Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/B0Cqickjo9L8Ar8M0GwSRhjkJ6A.roa
File: B0Cqickjo9L8Ar8M0GwSRhjkJ6A.roa (raw, json)
Hash identifier: IwQhd3gbazB4d9krUJt+Xhk5Or/ibi0PhvArzwVVZY4=
Subject key identifier: 07:40:AA:89:C9:23:A3:D2:FC:02:BF:0C:D0:6C:12:46:18:E4:27:A0
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF98ADD94831DE460DB21F5F4F87EEE
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/B0Cqickjo9L8Ar8M0GwSRhjkJ6A.roa
Signing time: Mon 02 Jan 2023 00:55:03 +0000
ROA not before: Mon 02 Jan 2023 00:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203312
IP address blocks: 151.251.61.0/24 maxlen: 24
78.83.211.0/24 maxlen: 24
82.103.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:8a:dd:94:83:1d:e4:60:db:21:f5:f4:f8:7e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0740aa89c923a3d2fc02bf0cd06c124618e427a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:d4:ec:f8:78:e8:e9:a8:1c:7a:07:a1:96:
5e:5f:c7:51:3a:6b:8e:bb:94:d6:c8:46:56:27:10:
f9:5d:15:e9:23:30:5f:4f:06:81:ce:52:8f:e6:85:
c0:e5:27:90:de:4d:7e:ca:01:3f:ed:89:8f:ad:78:
01:4d:e4:df:79:bf:d6:35:73:82:0c:c9:ef:8b:2b:
5c:e1:58:7a:3a:c2:2c:42:8d:f1:5c:87:d4:f2:ac:
c1:ca:48:67:bb:0b:73:f7:c8:7b:b1:65:c5:08:ce:
de:4d:cb:eb:c5:a0:f6:91:12:d2:78:7e:cb:e5:57:
0f:39:46:4e:a3:60:31:63:91:4d:68:7a:2c:62:5b:
6d:fc:bb:3f:c8:8b:e9:ec:d1:3b:dc:7c:8f:14:40:
06:fe:f4:b1:6a:f7:c5:83:c0:8a:2a:40:a7:8a:c4:
e2:fa:b9:77:6f:c1:e0:2e:91:e3:d0:20:83:7d:02:
61:5d:8d:a6:cb:f7:3b:06:b5:eb:12:54:e9:aa:81:
5e:74:bb:0b:c4:f8:87:c2:3f:da:08:9d:1d:bd:dd:
30:ee:f3:31:d7:14:43:b7:e8:6a:a7:ed:b6:9b:a0:
44:a1:9d:ae:eb:1a:ec:8e:f8:73:b6:ea:71:9c:1e:
1d:72:6b:4a:ec:8f:00:53:89:f8:13:2d:8b:c7:5c:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:40:AA:89:C9:23:A3:D2:FC:02:BF:0C:D0:6C:12:46:18:E4:27:A0
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/B0Cqickjo9L8Ar8M0GwSRhjkJ6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.211.0/24
82.103.79.0/24
151.251.61.0/24
Signature Algorithm: sha256WithRSAEncryption
20:01:91:f2:b9:4e:19:bf:5a:f4:a2:55:cb:4a:de:af:3a:0d:
54:a3:51:0d:7c:9c:dd:a7:19:69:7a:16:4e:23:49:36:99:0a:
30:30:c6:e7:13:30:69:a6:d1:23:8a:99:73:e7:81:27:7e:0e:
2e:fa:ba:62:8d:2d:ec:f0:80:bc:f3:58:23:4f:a5:e8:d6:ab:
22:fa:21:2c:f8:01:21:b6:a3:9e:f2:83:63:a3:65:c6:09:b1:
2c:c8:c6:00:9a:33:00:5e:50:0a:1c:b4:7b:1f:d3:95:62:86:
07:62:c3:66:e2:a2:5c:e7:25:e5:2c:51:a6:e9:e9:ee:43:cd:
15:d4:0d:16:64:6b:3c:75:ee:f1:81:eb:30:7f:f2:63:63:6a:
72:d6:ed:89:36:95:c5:4d:a5:3e:84:53:55:f2:33:51:a1:e2:
97:c9:17:ba:78:66:5c:24:c6:db:4f:06:b4:30:f0:93:5c:6a:
57:0e:88:b2:db:d5:b1:bb:10:23:2b:ad:a8:78:df:6a:1a:0f:
15:12:a6:c6:1a:99:b1:54:0d:2c:c0:62:b4:fb:6d:fa:b5:82:
ac:1e:c8:af:d2:de:10:d3:cc:bf:cb:75:7c:4b:c7:fb:f3:dc:
d1:2b:06:de:3d:83:eb:b6:df:d4:dc:c1:a3:4b:f7:d2:e5:11:
28:48:a2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:51 2024 by rpki-client on console-ams.rpki-client.org