Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DYcZASE6Xb_S_93u6uER8ewxYp4.roa
File: DYcZASE6Xb_S_93u6uER8ewxYp4.roa (raw, json)
Hash identifier: y4XcS4IeN2s7txIRm8hbuVS80+7/1MEexyrqG+yh5kQ=
Subject key identifier: 0D:87:19:01:21:3A:5D:BF:D2:FF:DD:EE:EA:E1:11:F1:EC:31:62:9E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01857D9B34D06775342F1EFBFC46F5F0FC7C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DYcZASE6Xb_S_93u6uER8ewxYp4.roa
Signing time: Wed 04 Jan 2023 16:26:41 +0000
ROA not before: Wed 04 Jan 2023 16:26:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52286
IP address blocks: 141.136.58.0/23 maxlen: 23
141.136.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:9b:34:d0:67:75:34:2f:1e:fb:fc:46:f5:f0:fc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 4 16:26:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d871901213a5dbfd2ffddeeeae111f1ec31629e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fb:7a:52:48:14:ed:dc:dc:aa:aa:d2:7b:ba:
5c:f6:52:1f:2d:03:66:70:b1:94:66:c8:2c:ce:12:
e2:32:13:39:68:93:67:4d:ac:9f:82:24:92:01:5a:
a5:69:5a:cc:c6:9f:5b:52:15:1a:19:11:bd:70:0f:
97:43:c9:c8:67:e0:00:ad:0a:ae:75:2e:10:56:ee:
01:b9:b1:a8:48:2c:8b:d5:d4:68:0a:9a:dc:3a:a7:
be:9b:43:8e:d0:ce:67:3c:b1:42:05:c1:96:8a:0e:
02:34:04:c9:5a:98:b7:fb:88:90:ca:8a:b7:f5:98:
cb:e6:9d:ff:ea:e4:51:3c:d2:a4:df:3d:a2:b1:12:
b6:e1:03:45:1c:77:99:b8:4c:8b:ce:bf:a0:ec:a1:
9a:9b:65:e8:47:5f:aa:d5:92:39:97:4a:18:ab:37:
44:ea:8c:49:f7:d9:d7:e6:b6:d6:c8:4a:da:d6:f4:
7e:b4:14:37:a7:b8:a2:2a:f6:be:50:01:26:5d:9c:
a5:ae:db:27:e6:24:11:86:fc:18:f3:cc:1c:45:be:
d8:85:a9:ae:c6:4d:8f:4a:ae:1b:08:b7:61:1b:4d:
d0:f0:6e:c0:c5:c9:84:97:d5:5d:c1:76:e4:5a:38:
e6:30:7a:23:3e:7d:2c:99:65:23:72:78:95:eb:3d:
f5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:87:19:01:21:3A:5D:BF:D2:FF:DD:EE:EA:E1:11:F1:EC:31:62:9E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DYcZASE6Xb_S_93u6uER8ewxYp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.58.0-141.136.60.255
Signature Algorithm: sha256WithRSAEncryption
4d:bb:71:6f:28:2a:69:a7:84:bb:27:16:a2:2a:c4:b6:e0:be:
f2:08:9b:38:0b:54:8e:18:71:ff:ea:24:ff:24:81:cd:ad:89:
9d:48:8f:40:a9:20:c5:ac:95:0f:22:f4:8a:92:c7:49:8d:11:
fd:ba:54:33:8d:8d:f6:8c:0c:1a:7b:48:26:5e:f8:87:2f:85:
71:bf:66:17:6b:73:c7:15:24:9a:78:3e:41:80:24:e9:1b:97:
a1:30:8e:c2:f9:ca:5a:d1:38:96:e4:14:3d:ee:cf:66:a7:2a:
f5:94:9b:03:67:f5:37:52:91:18:f5:3f:af:84:5a:b9:2c:f9:
0a:05:84:5f:a6:af:05:18:a6:6b:63:db:60:9e:41:2b:f7:f2:
4b:54:fb:b2:bc:3e:41:eb:5e:40:26:91:0f:29:4a:b4:45:a7:
de:e8:9a:55:fb:56:4b:d4:e1:7b:d6:d1:03:8f:c7:23:eb:03:
a3:95:7d:ac:7d:9d:01:33:21:31:d8:35:33:58:e7:fe:4c:e3:
93:1e:2c:0b:34:5a:71:f9:71:92:5e:c0:4a:0b:91:ae:4d:68:
30:53:44:5d:83:ca:93:91:2b:3e:11:df:29:dc:ca:5d:a1:44:
ec:85:4f:3f:0e:fc:26:fb:de:d4:7d:b6:ee:d6:35:8c:98:6c:
62:3e:7b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org