Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ZTEeTGubD3zWF9fxSbL46Wqbi04.roa
File: ZTEeTGubD3zWF9fxSbL46Wqbi04.roa (raw, json)
Hash identifier: WgXRm2HZTQEkdf8UXce6SZGDGr12YT32CiV24ou/Wec=
Subject key identifier: 65:31:1E:4C:6B:9B:0F:7C:D6:17:D7:F1:49:B2:F8:E9:6A:9B:8B:4E
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 01872D808159E51CD177321E0BB198D24DF9
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ZTEeTGubD3zWF9fxSbL46Wqbi04.roa
Signing time: Wed 29 Mar 2023 13:13:29 +0000
ROA not before: Wed 29 Mar 2023 13:13:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 5.178.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:80:81:59:e5:1c:d1:77:32:1e:0b:b1:98:d2:4d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Mar 29 13:13:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65311e4c6b9b0f7cd617d7f149b2f8e96a9b8b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:9f:c2:35:2d:78:d6:71:4f:4f:8e:b1:f6:
f6:b9:d6:a1:4f:91:83:41:0c:4c:31:5d:4f:91:f9:
73:b8:d4:ae:65:5f:0a:b2:02:20:eb:5b:2d:bc:22:
86:ca:70:91:8a:4a:13:0e:af:22:73:93:e1:31:e9:
60:eb:fb:87:6f:32:54:30:d6:ae:38:98:ab:51:ca:
5c:60:ec:30:03:05:4a:1a:2b:ef:56:9e:17:20:99:
5c:5d:95:1a:ef:33:29:df:fd:d8:fe:94:bb:d2:ff:
3c:7b:9b:6a:3c:35:a1:18:57:ed:02:fe:6e:d8:83:
cc:f5:bd:7b:f8:6c:0d:89:a5:b6:ae:b1:12:e7:91:
d3:db:c1:22:85:df:8a:57:90:88:0d:81:c7:c3:e1:
93:4e:bb:35:a9:56:08:40:df:fa:ef:9c:21:ad:8b:
32:1e:06:19:90:a6:05:ae:93:f3:54:01:b2:72:94:
27:ec:b2:bc:7f:51:0f:02:98:30:bc:c1:4a:c8:c0:
86:69:b3:1b:96:56:13:46:5c:5b:b1:b9:c9:7d:c4:
42:d6:93:15:74:ad:80:6e:56:d4:00:2b:3d:8c:9c:
05:ab:f7:37:12:10:60:5c:fc:ca:3e:9e:50:a0:af:
f4:61:87:89:69:a1:f9:63:84:18:f7:3a:57:64:0a:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:1E:4C:6B:9B:0F:7C:D6:17:D7:F1:49:B2:F8:E9:6A:9B:8B:4E
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ZTEeTGubD3zWF9fxSbL46Wqbi04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.102.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:14:4e:31:f1:d5:9b:79:85:4a:42:52:c6:72:89:c1:32:b0:
35:ab:52:f2:7c:11:41:2d:c1:c5:23:5e:78:29:a1:38:c1:48:
55:f8:08:bc:19:74:33:2d:67:64:07:9b:74:b8:02:42:08:ce:
43:69:04:97:83:61:06:77:91:85:a9:f6:48:4f:ac:b6:c0:99:
cc:0d:3b:44:2a:a3:fe:07:00:8b:e5:48:55:6c:13:bb:ef:9c:
63:fd:4e:53:71:f4:56:ac:a2:a5:0c:af:c0:cc:c7:dc:f2:b6:
7f:9a:55:33:8b:1e:5c:a1:5c:fe:6b:fd:5f:05:83:2b:96:52:
b4:bd:2f:10:d6:61:1e:98:77:a5:86:a3:89:a5:4a:79:31:6d:
f7:4f:07:03:c3:92:fe:93:73:c2:98:b1:2a:23:fa:da:b3:f6:
31:da:73:e6:0c:f2:4d:80:91:21:0c:e7:62:88:dc:5f:2b:f1:
71:2f:48:8d:50:63:d7:25:81:6f:04:ac:27:25:b0:f7:fe:71:
bc:74:31:da:41:74:a7:ce:4c:c2:f1:08:32:a3:dc:70:f1:86:
fa:18:64:a8:ae:c0:5c:fb:ab:67:37:7b:e7:9c:49:97:42:49:
b3:97:b8:8f:27:b1:a8:2b:6a:41:a3:0e:3e:b2:2c:c1:a6:8d:
32:c0:04:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:14 2024 by rpki-client on console-fra.rpki-client.org