Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nZvyQm2gq5XaS3Awmlr06Eo1Vmw.roa
File: nZvyQm2gq5XaS3Awmlr06Eo1Vmw.roa (raw, json)
Hash identifier: RCFh6LoXd6tO7ia2Aa9yktms1uPlxk6Fig7RTNxSmsQ=
Subject key identifier: 9D:9B:F2:42:6D:A0:AB:95:DA:4B:70:30:9A:5A:F4:E8:4A:35:56:6C
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF98F30C9AC7A1C2B551A8061382411
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nZvyQm2gq5XaS3Awmlr06Eo1Vmw.roa
Signing time: Mon 02 Jan 2023 00:55:04 +0000
ROA not before: Mon 02 Jan 2023 00:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210646
IP address blocks: 151.251.66.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:8f:30:c9:ac:7a:1c:2b:55:1a:80:61:38:24:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d9bf2426da0ab95da4b70309a5af4e84a35566c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:65:f0:97:db:4b:3f:8a:6a:10:be:7d:33:
1f:f1:62:b5:ea:29:52:1e:e1:71:3d:b0:2b:1d:c3:
9d:46:8d:12:f4:c2:82:2c:1d:a2:0b:46:48:1f:9f:
e8:16:7f:e3:90:cc:cb:bc:d7:f1:a2:af:20:0c:a5:
90:62:23:f0:f2:89:50:ab:18:06:3a:fb:44:5a:aa:
a9:bc:e7:c1:8c:da:ab:06:fd:db:5a:5e:20:1a:53:
c8:b1:f9:97:2f:c9:89:45:f8:8f:75:48:ea:5e:b8:
23:c3:83:98:9a:72:eb:17:bb:3e:8a:d2:71:a0:d4:
4c:43:22:77:65:9e:ae:e1:a2:f2:8d:51:a9:3b:43:
0d:48:fc:f4:03:6c:69:63:99:bb:39:d6:ba:65:3d:
11:b0:04:a8:cf:26:8d:0c:02:9a:fc:26:57:b8:2c:
3d:62:d4:3c:81:8f:65:af:48:bc:c8:bb:76:ad:c5:
8f:7e:13:69:ee:08:6a:98:2f:5b:47:0e:19:84:be:
04:4b:d8:65:51:bb:bd:72:67:4d:ac:41:a7:7c:40:
09:c0:24:06:53:e2:89:23:56:89:bc:f4:be:24:60:
4c:04:4e:68:8e:60:51:b2:a5:2e:f2:67:01:2f:f9:
90:91:5c:c8:3c:67:da:02:3b:a3:77:65:cf:d6:34:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9B:F2:42:6D:A0:AB:95:DA:4B:70:30:9A:5A:F4:E8:4A:35:56:6C
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/nZvyQm2gq5XaS3Awmlr06Eo1Vmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.251.66.0/23
Signature Algorithm: sha256WithRSAEncryption
89:3a:b1:e6:1d:e9:b9:36:73:c2:36:ae:17:46:11:03:b0:b6:
a0:b8:d4:31:2a:4f:f7:66:78:26:7b:99:43:47:9a:1f:3a:08:
bc:36:34:3f:b2:9c:40:b8:15:16:3c:50:fc:6b:6d:9b:a4:d6:
86:f2:7e:7b:d4:a0:e5:71:58:a8:3a:06:85:ff:60:14:07:cc:
89:06:70:1d:3e:ff:e0:81:6e:a1:25:50:f6:56:ec:e4:03:38:
5a:15:55:17:13:b5:0b:3c:5f:40:90:8a:71:d1:e8:ff:e4:ad:
72:7d:e1:15:bf:ba:75:bf:c6:1b:c0:91:cc:50:ec:c3:6b:5d:
13:a0:86:4a:d2:a0:b6:7b:a1:ec:de:14:12:ff:c6:33:12:c6:
a3:30:83:ca:f1:66:06:f4:7c:ed:54:7a:6a:22:51:9e:34:b2:
aa:08:df:19:a2:29:f8:8f:80:1e:54:ab:8c:9e:3a:02:53:34:
79:4a:a0:2c:6e:25:fa:0e:42:78:e8:eb:18:f4:5b:f6:83:79:
11:37:e9:3f:04:37:a7:7d:c3:2b:c5:76:1b:77:75:8f:05:fe:
b4:76:2c:c6:d7:0d:cd:a9:e1:2c:96:8d:be:d7:9e:00:2d:f9:
9f:cc:a8:eb:65:1a:28:73:7a:d4:b1:e2:b3:a8:20:f0:43:44:
31:63:87:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv+Y8wyax6HCtVGoBhOCQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjMwMTAyMDA1NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDliZjI0MjZkYTBhYjk1ZGE0YjcwMzA5YTVhZjRlODRhMzU1NjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxdl8JfbSz+KahC+fTMf8WK16ilS
HuFxPbArHcOdRo0S9MKCLB2iC0ZIH5/oFn/jkMzLvNfxoq8gDKWQYiPw8olQqxgG
OvtEWqqpvOfBjNqrBv3bWl4gGlPIsfmXL8mJRfiPdUjqXrgjw4OYmnLrF7s+itJx
oNRMQyJ3ZZ6u4aLyjVGpO0MNSPz0A2xpY5m7Oda6ZT0RsASozyaNDAKa/CZXuCw9
YtQ8gY9lr0i8yLt2rcWPfhNp7ghqmC9bRw4ZhL4ES9hlUbu9cmdNrEGnfEAJwCQG
U+KJI1aJvPS+JGBMBE5ojmBRsqUu8mcBL/mQkVzIPGfaAjujd2XP1jRTdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ2b8kJtoKuV2ktwMJpa9OhKNVZsMB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvblp2eVFtMmdxNVhhUzNBd21scjA2RW8xVm13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/tCMA0G
CSqGSIb3DQEBCwUAA4IBAQCJOrHmHem5NnPCNq4XRhEDsLaguNQxKk/3Zngme5lD
R5ofOgi8NjQ/spxAuBUWPFD8a22bpNaG8n571KDlcVioOgaF/2AUB8yJBnAdPv/g
gW6hJVD2VuzkAzhaFVUXE7ULPF9AkIpx0ej/5K1yfeEVv7p1v8YbwJHMUOzDa10T
oIZK0qC2e6Hs3hQS/8YzEsajMIPK8WYG9HztVHpqIlGeNLKqCN8Zoin4j4AeVKuM
njoCUzR5SqAsbiX6DkJ46OsY9Fv2g3kRN+k/BDenfcMrxXYbd3WPBf60dizG1w3N
qeEslo2+154ALfmfzKjrZRooc3rUseKzqCDwQ0QxY4cI
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org