Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ZpaEDR6Ln7nCJk2ra6RrSJDZm6s.roa
File: ZpaEDR6Ln7nCJk2ra6RrSJDZm6s.roa (raw, json)
Hash identifier: qmwxHPDcpulCYzqnWcFiOkVZmNbyq3HRcpM7XGMFYng=
Subject key identifier: 66:96:84:0D:1E:8B:9F:B9:C2:26:4D:AB:6B:A4:6B:48:90:D9:9B:AB
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0186E67B0BAB1EA2ADE921922CAF0EDE8C58
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ZpaEDR6Ln7nCJk2ra6RrSJDZm6s.roa
Signing time: Wed 15 Mar 2023 18:14:28 +0000
ROA not before: Wed 15 Mar 2023 18:14:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52451
IP address blocks: 141.136.58.0/24 maxlen: 24
141.136.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:7b:0b:ab:1e:a2:ad:e9:21:92:2c:af:0e:de:8c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Mar 15 18:14:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6696840d1e8b9fb9c2264dab6ba46b4890d99bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:4e:fc:bb:4b:94:61:39:5d:38:de:3c:33:
2b:04:44:ea:84:c9:89:cb:5c:80:a4:4c:e3:d7:fd:
89:b4:85:34:b4:3e:91:5a:d8:74:02:14:96:30:de:
76:09:d9:65:ae:1b:7d:86:ab:7d:7a:c6:65:5c:3d:
3f:10:7f:38:c8:a4:0d:24:35:a1:6d:3b:a0:24:ac:
1a:94:6d:3d:3c:71:da:58:d4:9f:6a:71:14:01:aa:
65:d4:e7:ff:2f:d0:70:d6:8c:77:07:33:52:e7:39:
64:53:e6:84:e3:fa:30:0c:d7:92:a5:15:f0:91:1c:
24:6f:9f:d8:17:3e:ef:ab:2e:bc:23:a4:f8:b3:47:
da:35:fe:57:28:bc:74:3e:1c:3d:32:b5:65:8c:f7:
1d:82:71:25:da:cc:6d:da:de:93:c5:f8:d5:d7:86:
3f:56:14:57:6f:12:69:5c:03:f8:82:61:e6:02:f7:
8f:f4:a8:8c:1d:5f:c0:08:4e:6b:67:ff:b9:bb:d7:
67:c8:c1:4b:e8:b4:d1:28:ca:ca:b7:ea:b1:f6:f3:
54:dc:fb:b4:0a:51:a7:2c:03:61:75:c6:74:46:76:
d6:c7:80:41:7e:71:cf:1d:37:53:fb:8f:ec:80:cf:
ed:15:5c:f9:3d:f4:92:13:d9:ac:36:5a:2d:cb:fc:
77:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:84:0D:1E:8B:9F:B9:C2:26:4D:AB:6B:A4:6B:48:90:D9:9B:AB
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/ZpaEDR6Ln7nCJk2ra6RrSJDZm6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.58.0/24
141.136.60.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:77:bc:b8:40:32:32:e3:65:95:73:6e:f6:6c:bf:a8:d2:d8:
e3:0a:84:93:4c:ca:53:59:1b:ec:75:0f:70:bf:7c:d2:a3:f6:
58:4c:f8:42:cb:0d:12:ef:2d:78:50:19:74:f4:31:e4:09:a3:
19:b2:92:58:a2:23:c2:25:ca:f2:95:89:8a:1f:26:c2:3b:68:
8b:68:e8:56:1f:0b:89:e7:4f:96:62:28:bd:51:a3:ca:bc:d1:
fd:28:da:ec:50:3e:cd:5d:c8:0b:db:93:1c:28:14:c7:d8:dd:
cb:12:bf:1a:44:2d:cd:dd:4a:de:44:9a:a0:0b:2c:60:da:81:
cc:bb:16:46:c4:43:b9:97:2d:ac:0d:53:35:50:a3:38:5e:8d:
a7:be:c6:4a:26:9c:82:23:cf:d3:ae:36:57:5c:40:e5:f1:b9:
01:b0:ef:c8:e2:98:5b:c7:01:25:82:22:a6:34:07:ed:64:a5:
4e:81:16:51:4c:db:ba:21:cc:84:1c:4d:70:80:27:be:b0:0a:
09:e5:9a:4b:3d:9c:0b:17:ef:92:d2:62:76:d9:4e:30:a4:06:
5c:70:e1:bc:50:f2:9d:cf:c5:f7:3c:b8:95:88:e8:7c:55:dc:
e1:6f:b6:18:24:5b:f3:59:2c:8b:0e:8d:ca:10:2f:5b:45:61:
7c:5c:4a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:09 2024 by rpki-client on console-ams.rpki-client.org