Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mlifmIBQf3GOqP8GkPv-k-zoQxg.roa
File: mlifmIBQf3GOqP8GkPv-k-zoQxg.roa (raw, json)
Hash identifier: CqTTP40twFGDZGDlecztErQgyU2gXYYHv5j9tLalwII=
Subject key identifier: 9A:58:9F:98:80:50:7F:71:8E:A8:FF:06:90:FB:FE:93:EC:E8:43:18
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4DDB1C64F1467BB0DBE429380A359
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mlifmIBQf3GOqP8GkPv-k-zoQxg.roa
Signing time: Sun 01 Jan 2023 19:35:22 +0000
ROA not before: Sun 01 Jan 2023 19:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 266044
IP address blocks: 141.136.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:dd:b1:c6:4f:14:67:bb:0d:be:42:93:80:a3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a589f9880507f718ea8ff0690fbfe93ece84318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:9e:4b:0d:71:39:ef:d6:26:1b:7b:03:9a:
fb:ff:97:7e:37:c2:33:d8:21:be:ef:25:3b:c6:0c:
c5:59:e0:9a:4f:78:18:ec:6a:4a:af:3f:11:05:52:
23:29:39:77:dd:35:2a:39:c2:83:6b:c8:54:8a:24:
81:69:77:06:96:94:67:42:7a:6a:68:db:75:de:df:
7e:c8:b8:66:16:e9:ba:13:56:75:35:c1:1c:8f:49:
a6:33:2e:b4:80:eb:be:99:fe:b1:7d:d3:d7:fd:63:
64:0d:cd:e8:eb:00:55:64:8f:2a:64:63:63:ca:e6:
4b:e6:9b:98:ef:81:ca:5e:9c:c3:24:8a:48:e6:50:
39:ec:11:ac:46:c1:eb:23:f6:67:3c:89:c9:94:7c:
e9:7a:fb:52:10:de:33:5f:11:9e:a0:fa:dc:f2:32:
57:3e:d5:5a:57:73:f6:ee:72:92:a0:e8:77:3e:24:
fa:19:8d:64:40:32:36:85:ec:9d:98:37:c9:c9:54:
c2:62:1e:fb:d2:4e:66:8f:b8:bf:98:3f:ec:e5:72:
c3:94:ac:58:c8:87:21:d7:18:fc:fe:7b:32:46:c3:
18:bf:a6:72:42:c2:07:56:22:de:7e:56:d5:1e:8b:
66:3c:98:ac:7b:06:ac:b2:40:d4:9c:55:f7:41:12:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:58:9F:98:80:50:7F:71:8E:A8:FF:06:90:FB:FE:93:EC:E8:43:18
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/mlifmIBQf3GOqP8GkPv-k-zoQxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.62.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f0:25:d6:03:2f:27:b4:95:58:99:f7:04:81:47:db:98:64:
0d:53:fa:27:8a:95:1e:72:31:62:45:18:4b:d4:69:4f:f7:c5:
ac:56:1e:cc:37:ae:44:63:f0:87:a3:e7:78:56:08:b7:14:32:
db:4d:b4:a2:10:50:9d:df:45:28:83:d0:88:9c:17:c4:ca:bf:
98:51:16:c0:40:a1:89:77:27:60:d4:03:1a:a2:27:fb:a7:8a:
c0:85:a8:7a:85:ca:40:36:4b:74:84:47:60:48:72:2a:42:62:
63:92:27:b1:97:ae:51:e2:c3:9d:0c:dd:f1:c1:a1:7c:bd:57:
97:a2:89:9f:b6:64:c7:fe:d8:00:fd:b5:1f:a8:a7:c8:0a:91:
41:7e:e1:28:1d:57:bb:50:2d:0b:99:a1:7a:48:6f:1d:93:a5:
84:17:63:9d:3e:fe:18:99:5a:f5:fd:88:4b:d2:0e:01:8e:77:
44:f2:4e:93:1a:f9:fc:c5:80:6a:d1:21:66:2a:c8:b4:31:11:
e2:a8:76:3f:be:8b:fb:32:2c:a8:77:c6:eb:1a:45:e4:93:28:
8b:da:b0:ec:de:ff:90:36:72:2b:60:05:d5:64:8c:07:80:aa:
23:34:00:8b:c8:1c:48:e3:ad:f9:b3:c0:e0:11:96:35:d4:26:
6f:49:4a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:09 2024 by rpki-client on console-ams.rpki-client.org