Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/1jKQ7Y-7pLcO2mBqIZ2aAC9Yp0Y.roa
File: 1jKQ7Y-7pLcO2mBqIZ2aAC9Yp0Y.roa (raw, json)
Hash identifier: gt3tbN3uAzcKGqV5WdwZXYm92slrCfmu2wZWj/whRFU=
Subject key identifier: D6:32:90:ED:8F:BB:A4:B7:0E:DA:60:6A:21:9D:9A:00:2F:58:A7:46
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01880504A146123D84612850EABDBBF06B34
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/1jKQ7Y-7pLcO2mBqIZ2aAC9Yp0Y.roa
Signing time: Wed 10 May 2023 09:36:09 +0000
ROA not before: Wed 10 May 2023 09:36:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49040
IP address blocks: 151.251.41.0/24 maxlen: 24
151.251.42.0/24 maxlen: 24
151.251.40.0/24 maxlen: 24
151.251.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:04:a1:46:12:3d:84:61:28:50:ea:bd:bb:f0:6b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 10 09:36:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d63290ed8fbba4b70eda606a219d9a002f58a746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:b2:dc:4e:39:e3:2a:d0:57:ff:1b:72:e1:
68:25:dd:0f:56:93:be:23:82:45:37:7a:01:b0:c2:
27:9d:31:30:4e:73:1c:00:0f:e0:d9:75:3a:aa:b2:
9b:a2:ee:fe:d1:d4:64:e8:41:e6:58:6a:b5:c6:90:
04:a7:e9:7e:f2:a6:78:21:5c:20:ad:f1:80:ef:d4:
50:af:c7:5d:cb:f7:b1:c2:fe:f9:91:ae:41:99:f0:
35:d3:e3:c5:66:94:dd:48:5d:95:58:51:14:47:ff:
86:ec:0e:4b:d8:f7:bd:8b:2e:3f:d8:13:44:5d:8c:
eb:0f:e6:bd:a1:cf:87:24:6f:29:ca:5e:35:0f:c4:
22:33:b8:78:74:bd:ff:36:18:c8:89:34:a6:c4:f1:
75:2a:20:32:04:76:0a:95:3b:15:e0:66:bc:62:8c:
fd:ba:e2:58:f3:7c:9c:32:96:66:f3:ad:77:e4:7c:
73:92:a7:4d:2f:e2:69:c8:32:e6:44:93:78:1a:65:
f7:ba:da:cd:2d:ea:71:05:b7:ad:b3:67:42:8f:dd:
1a:20:4a:5e:b6:52:67:c6:9e:dc:a6:57:e6:10:b0:
62:4f:39:50:8e:cd:d6:99:1f:ea:7e:d3:92:48:4b:
0c:78:9b:d1:7c:29:53:ae:e9:9e:76:93:ab:7c:45:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:32:90:ED:8F:BB:A4:B7:0E:DA:60:6A:21:9D:9A:00:2F:58:A7:46
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/1jKQ7Y-7pLcO2mBqIZ2aAC9Yp0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.251.40.0-151.251.42.255
151.251.60.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b9:0d:2d:25:4b:26:ea:72:44:d3:18:5b:3e:68:02:ba:25:
c8:0f:51:36:da:aa:85:53:5d:f1:1b:c6:a0:c6:0e:2d:0d:32:
64:8f:42:c1:f9:a5:0f:a6:fa:0f:3e:b5:c2:76:74:c9:fb:70:
a1:15:3e:39:c2:19:a7:c4:06:da:88:b5:09:f2:12:7d:91:40:
41:eb:64:7e:7a:d9:a0:64:43:f9:d8:b5:76:22:cd:19:c0:9b:
58:a2:ff:14:08:3c:05:3a:45:59:4e:f6:86:bb:00:41:54:e0:
80:2a:dd:cf:74:f7:85:6c:e0:8f:5b:98:fe:f5:ea:86:d4:9c:
be:0f:ab:f7:f7:3a:6b:6e:36:06:0e:f9:57:5c:a6:76:67:85:
b5:37:9e:34:44:5e:e9:12:3c:d6:fe:fc:7b:06:f5:92:11:9c:
30:35:f5:be:2e:5a:08:52:07:dd:ec:99:30:2b:3c:fc:ff:b1:
02:7d:14:10:f4:d6:4b:4e:25:b1:51:3d:80:23:dc:da:63:bf:
39:df:ea:35:de:99:1a:d1:66:59:f4:ef:f9:73:7f:2b:68:e7:
57:bd:3d:71:85:64:5b:c7:68:44:fa:06:ae:b7:e6:3e:68:34:
e0:1a:f5:5b:57:e6:e7:5c:2e:c0:66:db:b6:a7:e7:ec:f1:5a:
43:1c:9d:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org