Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/soCGyUIOyVu2eJVk1STv--P5zUg.roa
File: soCGyUIOyVu2eJVk1STv--P5zUg.roa (raw, json)
Hash identifier: +0Ivy3ZWIGlpBJLmneDUS3E1qFFzrV2hBpr8mZw5pxc=
Subject key identifier: B2:80:86:C9:42:0E:C9:5B:B6:78:95:64:D5:24:EF:FB:E3:F9:CD:48
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01856B4A3DE1991A3EF9AAD67D78DA174DA4
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/soCGyUIOyVu2eJVk1STv--P5zUg.roa
Signing time: Sun 01 Jan 2023 03:05:05 +0000
ROA not before: Sun 01 Jan 2023 03:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202062
IP address blocks: 141.101.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:4a:3d:e1:99:1a:3e:f9:aa:d6:7d:78:da:17:4d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b28086c9420ec95bb6789564d524effbe3f9cd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:07:d7:73:d8:73:5a:96:14:16:d7:f2:1b:
05:5d:8c:c7:52:a8:35:03:25:31:d8:97:b3:96:71:
f6:85:73:02:16:a5:65:a0:68:28:83:2a:93:f2:02:
3a:57:c4:4a:55:2b:16:14:59:1f:17:56:06:25:b9:
3b:0e:58:27:a4:03:4c:33:bb:5d:94:19:c7:93:90:
db:96:4e:70:ff:6e:d4:4a:b1:fa:d2:50:e7:0b:0b:
82:17:97:cf:7a:de:d1:a0:ac:e5:5f:37:65:a7:05:
a0:6d:e9:67:18:47:e2:1e:2a:a7:98:1d:d3:e8:fa:
50:7c:5a:15:93:6c:59:6e:47:18:2b:34:fe:4e:97:
c0:2b:4c:95:04:aa:20:bb:60:fd:1a:b2:1b:bc:65:
fd:7f:36:4b:7f:d3:4d:9f:1d:85:b6:12:73:a5:67:
90:62:95:17:ee:3a:68:cf:94:6e:c8:57:1c:82:0b:
e7:18:ea:ab:c3:64:e1:e0:79:74:d4:5a:15:1c:72:
60:94:15:16:bf:7f:1e:8f:38:0d:ab:7f:c4:ce:0f:
2c:b9:9f:e9:8c:c4:03:ac:9a:73:ae:97:e5:88:02:
40:89:e6:e9:20:8f:c3:53:27:e8:bd:da:68:70:ce:
35:85:f3:08:6f:ad:75:ff:88:41:4a:b2:fd:bc:50:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:80:86:C9:42:0E:C9:5B:B6:78:95:64:D5:24:EF:FB:E3:F9:CD:48
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/soCGyUIOyVu2eJVk1STv--P5zUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.175.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7f:bc:50:cb:87:8a:32:ad:a1:3a:22:5f:2d:1c:68:8f:ad:
71:5f:64:3f:28:71:77:90:c4:79:83:ad:25:4c:76:ce:5f:19:
4b:ba:26:22:22:b4:91:e2:7c:c7:37:33:24:26:af:65:17:d9:
0a:83:cc:87:7b:fc:62:35:90:79:e7:2b:1b:4e:85:8d:38:d8:
3a:07:94:01:22:53:94:90:6a:c1:a2:43:ef:59:1a:8c:23:0f:
fa:88:6c:e7:4b:b8:cb:e1:ac:07:25:b3:1b:d6:c9:66:38:80:
60:4a:67:90:55:85:ff:30:75:bb:d8:af:98:dd:34:fc:41:76:
1a:64:56:be:d1:b6:cc:eb:0c:60:7f:1c:bc:6a:a4:68:2b:e4:
a0:2b:af:d1:28:7c:b9:2d:1f:e3:e5:fc:a1:4f:42:97:c0:ec:
dd:69:b5:ba:75:53:28:d4:2f:87:51:e1:59:67:61:a4:36:19:
d6:26:2d:36:b0:c6:7f:a8:0d:35:84:4a:19:3f:fe:8d:18:4b:
00:8b:61:c0:5a:0f:de:29:18:7c:70:39:b2:a8:7f:75:66:3c:
ed:b3:00:14:70:aa:76:9f:c0:93:17:8d:32:e9:ae:9f:3b:a5:
53:27:ca:63:95:5f:14:ea:34:4b:8b:1c:29:04:47:32:ec:ab:
ee:9c:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:29 2024 by rpki-client on console-ams.rpki-client.org