Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DlTmlg42E9Vbx1RE5rIrj6_QW2w.roa
File: DlTmlg42E9Vbx1RE5rIrj6_QW2w.roa (raw, json)
Hash identifier: WCuMUyvl5d1HVbMig4m845xS6wsO7OF127dMZL61eh8=
Subject key identifier: 0E:54:E6:96:0E:36:13:D5:5B:C7:54:44:E6:B2:2B:8F:AF:D0:5B:6C
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018602E32DB33623AB69F390B1F31DEC4128
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DlTmlg42E9Vbx1RE5rIrj6_QW2w.roa
Signing time: Mon 30 Jan 2023 13:34:48 +0000
ROA not before: Mon 30 Jan 2023 13:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208888
IP address blocks: 141.136.63.0/24 maxlen: 24
181.41.144.0/22 maxlen: 24
181.41.156.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:e3:2d:b3:36:23:ab:69:f3:90:b1:f3:1d:ec:41:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 30 13:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e54e6960e3613d55bc75444e6b22b8fafd05b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:3c:eb:ca:07:3c:71:2f:c8:84:19:64:c9:
fe:87:74:c0:3b:20:79:31:d0:a9:0f:59:8b:82:c9:
1f:aa:57:d6:e4:5d:be:16:8c:16:04:a3:45:8c:2e:
9b:9f:b6:c2:6f:b2:49:da:aa:7f:44:32:6e:67:20:
77:93:a2:38:85:c9:d7:94:6d:89:c2:af:19:ee:55:
74:d2:e8:61:ca:7c:d3:50:f0:dc:6a:0f:e4:b8:13:
5c:95:bb:95:a8:79:d4:4e:f2:71:b2:01:95:81:b3:
7c:1d:c4:95:11:09:0b:da:39:a6:e2:16:a6:dd:3b:
ff:c7:a6:ee:5f:b3:c5:77:99:eb:b6:56:9d:40:8d:
b3:ac:43:07:ea:2b:af:c5:a2:57:5d:12:61:b7:de:
35:fb:f1:8c:13:38:5d:e2:13:2c:86:a3:b3:a9:20:
e7:9f:ca:cb:17:73:78:26:30:87:3e:1b:ae:fa:fd:
27:a8:4b:26:1d:b5:ba:08:b7:ba:46:a6:f0:01:c6:
7b:bb:77:67:39:37:35:29:80:0e:d7:bf:d5:9f:f4:
74:63:4e:6b:1a:b2:36:93:ab:c3:1a:e1:1f:a4:be:
43:65:c9:b9:c5:dd:f4:8b:fd:b9:7a:8c:73:07:1a:
0c:d9:62:b2:05:58:a3:a5:eb:da:99:11:b7:01:8e:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:54:E6:96:0E:36:13:D5:5B:C7:54:44:E6:B2:2B:8F:AF:D0:5B:6C
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/DlTmlg42E9Vbx1RE5rIrj6_QW2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.63.0/24
181.41.144.0/22
181.41.156.0/22
Signature Algorithm: sha256WithRSAEncryption
62:ad:ae:70:e2:40:8c:02:2f:91:23:9d:8d:a6:fa:59:d0:d3:
76:a0:4b:09:cd:bc:a9:16:d5:ea:5d:9e:d4:6d:66:d4:3a:8b:
80:15:dd:99:3e:3a:89:9f:bc:3c:3c:88:41:d7:6e:0d:b1:08:
bd:56:83:0d:28:cd:b8:8e:02:6f:4c:c3:39:9a:25:b7:b1:68:
4b:e3:2d:30:46:dc:c2:3b:90:9a:ec:41:fe:9f:b4:58:d9:48:
2e:60:e9:0e:1a:0f:3a:86:4f:86:b1:ff:f5:26:76:57:74:79:
e9:f2:b3:4b:71:2b:11:d3:81:95:fe:10:73:19:12:ce:70:8f:
6b:92:f1:9d:b1:1a:5a:e6:b5:75:79:8d:27:c5:c2:20:15:4b:
ad:c9:72:b9:6f:19:27:99:fd:50:26:38:8e:44:6f:1b:90:5d:
14:c1:c0:4a:20:d8:7a:87:89:15:18:a0:47:2e:15:0a:2d:3e:
be:2a:9d:8f:1f:9c:25:40:cf:82:f5:14:86:e0:0e:93:d6:7b:
33:3d:9f:5d:42:32:ff:d4:e3:6b:4d:53:a5:a4:5c:97:da:69:
80:54:81:f3:65:ae:53:0c:a4:89:0c:bd:b2:4c:30:94:e3:fd:
59:1f:74:5e:b2:3f:d4:fd:d2:80:9e:4b:32:3f:bc:2a:be:5c:
08:f6:af:8b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYYC4y2zNiOrafOQsfMd7EEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwMTMwMTMzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTU0ZTY5NjBlMzYxM2Q1NWJjNzU0NDRlNmIyMmI4ZmFmZDA1YjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HM868oHPHEvyIQZZMn+h3TAOyB5
MdCpD1mLgskfqlfW5F2+FowWBKNFjC6bn7bCb7JJ2qp/RDJuZyB3k6I4hcnXlG2J
wq8Z7lV00uhhynzTUPDcag/kuBNclbuVqHnUTvJxsgGVgbN8HcSVEQkL2jmm4ham
3Tv/x6buX7PFd5nrtladQI2zrEMH6iuvxaJXXRJht941+/GMEzhd4hMshqOzqSDn
n8rLF3N4JjCHPhuu+v0nqEsmHbW6CLe6RqbwAcZ7u3dnOTc1KYAO17/Vn/R0Y05r
GrI2k6vDGuEfpL5DZcm5xd30i/25eoxzBxoM2WKyBVijpevamRG3AY6JfwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFA5U5pYONhPVW8dUROayK4+v0FtsMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvRGxUbWxnNDJFOVZieDFSRTVySXJqNl9RVzJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjYg/AwQC
tSmQAwQCtSmcMA0GCSqGSIb3DQEBCwUAA4IBAQBira5w4kCMAi+RI52NpvpZ0NN2
oEsJzbypFtXqXZ7UbWbUOouAFd2ZPjqJn7w8PIhB124NsQi9VoMNKM24jgJvTMM5
miW3sWhL4y0wRtzCO5Ca7EH+n7RY2UguYOkOGg86hk+Gsf/1JnZXdHnp8rNLcSsR
04GV/hBzGRLOcI9rkvGdsRpa5rV1eY0nxcIgFUutyXK5bxknmf1QJjiORG8bkF0U
wcBKINh6h4kVGKBHLhUKLT6+Kp2PH5wlQM+C9RSG4A6T1nszPZ9dQjL/1ONrTVOl
pFyX2mmAVIHzZa5TDKSJDL2yTDCU4/1ZH3Resj/U/dKAnksyP7wqvlwI9q+L
-----END CERTIFICATE-----
Generated at Wed Aug 23 20:19:15 2023 by rpki-client on console-fra.rpki-client.org