Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2Iuzh3QdTauIVZ0WJ6iRuM13CBk.roa
File: 2Iuzh3QdTauIVZ0WJ6iRuM13CBk.roa (raw, json)
Hash identifier: 29VYCFStDfvtZ1rO4e3iOMxQhS+1+/FFEuiJRiSPpL0=
Subject key identifier: D8:8B:B3:87:74:1D:4D:AB:88:55:9D:16:27:A8:91:B8:CD:77:08:19
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018AC899CE451111B872C095AAD112009060
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2Iuzh3QdTauIVZ0WJ6iRuM13CBk.roa
Signing time: Sun 24 Sep 2023 19:10:37 +0000
ROA not before: Sun 24 Sep 2023 19:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208888
IP address blocks: 141.136.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c8:99:ce:45:11:11:b8:72:c0:95:aa:d1:12:00:90:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 24 19:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d88bb387741d4dab88559d1627a891b8cd770819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:f2:c6:9b:a4:6d:56:cf:4c:62:bb:23:89:
44:d3:3e:f5:6e:37:f0:0a:c1:0f:f2:c2:27:79:c6:
2c:a4:dd:60:7f:59:0e:8d:28:03:35:92:94:ef:68:
82:52:64:22:c3:e8:55:5c:ef:be:5b:a2:21:a0:50:
1f:ee:da:b6:4d:77:88:ca:60:82:cf:9f:a4:bb:c3:
d3:db:d9:d9:a6:a9:59:2e:0e:c6:93:06:d8:03:13:
9b:33:74:cc:b7:7d:a0:d3:23:43:55:a4:a5:50:9b:
e0:c2:1b:2e:0d:32:53:91:cc:23:2d:20:1a:a0:32:
e0:1d:eb:a5:85:e0:48:87:f4:2a:61:fd:6c:c5:42:
da:9a:3d:ba:dd:49:3e:29:a0:de:65:09:27:e6:a7:
2a:02:24:be:b4:db:16:4b:c1:fb:88:49:f3:8a:40:
f6:17:75:36:da:16:a3:bf:5c:9b:9d:86:26:3a:f1:
97:8c:4a:a6:50:7e:c5:d0:aa:ca:27:37:74:53:76:
78:44:ab:9b:34:fb:2c:b5:7c:e4:ff:67:0f:5e:d3:
2a:74:0a:b9:50:16:57:f9:ef:cd:88:e4:e4:ae:c6:
8d:e0:97:20:38:d6:b6:6e:f5:36:7b:1a:ec:bd:c8:
0b:64:5d:99:6a:ee:a7:49:f7:72:2e:53:fc:e6:0f:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8B:B3:87:74:1D:4D:AB:88:55:9D:16:27:A8:91:B8:CD:77:08:19
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/2Iuzh3QdTauIVZ0WJ6iRuM13CBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.63.0/24
Signature Algorithm: sha256WithRSAEncryption
23:3d:97:80:24:78:72:dd:98:f0:b7:eb:dd:c7:0f:fd:2d:7d:
f0:66:b4:20:ca:a6:e3:1b:5e:7a:cd:6e:2a:62:81:28:1c:79:
dd:33:bf:28:f6:2e:7c:45:57:e2:6a:1b:02:bf:9f:5b:7f:4a:
ec:74:8a:3b:31:5b:40:5e:18:7d:f6:3a:81:30:83:de:fe:66:
7a:3b:2d:70:4f:43:ee:30:69:2c:4f:5f:8f:1c:c8:24:dd:b2:
4b:00:7b:fe:04:9e:83:58:2e:da:ce:57:c7:08:4b:03:17:77:
e0:a4:b0:db:f6:2d:d4:4f:3d:9e:9c:9c:d5:af:3b:3a:5c:0d:
31:d4:6a:b5:a7:7f:55:cd:5d:6f:df:e7:4b:0f:d4:59:50:3b:
f7:1b:8c:ee:4f:17:c6:2e:6d:b7:73:7b:58:19:c9:6f:44:f6:
3a:c1:09:b0:df:4c:2b:b4:5f:e0:6a:03:32:d1:d4:eb:2c:0c:
77:5c:ab:b5:89:ae:b2:ef:9d:17:12:1b:b2:6b:62:59:15:6e:
32:c0:52:63:0e:f9:e5:4e:8f:8e:13:ca:b5:bc:2e:0b:6a:12:
82:6d:33:d1:df:05:84:42:61:cc:69:9d:55:65:69:3c:2e:b6:
c8:89:91:9c:62:64:59:35:f8:43:4b:7a:61:68:5a:0f:17:68:
2c:7d:eb:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrImc5FERG4csCVqtESAJBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwOTI0MTkxMDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODhiYjM4Nzc0MWQ0ZGFiODg1NTlkMTYyN2E4OTFiOGNkNzcwODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUXyxpukbVbPTGK7I4lE0z71bjfw
CsEP8sInecYspN1gf1kOjSgDNZKU72iCUmQiw+hVXO++W6IhoFAf7tq2TXeIymCC
z5+ku8PT29nZpqlZLg7GkwbYAxObM3TMt32g0yNDVaSlUJvgwhsuDTJTkcwjLSAa
oDLgHeulheBIh/QqYf1sxULamj263Uk+KaDeZQkn5qcqAiS+tNsWS8H7iEnzikD2
F3U22hajv1ybnYYmOvGXjEqmUH7F0KrKJzd0U3Z4RKubNPsstXzk/2cPXtMqdAq5
UBZX+e/NiOTkrsaN4JcgONa2bvU2exrsvcgLZF2Zau6nSfdyLlP85g8YGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNiLs4d0HU2riFWdFieokbjNdwgZMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvMkl1emgzUWRUYXVJVlowV0o2aVJ1TTEzQ0JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYg/MA0G
CSqGSIb3DQEBCwUAA4IBAQAjPZeAJHhy3Zjwt+vdxw/9LX3wZrQgyqbjG156zW4q
YoEoHHndM78o9i58RVfiahsCv59bf0rsdIo7MVtAXhh99jqBMIPe/mZ6Oy1wT0Pu
MGksT1+PHMgk3bJLAHv+BJ6DWC7azlfHCEsDF3fgpLDb9i3UTz2enJzVrzs6XA0x
1Gq1p39VzV1v3+dLD9RZUDv3G4zuTxfGLm23c3tYGclvRPY6wQmw30wrtF/gagMy
0dTrLAx3XKu1ia6y750XEhuya2JZFW4ywFJjDvnlTo+OE8q1vC4LahKCbTPR3wWE
QmHMaZ1VZWk8LrbIiZGcYmRZNfhDS3phaFoPF2gsfes0
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org