hkAb3tUUZXwLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNOXh8LnaozHnzdDZIQ0fwzxjsO8MB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvMDVlSHd1ZHFqTWVmTjBOa2hEUl9EUEdPdzd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWXfMA0G
CSqGSIb3DQEBCwUAA4IBAQDDQEZzEbxr1wMrR5Vo1d8ibYZ3jlET4XZO2bD0Vs7I
mkS4S8E8wYtcACggdsAinXusyldnUAcxknOYj0lI3xFOU/+g4eki5pFNEi3T6Xtd
ZOFRJ6w9VRlWyoEi01CDZ7ZePjRe119m3RIzIv6UBVLA6TTJ/BXELBSoMhlTomWg
NjLf4404g0TX2z9tPCEjBcrUeEzfaLWgW1g8Eqdne4v7l4zroHFA0ssc/xxUhpmR
pe50tlqXkfGwRRmLIm1+bTt1aO0GjFnEBzBtor0P/oV6axjsuDMRRbsNl6HOXgR/
aQFe5xV0/SykQ8pnoJOXrKZZojrIn81/+qtiUycDz1Qv
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:50 2024 by rpki-client on console-fra.rpki-client.org