Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/C0FEw5SzRiDMC8OkAajnKcOqRpM.roa
File: C0FEw5SzRiDMC8OkAajnKcOqRpM.roa (raw, json)
Hash identifier: qyXjRholh6PsO2JUZ9UOeCrS9lkW62MEKulkc2dqCgA=
Subject key identifier: 0B:41:44:C3:94:B3:46:20:CC:0B:C3:A4:01:A8:E7:29:C3:AA:46:93
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 019008CA9C3C3EFD7E1CAE029CD94EAB6C72
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/C0FEw5SzRiDMC8OkAajnKcOqRpM.roa
Signing time: Tue 11 Jun 2024 19:33:34 +0000
ROA not before: Tue 11 Jun 2024 19:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43519
IP address blocks: 51.149.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 12:05:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:08:ca:9c:3c:3e:fd:7e:1c:ae:02:9c:d9:4e:ab:6c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Jun 11 19:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b4144c394b34620cc0bc3a401a8e729c3aa4693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:3e:5f:e4:00:f2:21:ca:3c:8b:04:aa:b1:
9a:20:a3:0b:05:71:b7:2e:02:dc:80:97:01:74:4f:
0c:b0:13:f7:47:c4:9f:39:fd:b6:57:36:1d:53:b5:
71:44:ec:81:92:d4:3d:27:7e:bc:8b:09:30:25:b3:
0c:8f:d8:93:93:eb:f5:82:ea:eb:63:a4:ba:c4:1f:
21:d0:be:f4:7f:94:c7:4a:a0:e3:c1:51:83:3f:f4:
29:f0:69:f6:02:10:50:fa:00:e6:cf:63:ec:30:3b:
28:0d:99:12:53:6c:ad:36:9b:c0:f3:6e:f7:8e:d2:
0c:84:80:6e:87:e2:8c:45:53:c9:97:96:0a:74:4e:
4a:27:c5:78:9a:ba:af:db:8c:dc:52:5b:9a:43:42:
90:b4:73:6e:6d:cf:74:7e:dd:d0:31:20:44:df:d6:
21:1f:e6:3f:35:a7:00:42:10:3a:3b:9c:05:8c:2a:
32:88:34:f4:87:ed:80:01:4c:cc:dd:5f:d6:a1:64:
d8:6d:67:77:f0:db:a3:1b:02:68:5d:b5:6d:8a:47:
3f:91:ba:b3:b4:bc:73:8c:d8:b0:87:f6:88:e0:c6:
04:4d:d6:3d:b9:30:72:ed:7f:f7:b6:f5:b8:3d:be:
f1:0a:74:2c:48:19:0a:54:60:5a:e8:f9:f6:e8:ec:
bc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:41:44:C3:94:B3:46:20:CC:0B:C3:A4:01:A8:E7:29:C3:AA:46:93
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/C0FEw5SzRiDMC8OkAajnKcOqRpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.149.0.0/24
Signature Algorithm: sha256WithRSAEncryption
18:34:16:c3:90:66:00:a2:f2:0b:d3:d2:aa:8d:57:d4:0b:72:
7a:83:69:e5:cc:18:76:97:15:97:82:e0:54:71:8f:1d:3d:65:
7c:ab:dc:9f:4a:7a:2a:67:5d:86:e9:9a:fd:a6:d1:50:5d:39:
40:ad:57:8b:86:c1:31:f5:5c:37:59:a1:15:b7:a2:46:c7:bc:
90:45:a5:b9:bc:02:2e:98:50:11:db:09:25:f6:61:26:45:0a:
bc:a0:bc:dd:cd:88:53:f3:0f:9b:74:66:88:e3:d4:71:d0:82:
e5:97:85:01:79:7f:f5:29:94:d5:9f:b5:c0:d4:ea:a6:20:c8:
fc:b6:8e:c3:bc:c3:3d:75:a4:0a:a4:07:9c:01:53:4d:1e:64:
00:de:5b:f8:58:57:41:8b:16:a4:7f:ad:3d:cd:b7:70:33:db:
23:12:13:4f:c5:b8:28:06:e7:46:55:2a:cb:72:1e:e2:1a:97:
31:23:7e:e6:ee:40:65:e0:47:a5:a3:00:18:9d:7f:4d:30:8e:
55:d3:d6:ec:cb:66:42:fb:6f:f5:b8:bd:4a:45:19:e3:f0:ad:
8a:d8:32:0e:88:b1:d6:69:9d:84:32:23:20:df:c7:30:68:d6:
c4:47:d7:4e:e1:cd:85:35:54:7b:7d:8f:77:f0:31:dc:13:03:
31:61:0a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 18:13:04 2024 by rpki-client on console-ams.rpki-client.org