Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pqE-TYiYteP2EO53P8Qinxi7DEY.roa
File: pqE-TYiYteP2EO53P8Qinxi7DEY.roa (raw, json)
Hash identifier: 8GUMImR5fDWau2Z8TBcGYAeBUtgYZedDicQTvFCTJBo=
Subject key identifier: A6:A1:3E:4D:88:98:B5:E3:F6:10:EE:77:3F:C4:22:9F:18:BB:0C:46
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4E227D2F9287DFC242D64A08757F3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pqE-TYiYteP2EO53P8Qinxi7DEY.roa
Signing time: Sun 01 Jan 2023 19:35:23 +0000
ROA not before: Sun 01 Jan 2023 19:35:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399382
IP address blocks: 141.136.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:e2:27:d2:f9:28:7d:fc:24:2d:64:a0:87:57:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6a13e4d8898b5e3f610ee773fc4229f18bb0c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:62:e0:66:11:0f:96:fa:65:6a:73:45:db:
3e:fa:2e:69:a1:55:19:f1:e3:b2:67:e0:b4:ed:e7:
f5:8f:b7:ef:00:8a:9e:81:6a:bd:c8:2f:75:bc:fd:
ff:8b:92:5e:e6:64:2c:5f:48:99:e8:2a:72:c1:1d:
dc:cb:36:bc:4c:29:db:76:4f:d9:92:a3:5d:fc:dd:
fe:0d:a5:7d:be:b4:7a:31:b6:17:2b:40:7d:33:18:
d8:68:4c:5f:ef:87:8f:1e:8e:07:4c:13:06:a1:a3:
92:88:a0:58:69:c0:5e:fc:dc:f4:fe:61:fb:f6:61:
75:12:ad:5f:5c:04:ff:75:6f:77:77:e1:93:6e:9f:
40:26:4b:af:40:72:6f:98:f6:05:97:c5:25:29:1b:
c3:48:75:64:0c:fa:6f:bb:7b:6a:91:3a:51:21:51:
e2:3b:f1:c7:60:48:99:39:fe:a3:b2:66:27:90:fd:
85:f2:b3:d9:68:db:d8:58:6a:cb:cd:7e:46:43:00:
34:2a:37:b9:d0:97:e3:29:66:36:17:49:e0:6f:47:
88:06:0d:68:f2:71:ad:ad:24:86:05:c7:25:4e:6f:
50:13:78:ff:62:44:0f:f5:bb:9d:35:04:2c:9f:3c:
98:27:bc:5a:9a:95:a7:47:5b:18:32:81:b1:fe:97:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A1:3E:4D:88:98:B5:E3:F6:10:EE:77:3F:C4:22:9F:18:BB:0C:46
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/pqE-TYiYteP2EO53P8Qinxi7DEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.60.0/24
Signature Algorithm: sha256WithRSAEncryption
86:95:38:83:4a:5e:44:96:37:d7:1d:f7:ff:fb:52:3b:9c:e6:
73:a5:f1:af:7b:6b:c7:a4:94:e2:58:7a:83:c0:22:de:81:02:
9c:c6:45:18:75:3f:c3:3f:f9:35:12:50:98:9a:28:6c:9b:7f:
17:1c:95:5e:45:c3:1e:70:0c:c2:47:38:7d:43:5c:72:e5:e0:
ad:cc:6b:60:e4:8a:0b:78:e0:ca:0e:10:f5:db:6f:0b:1b:1a:
86:b3:28:0b:4b:16:a2:05:e2:9f:1c:76:41:60:18:9b:fd:45:
ec:e6:0d:1f:49:56:1e:c9:b3:d0:fc:cd:83:ee:9e:f5:ec:ef:
a5:81:ac:c4:8d:69:04:19:d8:26:eb:e5:ec:4b:07:00:df:86:
24:7a:3c:b3:ff:8a:49:dd:22:7b:e7:0c:1d:60:d9:15:5f:84:
db:bc:71:66:6b:70:c1:6d:f6:97:9f:0f:fa:de:6b:7f:de:77:
12:c2:bb:0e:46:6c:bc:34:80:e4:71:d8:51:33:78:37:ae:e3:
e8:fa:11:36:a0:be:3d:a7:9c:19:f0:c2:fd:ed:63:8f:c4:de:
1d:f3:07:4c:76:21:40:86:62:a4:14:2a:ba:2c:c8:cb:31:11:
0c:21:12:d3:17:e5:ee:3b:f1:12:19:e5:80:5f:7a:07:0a:05:
7f:de:af:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:36 2023 by rpki-client on console-ams.rpki-client.org