Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/sUAhJe12BsGcO0BYwGQ5mh6k54o.roa
File: sUAhJe12BsGcO0BYwGQ5mh6k54o.roa (raw, json)
Hash identifier: U3PwXK+D0m3cthvdY1voCQ5unNdhUGipKVyNjA0nsns=
Subject key identifier: B1:40:21:25:ED:76:06:C1:9C:3B:40:58:C0:64:39:9A:1E:A4:E7:8A
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 0186C157F83D9A15E2A30C5927C08892BDB9
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/sUAhJe12BsGcO0BYwGQ5mh6k54o.roa
Signing time: Wed 08 Mar 2023 13:10:13 +0000
ROA not before: Wed 08 Mar 2023 13:10:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12716
IP address blocks: 151.251.254.0/24 maxlen: 24
151.251.255.0/24 maxlen: 24
37.63.96.0/22 maxlen: 24
83.97.30.0/24 maxlen: 24
84.252.40.0/23 maxlen: 23
151.251.240.0/24 maxlen: 24
151.251.238.0/24 maxlen: 24
151.251.239.0/24 maxlen: 24
151.251.245.0/24 maxlen: 24
151.251.240.0/20 maxlen: 20
151.251.243.0/24 maxlen: 24
151.251.246.0/24 maxlen: 24
151.251.241.0/24 maxlen: 24
151.251.244.0/24 maxlen: 24
151.251.242.0/24 maxlen: 24
151.251.253.0/24 maxlen: 24
151.251.248.0/24 maxlen: 24
151.251.251.0/24 maxlen: 24
151.251.249.0/24 maxlen: 24
151.251.252.0/24 maxlen: 24
151.251.247.0/24 maxlen: 24
151.251.250.0/24 maxlen: 24
89.215.62.0/23 maxlen: 23
151.251.44.0/22 maxlen: 22
151.251.68.0/22 maxlen: 22
185.224.160.0/23 maxlen: 23
37.63.0.0/20 maxlen: 20
37.63.16.0/22 maxlen: 22
37.63.20.0/22 maxlen: 24
62.204.154.0/23 maxlen: 23
151.251.121.0/24 maxlen: 24
85.118.64.0/22 maxlen: 22
85.118.71.0/24 maxlen: 24
85.118.68.0/23 maxlen: 23
213.226.17.0/24 maxlen: 24
85.118.70.0/24 maxlen: 24
85.118.76.0/22 maxlen: 22
85.118.74.0/24 maxlen: 24
85.118.72.0/23 maxlen: 23
213.226.19.0/24 maxlen: 24
185.151.156.0/22 maxlen: 22
85.118.84.0/24 maxlen: 24
85.118.80.0/22 maxlen: 22
213.226.36.0/24 maxlen: 24
85.118.92.0/24 maxlen: 24
85.118.93.0/24 maxlen: 24
213.226.40.0/24 maxlen: 24
213.226.51.0/24 maxlen: 24
213.226.57.0/24 maxlen: 24
213.226.56.0/24 maxlen: 24
213.226.63.0/24 maxlen: 24
213.226.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:57:f8:3d:9a:15:e2:a3:0c:59:27:c0:88:92:bd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Mar 8 13:10:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1402125ed7606c19c3b4058c064399a1ea4e78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2b:86:23:dc:03:f3:34:c0:d9:85:59:f9:f0:
1a:a0:94:01:37:2e:05:2f:2f:1b:ed:82:70:55:28:
c1:9c:be:d0:ee:ab:3c:d8:53:aa:16:bf:a3:54:73:
7d:c9:51:af:62:d2:30:40:da:03:9e:08:37:ec:39:
35:ad:2e:f0:8d:b9:b3:a1:74:c7:16:b4:a7:78:b0:
c9:8e:29:b4:0c:0f:85:63:08:5c:ff:69:b7:14:66:
bb:b9:f1:e6:ba:bd:88:3f:bc:b9:a7:48:cb:f6:bb:
12:ff:c5:9e:f3:e6:95:7a:16:c2:d0:e0:d6:f7:73:
72:ee:b0:0d:2d:0a:ff:10:7c:44:fa:2f:c4:f7:8d:
a7:f6:2b:8b:8b:34:f1:54:fc:96:b4:e3:cd:52:55:
30:7b:82:77:15:be:be:f8:aa:f2:08:98:e2:a8:44:
9b:45:cd:71:33:24:b7:60:bf:a5:7f:6d:06:9b:ee:
4b:b0:71:26:49:b4:4f:c1:ef:74:b4:db:64:ff:d2:
7e:3b:8b:1e:08:90:3f:30:d4:90:df:cf:b3:1c:b2:
a8:83:3c:a8:23:5d:30:6d:a8:dc:eb:8a:8b:35:0a:
b6:fe:1d:f4:5e:82:69:87:94:41:d1:8f:d7:2c:76:
1c:38:e4:48:71:b4:a1:5e:ca:b5:06:25:29:ba:0f:
37:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:40:21:25:ED:76:06:C1:9C:3B:40:58:C0:64:39:9A:1E:A4:E7:8A
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/sUAhJe12BsGcO0BYwGQ5mh6k54o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.63.0.0-37.63.23.255
37.63.96.0/22
62.204.154.0/23
83.97.30.0/24
84.252.40.0/23
85.118.64.0-85.118.74.255
85.118.76.0-85.118.84.255
85.118.92.0/23
89.215.62.0/23
151.251.44.0/22
151.251.68.0/22
151.251.121.0/24
151.251.238.0-151.251.255.255
185.151.156.0/22
185.224.160.0/23
213.226.17.0/24
213.226.19.0/24
213.226.36.0/24
213.226.40.0/24
213.226.51.0/24
213.226.56.0/23
213.226.59.0/24
213.226.63.0/24
Signature Algorithm: sha256WithRSAEncryption
68:6e:83:ff:3d:21:bd:2a:db:6c:d0:d7:56:b8:d2:f1:55:3d:
2f:cb:ff:78:99:fd:38:b4:96:a4:af:e1:33:4e:d5:6c:92:f9:
1d:6d:df:43:e8:4b:0c:79:8c:29:c1:c7:7d:31:92:75:09:44:
21:78:72:ba:58:91:8b:2f:b4:23:d7:43:52:16:ff:af:9f:f0:
b1:54:49:35:a4:4c:1c:5d:36:0f:dc:85:e7:33:e6:79:1f:c9:
6e:55:02:19:a7:da:48:7c:ca:c4:dd:68:2f:e4:39:70:37:34:
e3:c1:b6:f7:8a:d2:10:87:4d:9c:a3:af:dc:05:67:5b:2e:f4:
c6:a9:49:f6:7b:ca:df:8c:f1:29:6a:5f:4d:57:cc:5d:5c:e1:
21:78:cd:36:0c:0d:97:c7:4d:02:cd:e3:32:47:b5:a2:30:ae:
d2:34:00:c1:88:84:16:06:ad:b8:fa:ca:5f:1a:6b:52:3b:37:
0f:d5:96:bb:aa:d8:c4:29:e9:be:46:c9:c4:0b:4f:71:13:71:
09:a6:b7:4f:63:6b:00:f2:d5:b8:7f:1f:d1:c4:6c:5c:e7:15:
91:f2:e5:4e:66:40:eb:a1:ec:9c:b4:5f:0b:a4:42:2d:18:18:
9c:70:df:32:45:da:a2:16:72:bf:b5:be:74:72:b9:08:78:2f:
ec:cb:92:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:13 2023 by rpki-client on console-ams.rpki-client.org