Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BZDPeQxvG4fbUGdfJiExACI4lcI.roa
File: BZDPeQxvG4fbUGdfJiExACI4lcI.roa (raw, json)
Hash identifier: nZPM8AAidCSl/LcnVqXyobas58uGGvZeKPU7xCpdYOk=
Subject key identifier: 05:90:CF:79:0C:6F:1B:87:DB:50:67:5F:26:21:31:00:22:38:95:C2
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF98B4BD5B8D6E5957E9225B883CBF5
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BZDPeQxvG4fbUGdfJiExACI4lcI.roa
Signing time: Mon 02 Jan 2023 00:55:03 +0000
ROA not before: Mon 02 Jan 2023 00:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203535
IP address blocks: 151.251.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:8b:4b:d5:b8:d6:e5:95:7e:92:25:b8:83:cb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0590cf790c6f1b87db50675f26213100223895c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:98:6e:c8:ad:6d:c3:b8:7c:5c:fb:62:70:
31:e6:27:e9:6f:15:d1:e5:32:8b:fa:88:55:8a:48:
8f:a7:c0:c8:99:93:3c:a6:82:86:7e:28:49:1d:73:
32:fc:22:52:5b:88:b8:99:e4:12:bd:f2:b5:76:49:
41:b0:29:82:92:35:56:3a:17:41:32:90:1c:b0:fb:
5c:2a:70:92:24:44:25:9e:dd:f4:14:5a:17:7d:d0:
3a:0e:3c:e8:0b:51:88:51:85:4e:e9:2f:6a:31:89:
53:96:f0:09:e8:a3:7d:38:15:ea:c9:b4:06:e6:86:
ed:68:bf:6c:1f:6b:b1:0e:6f:ac:cd:09:ad:26:84:
66:32:fe:83:92:95:41:ea:22:74:f4:61:4b:19:15:
4c:72:bf:82:24:db:a4:9a:a6:27:7b:5d:c9:45:f5:
fd:26:98:84:8c:83:fa:c9:80:31:da:ac:d6:8d:9b:
c0:0f:c3:33:b6:7a:45:bd:5f:b3:00:ea:fd:33:cc:
fe:25:29:72:8a:9d:4b:db:cb:a3:76:7a:7b:2f:d4:
fa:72:6f:43:4b:2b:e6:23:80:26:ba:46:71:a6:20:
1c:70:94:51:69:b3:9b:d2:8b:b9:d3:20:72:65:73:
cc:ad:c7:15:62:68:b9:61:b3:c5:64:e1:3a:13:6d:
39:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:90:CF:79:0C:6F:1B:87:DB:50:67:5F:26:21:31:00:22:38:95:C2
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BZDPeQxvG4fbUGdfJiExACI4lcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.251.224.0/24
Signature Algorithm: sha256WithRSAEncryption
89:89:48:06:10:32:92:77:85:09:90:7a:11:d5:25:27:a2:97:
38:30:b4:25:b8:f7:54:3d:87:f0:75:16:0e:64:e2:d9:2e:0a:
0a:ab:aa:03:92:15:5d:19:3f:19:40:e9:84:ad:70:5c:bf:e7:
7c:12:0d:65:90:d6:96:0f:d2:c6:35:2f:8c:97:d9:aa:fd:3d:
c5:3d:d5:79:b2:73:59:e3:c7:82:50:9f:a9:34:f3:99:5e:0c:
14:ef:76:5d:74:7b:d6:96:ac:d1:25:aa:1c:a1:12:62:f0:e0:
96:38:7a:9d:4c:7b:fd:f2:26:72:f9:86:a7:dd:8a:6f:47:0d:
70:8e:da:f8:c5:42:c0:f9:c7:ac:1c:3d:93:9e:70:75:a2:d2:
94:0f:2a:b0:cf:eb:ae:6d:f5:4e:f3:bb:08:9b:b5:c7:11:b8:
c6:22:b1:05:0d:c5:37:30:79:37:08:d2:d4:3d:38:de:97:21:
40:9a:d0:73:c9:fc:f8:4f:c8:ee:59:8a:c7:36:23:6d:01:23:
30:d1:ea:b9:f7:62:a4:3c:a5:b4:60:60:56:8d:5d:e5:69:87:
27:18:2f:b0:85:22:4a:ff:6c:5a:5d:da:f4:6e:7c:82:5c:bb:
7a:aa:26:34:4c:db:74:42:c5:0f:5f:ca:45:c7:44:bf:2f:50:
a3:76:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org