Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/F9srLW6v8rjq0KQko17X8Sg8mwY.roa
File: F9srLW6v8rjq0KQko17X8Sg8mwY.roa (raw, json)
Hash identifier: E7/N3Zt0LFNl+HO3NVmeiYENEuqEuSPWSdZkLixLarY=
Subject key identifier: 17:DB:2B:2D:6E:AF:F2:B8:EA:D0:A4:24:A3:5E:D7:F1:28:3C:9B:06
Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Certificate serial: 01856BD37C09A1C7E47F436BCA0446416A40
Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/F9srLW6v8rjq0KQko17X8Sg8mwY.roa
Signing time: Sun 01 Jan 2023 05:35:00 +0000
ROA not before: Sun 01 Jan 2023 05:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 51.149.8.0/24 maxlen: 24
51.149.14.0/24 maxlen: 24
51.149.252.0/24 maxlen: 24
51.149.251.0/24 maxlen: 24
51.149.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:7c:09:a1:c7:e4:7f:43:6b:ca:04:46:41:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f
Validity
Not Before: Jan 1 05:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17db2b2d6eaff2b8ead0a424a35ed7f1283c9b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bb:50:fe:b1:c0:cb:46:0b:79:b1:5b:70:7a:
8e:c0:a0:d6:5a:3a:f8:14:68:57:65:90:6b:e6:32:
8c:fa:4f:c8:05:34:27:07:1c:07:dd:a5:f2:75:af:
69:b5:22:00:7b:fa:43:ca:da:99:06:a8:a1:3c:14:
e9:87:44:5f:0c:91:e6:9e:f4:9e:b7:16:63:d8:10:
0e:3c:79:4a:2c:1b:89:cf:2b:dd:1c:f3:7d:89:3a:
a3:e3:59:b7:ae:49:3a:ee:6c:8b:85:d8:cc:36:ae:
e1:2a:2e:19:7f:76:47:18:a3:6f:03:d5:8c:e8:19:
bf:18:db:52:ab:08:65:e7:9a:cf:79:ae:dd:66:91:
6a:71:97:65:ca:1f:56:cd:48:85:7a:cc:4b:a6:2b:
8f:a7:e4:31:06:05:b8:c8:53:bb:19:f8:7e:2e:47:
76:dc:a0:96:3b:c9:ef:8f:eb:91:16:53:e2:de:d3:
73:e4:50:1f:a8:ee:9d:52:a9:d8:ac:85:a2:a8:12:
82:57:8a:0a:cf:17:f8:45:90:c0:9f:e7:c3:7a:da:
d0:7d:6a:40:7b:2a:b5:d1:1a:2c:4a:18:d5:97:80:
7c:ac:86:8d:7b:91:a4:d1:c0:72:97:f4:ea:8e:44:
d5:04:ec:f5:89:6e:b5:81:5e:a6:9d:5a:2f:2d:6f:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DB:2B:2D:6E:AF:F2:B8:EA:D0:A4:24:A3:5E:D7:F1:28:3C:9B:06
X509v3 Authority Key Identifier:
keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/F9srLW6v8rjq0KQko17X8Sg8mwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.149.8.0/24
51.149.14.0/24
51.149.250.0-51.149.252.255
Signature Algorithm: sha256WithRSAEncryption
12:23:16:92:a5:be:a7:02:46:69:5d:1c:14:76:f4:57:23:fc:
32:b3:69:32:c7:0a:2a:96:80:6c:7e:8f:27:70:27:31:5a:dd:
24:7e:b9:43:09:b8:7a:9a:e1:a5:56:00:b7:16:c1:ad:23:5c:
40:9d:ee:0b:9a:9e:ac:ee:02:1b:a2:ba:49:c6:ea:73:af:9d:
5d:f0:54:ea:bc:7f:fc:33:3f:3d:7b:a4:c1:09:51:c3:fa:46:
1b:aa:0e:3d:9a:8e:d6:ec:0a:3d:7d:c4:74:ed:6c:87:07:da:
5f:69:d9:46:f5:a6:ad:64:97:f4:66:28:d3:e2:e2:c0:e9:24:
c0:48:45:6e:74:c2:4f:41:a4:0a:27:7a:29:f6:19:36:87:cd:
f8:c3:bf:dd:42:ad:8c:c7:36:e4:f7:26:f4:7d:1d:cc:e1:43:
13:4c:e2:83:15:07:a7:20:69:52:d7:3a:16:d1:3a:f1:ce:fd:
65:a1:42:cd:97:d8:d0:30:7d:c0:1a:66:e9:55:78:6f:f2:e8:
ab:c5:61:44:ec:97:c5:30:31:b0:5e:43:b4:82:82:01:24:9a:
8c:ca:33:98:ea:b5:70:22:9d:5b:fc:ce:0f:a2:32:2d:1a:c0:
5d:35:17:b5:4e:54:20:3c:b9:b3:da:ba:42:ce:e7:48:8c:15:
f0:9d:29:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:41 2024 by rpki-client on console-fra.rpki-client.org