Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5zeoiOTb6sSld4Zc0iVkiWv8cRA.roa
File: 5zeoiOTb6sSld4Zc0iVkiWv8cRA.roa (raw, json)
Hash identifier: x9rwBFBSoZqwwT1+reJuwFsz3MTEm9q89Zl82G/m2fg=
Subject key identifier: E7:37:A8:88:E4:DB:EA:C4:A5:77:86:5C:D2:25:64:89:6B:FC:71:10
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 01856CAEF5EAF36B60A191D29932CCEB12B3
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5zeoiOTb6sSld4Zc0iVkiWv8cRA.roa
Signing time: Sun 01 Jan 2023 09:34:43 +0000
ROA not before: Sun 01 Jan 2023 09:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20836
IP address blocks: 151.236.18.0/24 maxlen: 24
149.154.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:f5:ea:f3:6b:60:a1:91:d2:99:32:cc:eb:12:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 09:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e737a888e4dbeac4a577865cd22564896bfc7110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:a1:f6:6c:70:30:0a:18:aa:ff:37:47:34:
4e:64:e3:6f:1d:58:97:fe:fa:62:e1:fc:97:11:59:
98:f4:3e:e8:e3:ac:08:42:0b:84:aa:f7:aa:e2:03:
08:40:7e:dc:f5:63:10:ac:2c:ee:3f:c9:17:94:bb:
34:ac:22:84:62:b0:dc:66:3e:85:ab:f0:a4:5e:bf:
ef:f3:30:7f:2d:44:ba:90:6b:c8:00:35:b8:07:30:
5d:16:cb:fd:0a:19:ae:f5:61:c9:94:a0:11:b0:c2:
1d:ad:79:d1:36:38:af:f1:5c:57:98:25:af:cc:ce:
1f:63:f5:de:38:f4:4f:44:d0:02:9f:e5:1f:23:54:
6f:7f:60:07:ca:3c:a0:84:6c:2a:54:59:0f:d8:92:
e5:24:31:47:4f:9d:27:22:47:9f:dd:91:09:09:cd:
43:94:c7:47:2a:b3:d9:eb:db:63:2b:76:c3:a2:e9:
5a:8e:f5:cb:b8:8d:a7:c2:f9:a8:3e:9d:31:b0:81:
f4:5c:3a:4e:81:cc:dd:b8:3c:fe:02:36:d7:04:48:
06:da:85:2f:e8:0a:03:35:e2:85:9f:ea:02:47:06:
cc:69:c3:01:5d:dc:c9:b3:f4:02:b3:0d:f1:f9:ce:
c6:03:23:05:fa:d8:b4:9d:7e:99:bb:67:75:70:f2:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:37:A8:88:E4:DB:EA:C4:A5:77:86:5C:D2:25:64:89:6B:FC:71:10
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/5zeoiOTb6sSld4Zc0iVkiWv8cRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.154.157.0/24
151.236.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:2a:b8:e4:00:6b:74:90:ba:5a:e1:64:02:62:c8:c6:4e:0f:
68:ee:80:07:8e:51:25:08:a3:60:36:76:20:13:6c:ba:b4:b3:
a0:19:1e:84:37:df:10:76:a2:02:f6:01:55:18:c7:f4:5c:78:
41:6b:b1:85:a6:3f:e5:ad:ed:25:91:79:01:14:2a:25:92:a1:
f9:28:82:27:93:e5:9c:c1:69:22:e9:5a:6d:87:dc:d0:4e:cb:
e3:ec:3d:46:b4:5f:8c:33:54:8a:97:a2:11:39:d1:b7:28:15:
d0:cf:28:a7:64:55:23:ba:86:6f:dd:3b:91:f4:a5:4a:d6:9e:
c0:bd:74:aa:dd:cc:81:85:5c:90:f2:5e:72:3b:cf:13:68:7f:
24:90:ee:05:84:1f:71:31:45:d0:8a:f0:d0:d6:14:4a:77:5d:
6c:bc:84:32:5f:6d:fc:bb:e3:37:ff:2c:14:f0:8e:7a:22:41:
c2:a9:43:e3:fd:87:84:29:c1:48:42:dc:89:49:56:28:a2:7c:
8d:bf:29:c4:c5:ce:6e:18:b9:2c:2e:d1:78:28:22:fd:06:c4:
57:63:a6:41:ba:e9:fb:f0:c7:98:e9:2f:31:ae:f4:4e:04:30:
f9:ee:db:b8:7a:00:b4:67:d4:12:d9:63:2d:6c:7b:12:d9:ea:
e5:48:fc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:03 2024 by rpki-client on console-fra.rpki-client.org