Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/2WcaeOoJPVyE5GdvR4PAOak6eb8.roa
File: 2WcaeOoJPVyE5GdvR4PAOak6eb8.roa (raw, json)
Hash identifier: ZJuvQmiMkCE0YPtVquy6/cKpy0w7ZJl8bEGi+J8ztM0=
Subject key identifier: D9:67:1A:78:EA:09:3D:5C:84:E4:67:6F:47:83:C0:39:A9:3A:79:BF
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A2AD3EAFEA1BCF99CF8B583CBF643
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/2WcaeOoJPVyE5GdvR4PAOak6eb8.roa
Signing time: Sun 01 Jan 2023 03:05:00 +0000
ROA not before: Sun 01 Jan 2023 03:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51430
IP address blocks: 141.101.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:2a:d3:ea:fe:a1:bc:f9:9c:f8:b5:83:cb:f6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9671a78ea093d5c84e4676f4783c039a93a79bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:21:5a:b8:9d:fe:af:79:18:58:e0:0f:d5:8d:
04:2c:01:4a:e0:c7:8e:6c:29:cc:a1:f0:53:f3:57:
f1:c7:5d:0a:22:3f:39:94:ea:7e:d6:f4:e6:4c:d7:
9f:1b:6f:51:42:01:4f:c6:b1:d2:b9:c4:23:de:ec:
ff:7b:83:1a:7e:66:bd:1e:f4:06:8b:8a:13:10:89:
7d:a2:c3:e8:ea:f6:ea:4a:27:74:40:c5:93:d1:3c:
6a:98:0b:f6:0c:95:f5:36:92:dc:ee:ea:f2:43:5f:
94:2a:49:63:4a:45:71:32:f4:64:f0:d6:e0:15:11:
eb:40:38:fd:be:6c:55:39:b5:0b:88:99:c5:9c:c9:
f1:27:12:06:6a:3a:9e:8c:a3:18:06:80:2d:5c:f6:
05:86:9d:88:1b:4e:c5:27:7c:6c:84:a1:c8:3f:f6:
aa:50:ea:a9:c5:97:80:81:a1:0e:ea:f3:d3:3e:53:
dd:be:ac:02:84:40:e8:34:22:60:67:83:1f:45:26:
00:cc:13:e1:17:a0:35:d1:cb:e6:14:34:c9:72:b9:
5b:52:db:44:04:e9:43:e9:43:ee:b9:41:9f:48:82:
35:c0:26:d2:1f:a1:a0:fa:78:80:8c:77:84:d7:06:
2b:fb:0d:5d:39:e7:d5:81:3d:ef:49:db:74:23:47:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:67:1A:78:EA:09:3D:5C:84:E4:67:6F:47:83:C0:39:A9:3A:79:BF
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/2WcaeOoJPVyE5GdvR4PAOak6eb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.144.0/24
Signature Algorithm: sha256WithRSAEncryption
45:7c:89:f8:e0:47:aa:9a:08:40:22:1c:a8:98:1f:4e:a9:23:
ab:77:65:1d:bb:f3:a7:83:bf:72:33:9e:78:50:18:c2:d3:17:
59:55:a4:f1:26:49:ad:e2:f5:8e:61:37:70:2f:5c:78:01:a4:
55:ca:ae:5d:dc:3f:f1:ee:4b:22:9b:2a:03:37:3e:e6:de:0d:
56:f1:c5:90:81:1a:e6:fe:16:f8:05:63:63:c6:33:9a:39:0f:
4c:4b:a9:1c:0c:0d:70:64:c6:7d:03:cf:a4:68:2c:67:bf:60:
28:16:be:7c:68:b1:c6:30:d1:52:4c:47:b8:9c:fe:93:6f:da:
06:6e:83:71:4c:67:69:3f:f4:cb:e2:fe:cf:1a:be:ac:f8:d5:
85:08:eb:59:7f:d4:ee:30:1e:96:69:08:97:bd:67:78:71:e0:
be:e8:e9:5e:43:eb:b2:f4:4d:3e:9f:28:57:12:92:d7:69:68:
63:b9:59:cd:67:03:84:22:75:f3:49:d9:75:f4:80:06:4f:ae:
e4:25:51:38:97:8f:7a:0f:80:80:be:f5:a1:1c:ed:f5:b8:87:
e7:3a:94:91:a4:e7:b9:10:5b:b2:d9:24:03:d5:04:b3:c3:fd:
b0:e1:74:7c:78:cd:be:34:86:f3:25:0f:1b:74:87:fe:81:95:
db:40:61:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:55 2023 by rpki-client on console-fra.rpki-client.org