Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/56saS6rNWKulvJxybNuUurmfy6o.roa
File: 56saS6rNWKulvJxybNuUurmfy6o.roa (raw, json)
Hash identifier: L5todbWOixoAkv3PSL7VwrpXi3Jk4I0EfoSNzdYfGOY=
Subject key identifier: E7:AB:1A:4B:AA:CD:58:AB:A5:BC:9C:72:6C:DB:94:BA:B9:9F:CB:AA
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF97B9ED124BAB9625EE7EAC20D3EAE
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/56saS6rNWKulvJxybNuUurmfy6o.roa
Signing time: Mon 02 Jan 2023 00:54:59 +0000
ROA not before: Mon 02 Jan 2023 00:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59484
IP address blocks: 151.251.42.0/24 maxlen: 24
151.251.40.0/24 maxlen: 24
151.251.41.0/24 maxlen: 24
151.251.60.0/24 maxlen: 24
87.227.140.0/24 maxlen: 24
151.251.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:7b:9e:d1:24:ba:b9:62:5e:e7:ea:c2:0d:3e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7ab1a4baacd58aba5bc9c726cdb94bab99fcbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:8d:ab:7b:33:21:aa:97:5f:fa:3b:d0:41:
8e:33:eb:b4:1f:1d:65:b8:17:95:8d:e8:cd:0f:e9:
f4:4d:86:67:6d:08:9a:f6:0d:fb:5d:d5:a8:88:a5:
1a:31:33:d6:33:24:11:1d:b0:07:6b:37:9e:8c:67:
eb:e5:7d:bb:d8:a9:86:fa:2d:e7:74:23:de:65:db:
21:b0:0a:46:43:9e:65:3c:2e:39:f4:fa:6d:12:3c:
5a:e5:8a:20:6b:97:6e:ca:53:c2:43:1f:d7:5d:ea:
46:30:bd:87:e5:6c:dc:6b:22:5b:80:ec:33:98:8a:
5b:9e:ba:a8:44:c1:b0:b4:f2:0e:b3:ac:d4:c7:eb:
9c:40:b7:b2:6b:68:25:8f:4e:d6:db:ec:8b:8e:c3:
2b:03:b4:10:da:f1:07:eb:41:70:bf:52:f9:a5:cc:
a8:5a:e1:0f:71:4a:d6:38:f5:80:4b:12:a1:94:f5:
fa:e1:f3:28:53:fe:96:39:b5:6c:8c:a0:d3:7a:bb:
29:e1:b0:54:03:c9:8d:ba:59:af:68:21:52:bb:5f:
a4:da:b8:47:a9:df:93:12:3d:e9:07:33:77:cf:ef:
90:d3:1b:f3:1b:3e:0f:95:c9:be:31:0b:a6:17:5c:
ea:08:fe:d2:a4:85:8f:1e:5e:57:38:ea:21:b8:da:
6a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AB:1A:4B:AA:CD:58:AB:A5:BC:9C:72:6C:DB:94:BA:B9:9F:CB:AA
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/56saS6rNWKulvJxybNuUurmfy6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.227.140.0/24
151.251.32.0/22
151.251.40.0-151.251.42.255
151.251.60.0/24
Signature Algorithm: sha256WithRSAEncryption
10:56:f7:91:82:70:ba:9a:6e:18:84:0e:b0:40:91:13:1d:e0:
86:e1:40:db:40:8f:03:a2:2d:85:4d:75:44:71:a1:91:53:5f:
9c:84:a2:cd:c6:f9:23:eb:8d:e4:9c:9f:6a:be:ab:37:5c:86:
38:d8:28:5d:29:3d:c6:9c:90:f6:2f:8f:db:e7:0f:fd:14:5e:
52:a4:4b:15:47:6e:17:5e:7e:0e:e0:fd:7f:10:13:8d:b5:44:
4c:21:c8:3f:96:a4:ad:7f:38:8a:04:3b:c6:f3:44:13:8b:65:
57:8b:c3:d7:74:13:9f:69:b4:38:b6:78:07:5f:02:cf:d1:9e:
db:92:ad:19:29:f5:c2:5f:3c:fa:ee:5d:a2:46:d8:66:b6:7d:
57:0b:8e:69:65:7f:8a:8d:47:14:e1:13:18:95:f0:20:69:19:
8b:6e:24:0c:05:25:0b:3e:62:1b:3c:1d:b3:54:d8:c0:a8:60:
41:6f:95:84:f4:70:93:c0:2d:e9:62:8a:d7:4b:c9:7f:15:c8:
1a:db:d1:0c:51:f0:9a:4d:5f:e2:e1:ad:65:7e:2a:73:ea:f3:
72:6e:d4:87:a2:da:d5:49:5b:69:a7:25:83:ea:72:5c:6b:8f:
6c:38:91:57:6f:59:57:e3:2a:ae:55:bb:be:7d:42:cb:b0:d1:
b5:14:38:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org