Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CW_fkS35BzyJdHnvjs5qlys5wHo.roa
File: CW_fkS35BzyJdHnvjs5qlys5wHo.roa (raw, json)
Hash identifier: a339Kf8vPnxsqYFZmKrsU2KGgl18BTrOUMAhg/Y5GBg=
Subject key identifier: 09:6F:DF:91:2D:F9:07:3C:89:74:79:EF:8E:CE:6A:97:2B:39:C0:7A
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A3EA995065E4922BB1A1B7B9FDA91
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CW_fkS35BzyJdHnvjs5qlys5wHo.roa
Signing time: Sun 01 Jan 2023 03:05:05 +0000
ROA not before: Sun 01 Jan 2023 03:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203371
IP address blocks: 141.101.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:3e:a9:95:06:5e:49:22:bb:1a:1b:7b:9f:da:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=096fdf912df9073c897479ef8ece6a972b39c07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e4:d3:a8:cb:5e:08:90:c3:86:6c:85:22:ba:
7a:32:eb:a1:a7:e4:7c:84:ee:38:3d:09:5e:17:51:
23:89:7b:0b:cf:4d:38:67:ae:59:44:46:65:9d:88:
bf:ce:7e:13:81:ba:ee:5e:45:83:6f:26:9c:35:3f:
19:37:ca:d7:db:c1:de:d1:3a:33:ff:20:22:dc:3d:
f6:b7:d6:ca:21:92:1e:60:77:91:6d:01:61:87:3b:
f1:b1:0a:d6:2e:2e:3a:47:c1:b3:c4:6a:0e:ba:6f:
85:a4:e2:dd:6e:c0:74:78:c6:53:10:a2:e9:45:4d:
ad:32:d8:ea:de:31:a3:11:5f:7d:10:02:06:dc:7d:
95:6a:72:f1:eb:3e:53:59:f7:00:45:32:b3:bf:ae:
1f:ce:b6:af:86:fd:29:f9:80:5f:da:e1:ff:9b:f2:
73:1f:65:48:68:ff:59:f6:ac:b4:6b:28:32:79:10:
8b:c8:ac:2d:07:ec:09:23:f6:a0:9e:9f:65:9d:cc:
5a:dc:3f:70:f1:6e:f6:bf:d1:08:49:09:73:7c:6f:
80:40:44:66:86:bc:31:64:c3:c5:a5:c7:9e:f7:64:
52:5d:80:3d:29:83:c2:32:5e:59:ba:12:01:f2:c4:
8d:42:ea:21:96:fd:96:ab:6f:25:28:86:33:1a:e1:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6F:DF:91:2D:F9:07:3C:89:74:79:EF:8E:CE:6A:97:2B:39:C0:7A
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/CW_fkS35BzyJdHnvjs5qlys5wHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.224.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c6:1f:80:89:d4:6d:bd:09:10:13:95:91:32:9a:87:0a:f3:
76:d2:a0:0a:95:3b:a4:3c:6c:d4:ea:c9:00:72:d7:00:e3:e1:
57:a4:2e:8c:74:59:d9:2e:f0:c1:7e:3a:b7:60:be:d5:b3:3c:
64:9a:ad:0c:d5:d7:ec:18:61:9b:e1:06:ac:2f:1c:ec:14:a0:
98:7f:55:79:82:96:1a:c2:22:a5:e3:c4:c9:f7:4f:09:30:81:
fb:ba:6b:68:28:e8:1f:14:3e:d5:d1:41:ce:4d:49:c9:46:d9:
81:fe:8e:ae:c4:6f:d3:ce:85:56:ad:17:88:cb:f2:25:8a:4e:
aa:5a:70:86:46:81:cd:9f:a5:94:27:80:0f:48:27:c7:b7:cb:
9b:c4:c4:13:10:4b:80:ab:f8:c0:a8:62:9d:fe:e7:f5:bd:78:
2c:78:a7:53:5e:12:1f:d4:4f:aa:32:5d:42:85:9e:65:dd:21:
9c:a3:e2:86:d2:af:40:66:ba:2b:ee:ff:af:cc:d7:1a:61:96:
d7:67:9f:fc:f9:75:76:45:5f:9c:9e:5b:4c:24:55:ae:b5:7b:
0a:30:d7:26:a7:48:0c:bc:65:2b:3c:d7:7b:e8:d0:87:e2:14:
c0:22:a7:c3:64:ce:1a:a1:7d:55:65:ff:a4:9d:93:ff:37:60:
ee:b9:31:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrSj6plQZeSSK7Ght7n9qRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjMwMTAxMDMwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTZmZGY5MTJkZjkwNzNjODk3NDc5ZWY4ZWNlNmE5NzJiMzljMDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheTTqMteCJDDhmyFIrp6Muuhp+R8
hO44PQleF1EjiXsLz004Z65ZREZlnYi/zn4TgbruXkWDbyacNT8ZN8rX28He0Toz
/yAi3D32t9bKIZIeYHeRbQFhhzvxsQrWLi46R8GzxGoOum+FpOLdbsB0eMZTEKLp
RU2tMtjq3jGjEV99EAIG3H2VanLx6z5TWfcARTKzv64fzravhv0p+YBf2uH/m/Jz
H2VIaP9Z9qy0aygyeRCLyKwtB+wJI/agnp9lncxa3D9w8W72v9EISQlzfG+AQERm
hrwxZMPFpcee92RSXYA9KYPCMl5ZuhIB8sSNQuohlv2Wq28lKIYzGuHwIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAlv35Et+Qc8iXR5747OapcrOcB6MB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvQ1dfZmtTMzVCenlKZEhudmpzNXFseXM1d0hvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWXgMA0G
CSqGSIb3DQEBCwUAA4IBAQBbxh+AidRtvQkQE5WRMpqHCvN20qAKlTukPGzU6skA
ctcA4+FXpC6MdFnZLvDBfjq3YL7Vszxkmq0M1dfsGGGb4QasLxzsFKCYf1V5gpYa
wiKl48TJ908JMIH7umtoKOgfFD7V0UHOTUnJRtmB/o6uxG/TzoVWrReIy/Ilik6q
WnCGRoHNn6WUJ4APSCfHt8ubxMQTEEuAq/jAqGKd/uf1vXgseKdTXhIf1E+qMl1C
hZ5l3SGco+KG0q9AZror7v+vzNcaYZbXZ5/8+XV2RV+cnltMJFWutXsKMNcmp0gM
vGUrPNd76NCH4hTAIqfDZM4aoX1VZf+knZP/N2DuuTGX
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:50 2024 by rpki-client on console-fra.rpki-client.org