Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/clTPxZuUoEPiFbdBR49x94-LzAs.roa
File: clTPxZuUoEPiFbdBR49x94-LzAs.roa (raw, json)
Hash identifier: UNBHuGmVtbBjld26LZqohs8WGPVOY+Bfh+sCQ5beh24=
Subject key identifier: 72:54:CF:C5:9B:94:A0:43:E2:15:B7:41:47:8F:71:F7:8F:8B:CC:0B
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 0186C53DE5EBFEB13B4BF65CBC8643F6E7D8
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/clTPxZuUoEPiFbdBR49x94-LzAs.roa
Signing time: Thu 09 Mar 2023 07:20:13 +0000
ROA not before: Thu 09 Mar 2023 07:20:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59903
IP address blocks: 141.101.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Apr 2023 12:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:3d:e5:eb:fe:b1:3b:4b:f6:5c:bc:86:43:f6:e7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Mar 9 07:20:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7254cfc59b94a043e215b741478f71f78f8bcc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:8b:8c:30:61:a6:eb:9d:2d:e4:e3:f7:e7:
d7:b6:5d:12:7a:81:04:48:17:f4:43:3a:ce:c2:b4:
a6:cb:a2:69:f0:51:26:98:7f:f9:63:38:da:8a:cf:
13:4a:9f:38:b3:5b:a4:a3:34:ec:43:de:86:54:c3:
4f:05:e8:f5:bf:13:ef:b0:f5:3c:72:cb:73:46:8f:
01:26:ac:3f:de:0e:ad:26:42:02:d9:de:f7:df:d0:
f7:95:ed:3b:52:30:47:8e:d1:30:a1:8c:7f:4e:20:
27:89:1f:12:44:70:11:92:b1:a1:54:0e:79:02:bd:
55:2c:d1:5b:b7:e8:79:e7:31:ac:5d:fe:2f:b1:95:
69:f6:07:11:3b:36:d2:26:f0:13:91:ab:eb:39:59:
bb:ee:46:23:0c:b8:8c:b3:ad:d8:ba:86:32:e1:a1:
c8:78:3a:f8:93:64:3c:cc:bf:5d:18:3b:4f:c3:09:
c7:be:e3:b6:4c:bf:20:5c:ca:f8:d1:7f:3d:4d:68:
bb:e5:59:65:5c:c0:de:77:d0:16:6b:86:65:69:4d:
00:fd:c3:72:75:b4:82:f2:b8:06:11:ce:c1:cc:3a:
a0:86:e2:0d:dd:69:e6:e6:85:2c:99:75:3d:cc:18:
76:01:3e:7f:84:0b:3a:c3:42:1e:cd:1f:32:a1:7d:
2c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:54:CF:C5:9B:94:A0:43:E2:15:B7:41:47:8F:71:F7:8F:8B:CC:0B
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/clTPxZuUoEPiFbdBR49x94-LzAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c0:7d:ab:6c:e1:50:f1:6e:20:ce:8d:11:8f:76:65:b1:a3:
f5:f4:ee:d6:b5:9a:6a:a9:54:54:d4:46:2c:8a:cd:13:12:c7:
f4:f4:eb:2d:21:d3:32:b9:61:ea:de:f1:8f:50:b3:0e:0a:6a:
c2:8d:99:ef:11:fc:ae:4d:5d:a0:7e:19:2b:89:a6:d7:7b:a1:
30:82:67:00:92:95:87:f5:89:af:c5:b5:3f:9f:30:4b:37:26:
80:e3:cc:84:cd:f0:88:44:24:9b:25:07:c7:55:55:11:37:ad:
0e:04:a4:da:99:01:cc:bb:d7:a5:fa:36:8d:09:a7:33:e9:22:
12:4b:8a:86:5e:b0:78:00:24:cb:bb:ba:e9:19:c6:7b:8c:78:
9e:e6:78:39:38:53:00:88:31:36:62:85:aa:40:f0:42:39:46:
c9:86:1d:a7:60:f1:b2:71:c0:04:6b:b7:03:0d:68:ac:c6:74:
83:c6:7a:a4:cd:0f:a7:f1:0c:db:b4:c9:79:f2:b4:d0:12:9c:
e3:63:5f:a3:50:fc:22:9d:26:e3:9c:4b:fb:9d:20:71:08:02:
3b:7d:d3:d8:9c:42:c8:e2:ae:c9:c1:50:7b:74:56:6a:7a:c8:
a9:6e:bd:bc:79:c9:05:27:63:14:a3:f5:8b:92:18:cc:13:c5:
a7:a8:8d:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbFPeXr/rE7S/ZcvIZD9ufYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjMwMzA5MDcyMDEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjU0Y2ZjNTliOTRhMDQzZTIxNWI3NDE0NzhmNzFmNzhmOGJjYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH6LjDBhpuudLeTj9+fXtl0SeoEE
SBf0QzrOwrSmy6Jp8FEmmH/5Yzjais8TSp84s1ukozTsQ96GVMNPBej1vxPvsPU8
cstzRo8BJqw/3g6tJkIC2d7339D3le07UjBHjtEwoYx/TiAniR8SRHARkrGhVA55
Ar1VLNFbt+h55zGsXf4vsZVp9gcROzbSJvATkavrOVm77kYjDLiMs63YuoYy4aHI
eDr4k2Q8zL9dGDtPwwnHvuO2TL8gXMr40X89TWi75VllXMDed9AWa4ZlaU0A/cNy
dbSC8rgGEc7BzDqghuIN3Wnm5oUsmXU9zBh2AT5/hAs6w0IezR8yoX0s+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHJUz8WblKBD4hW3QUePcfePi8wLMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvY2xUUHhadVVvRVBpRmJkQlI0OXg5NC1MekFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWX4MA0G
CSqGSIb3DQEBCwUAA4IBAQClwH2rbOFQ8W4gzo0Rj3ZlsaP19O7WtZpqqVRU1EYs
is0TEsf09OstIdMyuWHq3vGPULMOCmrCjZnvEfyuTV2gfhkriabXe6EwgmcAkpWH
9YmvxbU/nzBLNyaA48yEzfCIRCSbJQfHVVURN60OBKTamQHMu9el+jaNCacz6SIS
S4qGXrB4ACTLu7rpGcZ7jHie5ng5OFMAiDE2YoWqQPBCOUbJhh2nYPGyccAEa7cD
DWisxnSDxnqkzQ+n8QzbtMl58rTQEpzjY1+jUPwinSbjnEv7nSBxCAI7fdPYnELI
4q7JwVB7dFZqesipbr28eckFJ2MUo/WLkhjME8WnqI0v
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org