Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/JiAVUHlUggmu0O0VMsHoziKzRv4.roa
File: JiAVUHlUggmu0O0VMsHoziKzRv4.roa (raw, json)
Hash identifier: 0owKRSbtGrBT61q7VKSCCmeyG9U8mv6SE6MCGzLMaj0=
Subject key identifier: 26:20:15:50:79:54:82:09:AE:D0:ED:15:32:C1:E8:CE:22:B3:46:FE
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 01882BF1E97C176E54A67D1873E2E6B735D4
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/JiAVUHlUggmu0O0VMsHoziKzRv4.roa
Signing time: Wed 17 May 2023 23:00:54 +0000
ROA not before: Wed 17 May 2023 23:00:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 51.199.252.0/23 maxlen: 24
51.199.254.0/23 maxlen: 24
2a06:5901:8000::/40 maxlen: 48
2a06:5901:8100::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2b:f1:e9:7c:17:6e:54:a6:7d:18:73:e2:e6:b7:35:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: May 17 23:00:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2620155079548209aed0ed1532c1e8ce22b346fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a6:24:02:d0:50:a2:50:1a:08:ee:d2:e9:b9:
5d:df:b3:c7:7b:23:74:cd:91:39:67:1e:7b:8e:ed:
86:6c:04:7d:6d:68:64:7e:65:33:73:7f:e5:c9:a4:
18:0d:25:be:ef:5a:2b:34:c5:fa:45:b3:91:c5:6e:
17:b3:fc:2f:15:1c:a2:dc:be:76:a5:2e:2a:1b:b8:
9f:32:4a:5d:b9:78:98:e3:0c:1c:cc:a8:df:0c:bb:
9a:f1:64:7c:d3:c3:8c:5b:40:71:51:ba:32:d2:7d:
7c:04:76:92:ca:5f:11:9a:f8:06:0f:38:71:23:5f:
c1:1f:d3:38:2f:b8:98:bf:a3:02:9c:bf:8b:ac:fd:
13:8d:7f:53:01:62:bc:fa:c8:b8:31:ee:66:31:df:
a5:57:18:d1:25:a3:be:26:c2:d4:7c:dd:cb:30:15:
e2:98:2b:8d:9e:86:8b:c6:51:3f:5c:ab:84:2b:6f:
e6:94:57:95:f0:b4:3e:56:50:6e:de:47:51:9e:83:
4f:14:6f:46:3b:40:f4:88:08:77:6f:f1:d7:10:e7:
14:d1:7b:b8:9d:7c:87:ca:77:e8:2d:e1:5b:67:82:
fd:c4:4b:db:42:c7:fe:ba:c2:64:bf:66:2e:d8:05:
02:0d:00:fa:4d:c4:8f:1d:b3:2f:a0:38:5b:86:3b:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:20:15:50:79:54:82:09:AE:D0:ED:15:32:C1:E8:CE:22:B3:46:FE
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/JiAVUHlUggmu0O0VMsHoziKzRv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.199.252.0/22
IPv6:
2a06:5901:8000::/39
Signature Algorithm: sha256WithRSAEncryption
1e:12:58:6a:a5:b6:7c:f7:de:e9:8b:41:d1:5b:11:ca:11:2c:
27:be:fa:58:2e:1f:92:b9:b7:e1:ea:9b:65:31:13:0b:2b:d3:
f7:bc:ed:c7:93:f7:44:7d:21:b0:9d:fb:44:6d:84:72:0a:7c:
a4:73:02:ad:11:e2:b8:5e:9b:95:21:46:4b:91:c4:f0:30:dc:
cd:14:43:1b:77:8f:6d:74:f8:ba:50:9e:16:e1:13:e5:37:e0:
f6:ba:cd:ef:7a:ef:2f:78:21:3c:34:ef:8b:22:66:0d:d1:32:
47:eb:f6:4a:fc:f0:cf:92:99:46:53:d8:b7:2b:6d:2e:95:0c:
9f:aa:fb:6c:f7:87:44:ea:74:73:04:fa:f2:7c:9a:7c:b9:e2:
ee:aa:47:99:89:d1:f5:0b:be:4d:db:57:c5:1c:8d:49:e9:4b:
12:df:d0:4a:af:e8:33:62:e4:6c:08:15:d1:66:12:86:f4:e3:
00:1c:5e:56:cd:dd:d2:d9:22:48:7e:2e:b5:73:d6:3b:e0:9f:
ca:65:29:3f:09:e4:fb:27:b4:9a:fe:9b:da:a9:bf:d6:6d:c7:
3c:eb:9a:c1:c9:16:37:6c:1c:f8:ce:a5:99:73:5c:22:f8:fc:
57:6f:36:a2:32:a2:d6:de:d4:d4:2a:ac:08:8b:5c:20:b6:6c:
f1:14:82:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:23 2024 by rpki-client on console-fra.rpki-client.org