Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/xQ1MLAjtNGNCAq8GaZia4UANAyo.roa
File: xQ1MLAjtNGNCAq8GaZia4UANAyo.roa (raw, json)
Hash identifier: tPqTse4nA/xenwTmvGvoNxb8hTeDZFcTl0H6hcwrefo=
Subject key identifier: C5:0D:4C:2C:08:ED:34:63:42:02:AF:06:69:98:9A:E1:40:0D:03:2A
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF97EA07C3A6CA227DB24EB2443EA21
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/xQ1MLAjtNGNCAq8GaZia4UANAyo.roa
Signing time: Mon 02 Jan 2023 00:54:59 +0000
ROA not before: Mon 02 Jan 2023 00:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197050
IP address blocks: 151.251.56.0/22 maxlen: 22
85.118.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:7e:a0:7c:3a:6c:a2:27:db:24:eb:24:43:ea:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c50d4c2c08ed34634202af0669989ae1400d032a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:19:37:58:38:40:03:89:1f:78:ae:39:e3:30:
be:92:7a:62:92:7f:42:22:ee:a7:9c:64:20:48:ef:
3a:ef:04:fe:a2:ab:8e:da:70:48:01:b0:48:cd:e2:
96:30:e1:d4:19:0f:ad:48:e5:1e:67:7a:eb:75:01:
f6:cc:de:b4:20:05:04:24:e5:9e:0e:3e:2d:d8:70:
e4:b2:88:e4:a9:f9:40:e7:e3:b7:05:83:e1:03:86:
b8:bf:ff:bd:1c:a5:75:f7:40:e7:5d:22:cb:20:bf:
9f:91:c9:c4:73:df:2a:36:f0:f7:b8:ad:0a:46:2d:
c8:5b:34:dd:f0:7e:08:f6:cb:82:3f:33:68:1d:3c:
56:53:ab:22:f9:ee:a0:eb:7e:87:ec:16:1c:b7:8f:
e7:7d:b3:ba:34:4f:96:bc:e9:65:91:bb:1e:01:c6:
0b:3f:14:b6:07:5c:55:93:e3:76:17:8a:ed:5a:fd:
cb:19:7d:e7:cf:63:ce:32:7e:bd:ba:26:dc:f1:82:
75:2f:5b:84:2c:31:0b:5f:0f:cc:35:99:fa:e2:f5:
67:b3:d4:b9:21:ee:88:c9:be:7f:7b:45:49:63:e8:
60:ec:31:8b:83:70:0e:99:a8:c3:ed:7c:f8:af:11:
17:f6:9c:d9:ba:3d:17:c6:55:82:87:f3:ec:b5:0d:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0D:4C:2C:08:ED:34:63:42:02:AF:06:69:98:9A:E1:40:0D:03:2A
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/xQ1MLAjtNGNCAq8GaZia4UANAyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.91.0/24
151.251.56.0/22
Signature Algorithm: sha256WithRSAEncryption
81:9a:d9:5b:a6:1b:88:1f:ba:67:8e:d5:aa:31:6f:21:a5:3a:
ff:1e:ff:7e:3e:4e:dd:ab:4f:2a:d7:db:fb:4e:c7:b0:0a:8b:
b2:0e:3e:b5:52:af:3e:00:34:1e:d5:81:e8:83:c8:98:b0:5a:
3e:4f:8c:d9:a5:55:65:e8:eb:35:97:e3:82:ee:35:da:51:73:
64:0c:83:a2:bf:3f:24:04:81:79:91:e8:11:8a:02:a4:54:27:
1b:34:b3:45:24:ca:bf:24:e9:a0:12:e4:e7:00:a9:52:19:2e:
e1:bf:6b:00:f1:cb:99:c4:fd:4d:01:08:73:ec:00:5c:0a:dd:
fa:f4:a1:75:bb:48:9e:41:84:ef:65:e8:84:77:53:8c:63:b0:
e0:f6:b9:0b:3b:d3:ae:a6:82:31:ef:8b:04:bc:fb:30:bc:95:
cb:b8:9e:92:e1:b8:4a:0c:74:a9:5d:c0:40:8c:41:d4:5d:7a:
46:1e:aa:82:29:d2:b1:54:cf:00:a7:59:25:e5:73:f4:cd:4f:
52:c7:64:0d:cd:6f:86:52:fa:1a:89:e8:11:c3:74:6f:eb:ba:
e4:52:7f:82:60:c9:2d:5d:d9:0f:f3:8c:6d:85:74:1e:ee:72:
d2:85:02:e8:e9:2f:9d:52:c9:52:7b:c4:aa:4b:62:db:89:14:
7a:f2:56:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:53 2024 by rpki-client on console-ams.rpki-client.org