Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5QGqa0Jna6n-vileHibm1JvxKps.roa
File: 5QGqa0Jna6n-vileHibm1JvxKps.roa (raw, json)
Hash identifier: W/VGK5XkIY+UF97sRcan1D+eF5m4JiFlZQEw81Dexu8=
Subject key identifier: E5:01:AA:6B:42:67:6B:A9:FE:BE:29:5E:1E:26:E6:D4:9B:F1:2A:9B
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A265D0C342656D9C404B41D2DCF5B
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5QGqa0Jna6n-vileHibm1JvxKps.roa
Signing time: Sun 01 Jan 2023 03:04:59 +0000
ROA not before: Sun 01 Jan 2023 03:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42484
IP address blocks: 141.101.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:26:5d:0c:34:26:56:d9:c4:04:b4:1d:2d:cf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e501aa6b42676ba9febe295e1e26e6d49bf12a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:1f:2e:cd:2a:a2:d2:8c:b2:50:90:42:21:
73:7f:fa:9e:83:bb:aa:50:e3:65:d2:1e:21:c5:ab:
b1:54:ba:69:cc:12:93:5e:c6:6e:75:39:41:d3:2d:
43:14:a3:4f:8a:03:70:72:c8:90:c6:31:d5:1a:0d:
4d:d1:52:c1:42:80:84:4b:84:f7:7c:3a:15:f9:fb:
de:a3:0c:2e:51:29:2a:8c:d6:10:5c:c0:e4:7c:5b:
01:be:bc:5e:99:a4:41:16:e3:56:ab:fd:d3:49:71:
d3:aa:b3:d8:41:e7:9e:e6:a5:1e:a2:22:6f:ad:7f:
06:38:24:5c:49:db:59:2a:8e:22:06:76:df:c5:d9:
ad:34:f3:26:4a:7a:06:e8:59:99:6c:9b:0f:ed:34:
6f:eb:5c:82:0a:3e:3e:6b:02:2a:97:7e:fb:c0:4e:
5b:04:07:7e:dc:2d:a8:b1:5c:f3:f1:53:52:c0:56:
b1:8f:77:f8:15:7e:0d:b6:1b:43:ce:2c:f3:8d:4c:
5a:88:af:63:bb:8d:c3:a5:b4:b9:9d:75:f8:5e:29:
9c:60:f7:b4:f4:c6:38:05:c8:9e:f6:25:a5:05:d6:
7c:63:b2:9a:73:0a:c8:03:0e:eb:87:f3:13:04:75:
dd:02:c1:f6:59:bc:41:95:57:61:2e:fa:6b:c4:15:
d6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:01:AA:6B:42:67:6B:A9:FE:BE:29:5E:1E:26:E6:D4:9B:F1:2A:9B
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/5QGqa0Jna6n-vileHibm1JvxKps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.175.0/24
Signature Algorithm: sha256WithRSAEncryption
95:fa:b2:06:0c:22:67:4e:0e:1b:c4:da:af:08:97:c7:b9:ca:
17:e4:65:8b:cb:84:02:82:e4:32:c0:40:0d:95:07:0e:76:00:
9e:f1:75:32:f0:56:78:81:7a:13:03:1f:e1:e6:52:3e:24:44:
bc:0e:fb:df:be:57:56:69:b7:83:c1:00:7e:14:5f:4a:51:19:
22:10:d0:a7:06:9d:46:c4:b7:c6:7d:91:ff:7b:84:08:15:71:
cc:35:28:db:65:28:bb:b5:c3:fb:12:47:42:07:77:8c:c5:d1:
bb:95:1d:fc:8e:ea:6c:71:49:56:08:9b:b1:ff:a8:dd:fd:09:
75:d7:f6:b7:ee:1c:b5:f7:f1:b7:29:49:af:8c:d6:bd:34:cc:
cf:46:2d:f3:c2:c4:4a:8c:28:10:a0:4e:bc:fb:7d:2c:70:11:
ef:41:9e:30:cf:ee:40:42:89:43:d0:99:9d:34:e5:55:90:85:
c3:58:db:76:a1:f3:7a:72:76:28:f8:88:1a:3a:5f:4f:83:7d:
70:5c:66:1a:57:21:a2:1c:9f:1c:07:3b:77:09:06:56:7b:fa:
4e:02:8f:7b:18:08:3e:5f:a0:c4:0b:b1:61:26:2d:9c:c4:40:
ea:2e:ae:8e:8f:b0:06:82:96:ec:9d:87:eb:46:27:d6:62:7e:
ae:4d:35:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrSiZdDDQmVtnEBLQdLc9bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjMwMTAxMDMwNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTAxYWE2YjQyNjc2YmE5ZmViZTI5NWUxZTI2ZTZkNDliZjEyYTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV8fLs0qotKMslCQQiFzf/qeg7uq
UONl0h4hxauxVLppzBKTXsZudTlB0y1DFKNPigNwcsiQxjHVGg1N0VLBQoCES4T3
fDoV+fveowwuUSkqjNYQXMDkfFsBvrxemaRBFuNWq/3TSXHTqrPYQeee5qUeoiJv
rX8GOCRcSdtZKo4iBnbfxdmtNPMmSnoG6FmZbJsP7TRv61yCCj4+awIql377wE5b
BAd+3C2osVzz8VNSwFaxj3f4FX4NthtDzizzjUxaiK9ju43DpbS5nXX4XimcYPe0
9MY4Bcie9iWlBdZ8Y7KacwrIAw7rh/MTBHXdAsH2WbxBlVdhLvprxBXWaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOUBqmtCZ2up/r4pXh4m5tSb8SqbMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvNVFHcWEwSm5hNm4tdmlsZUhpYm0xSnZ4S3BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWWvMA0G
CSqGSIb3DQEBCwUAA4IBAQCV+rIGDCJnTg4bxNqvCJfHucoX5GWLy4QCguQywEAN
lQcOdgCe8XUy8FZ4gXoTAx/h5lI+JES8DvvfvldWabeDwQB+FF9KURkiENCnBp1G
xLfGfZH/e4QIFXHMNSjbZSi7tcP7EkdCB3eMxdG7lR38jupscUlWCJux/6jd/Ql1
1/a37hy19/G3KUmvjNa9NMzPRi3zwsRKjCgQoE68+30scBHvQZ4wz+5AQolD0Jmd
NOVVkIXDWNt2ofN6cnYo+IgaOl9Pg31wXGYaVyGiHJ8cBzt3CQZWe/pOAo97GAg+
X6DEC7FhJi2cxEDqLq6Oj7AGgpbsnYfrRifWYn6uTTXJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org