Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/eCbz4DroBrvj3dAT-BlpmGKHKws.roa
File: eCbz4DroBrvj3dAT-BlpmGKHKws.roa (raw, json)
Hash identifier: 6MvRjwGO5yECzRsnQtpMScbYm2kqtDok9bfZPlsuHjI=
Subject key identifier: 78:26:F3:E0:3A:E8:06:BB:E3:DD:D0:13:F8:19:69:98:62:87:2B:0B
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A48F9E5587C727DD49EFBF9604FA7
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/eCbz4DroBrvj3dAT-BlpmGKHKws.roa
Signing time: Sun 01 Jan 2023 03:05:08 +0000
ROA not before: Sun 01 Jan 2023 03:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210240
IP address blocks: 141.101.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Feb 2023 15:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:48:f9:e5:58:7c:72:7d:d4:9e:fb:f9:60:4f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7826f3e03ae806bbe3ddd013f819699862872b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c1:a7:53:eb:50:0b:d9:f4:e7:d9:60:b2:e0:
37:17:51:ba:6d:a9:56:4a:6b:97:67:cb:2f:e3:c1:
bd:cc:6c:4e:82:26:7d:ac:a9:a4:b1:4b:28:63:30:
41:39:cb:55:09:bb:b6:fc:d4:0d:d2:76:ed:ca:77:
c4:cf:95:c6:5a:b7:50:2b:80:78:99:c9:82:c7:43:
bf:5d:cd:03:f7:23:f5:40:5d:44:c5:11:6d:b1:be:
0e:65:16:36:d8:71:32:0c:ad:3e:6c:03:9b:ae:23:
eb:7d:c9:79:4b:df:36:e3:c3:35:f9:e6:3d:c5:cf:
60:00:70:e1:a4:8f:3c:38:e9:4b:ab:de:b2:c2:4c:
ec:6f:14:59:8f:1b:fc:05:e8:c4:b6:f0:50:8c:bb:
cb:00:32:91:cf:ff:da:87:b3:35:75:29:dd:a7:a8:
b7:c6:d7:3c:8b:33:7c:d4:c4:8a:65:22:dc:78:e9:
75:5d:f7:26:c5:8a:42:02:2e:a2:d3:c6:11:bd:ed:
ee:dd:2f:99:71:eb:47:28:78:34:26:4d:8e:21:69:
6e:d4:e9:11:f5:ff:95:23:a8:b7:b8:f7:6d:ca:b5:
10:03:5e:48:9d:44:3f:4e:87:bb:7c:29:1d:20:c8:
3b:51:8b:14:25:1c:ff:91:57:f3:9c:48:22:d4:4d:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:26:F3:E0:3A:E8:06:BB:E3:DD:D0:13:F8:19:69:98:62:87:2B:0B
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/eCbz4DroBrvj3dAT-BlpmGKHKws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.188.0/24
Signature Algorithm: sha256WithRSAEncryption
29:0f:28:f1:22:ed:c3:32:64:ec:3e:71:4a:57:90:af:04:09:
5d:ff:7d:c3:70:1e:8b:17:d8:99:86:bc:a1:a5:37:2a:27:2a:
0c:d3:46:4c:ae:d8:54:e7:54:a5:2c:1b:5c:41:0d:b0:53:95:
81:86:18:ce:29:d1:4b:9e:fa:06:38:b5:da:20:c9:c8:cd:d0:
fa:e1:98:7d:08:31:96:49:84:cf:f8:f5:6a:59:c3:e5:d9:73:
ac:a8:a6:d7:88:29:80:cc:fd:c4:5d:4a:d2:d1:92:e3:d5:c9:
c8:8b:b7:8f:19:8f:08:8e:29:4e:c8:be:74:8e:9e:0e:68:13:
e6:ce:7e:06:aa:6c:a7:55:40:70:0c:88:d4:0e:0e:7b:34:3b:
13:2d:c0:93:fa:01:29:5b:ae:84:4c:d1:f2:82:db:85:22:c7:
68:53:56:32:34:3b:64:5d:c2:a1:4c:7f:4e:fe:ed:26:09:af:
c5:04:96:09:f3:76:3b:4c:3e:d0:f1:91:0a:53:9d:cc:3d:42:
e1:92:f3:ff:f0:3c:c9:0c:63:2a:ff:ab:40:f6:6b:1d:91:27:
f5:a8:73:79:fc:8a:8a:47:ca:a1:d5:53:64:af:4c:d7:ad:01:
bc:99:7c:a6:90:62:65:df:75:d8:3e:bb:15:d7:7b:33:22:1b:
24:8e:ef:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrSkj55Vh8cn3Unvv5YE+nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjMwMTAxMDMwNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODI2ZjNlMDNhZTgwNmJiZTNkZGQwMTNmODE5Njk5ODYyODcyYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicGnU+tQC9n059lgsuA3F1G6balW
SmuXZ8sv48G9zGxOgiZ9rKmksUsoYzBBOctVCbu2/NQN0nbtynfEz5XGWrdQK4B4
mcmCx0O/Xc0D9yP1QF1ExRFtsb4OZRY22HEyDK0+bAObriPrfcl5S98248M1+eY9
xc9gAHDhpI88OOlLq96ywkzsbxRZjxv8BejEtvBQjLvLADKRz//ah7M1dSndp6i3
xtc8izN81MSKZSLceOl1XfcmxYpCAi6i08YRve3u3S+ZcetHKHg0Jk2OIWlu1OkR
9f+VI6i3uPdtyrUQA15InUQ/Toe7fCkdIMg7UYsUJRz/kVfznEgi1E0KFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHgm8+A66Aa7493QE/gZaZhihysLMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvZUNiejREcm9CcnZqM2RBVC1CbHBtR0tIS3dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWW8MA0G
CSqGSIb3DQEBCwUAA4IBAQApDyjxIu3DMmTsPnFKV5CvBAld/33DcB6LF9iZhryh
pTcqJyoM00ZMrthU51SlLBtcQQ2wU5WBhhjOKdFLnvoGOLXaIMnIzdD64Zh9CDGW
SYTP+PVqWcPl2XOsqKbXiCmAzP3EXUrS0ZLj1cnIi7ePGY8IjilOyL50jp4OaBPm
zn4GqmynVUBwDIjUDg57NDsTLcCT+gEpW66ETNHygtuFIsdoU1YyNDtkXcKhTH9O
/u0mCa/FBJYJ83Y7TD7Q8ZEKU53MPULhkvP/8DzJDGMq/6tA9msdkSf1qHN5/IqK
R8qh1VNkr0zXrQG8mXymkGJl33XYPrsV13szIhskju8i
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:38 2024 by rpki-client on console-fra.rpki-client.org