Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/JhWpnwbvYmZW93iXpHVcueEczl0.roa
File: JhWpnwbvYmZW93iXpHVcueEczl0.roa (raw, json)
Hash identifier: 9j/h6cb6rj6GqDQ4/aYzA1Km5PbQ0WNF/IGjy1qo67Y=
Subject key identifier: 26:15:A9:9F:06:EF:62:66:56:F7:78:97:A4:75:5C:B9:E1:1C:CE:5D
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 0191EAACA5BCCD10716C57C0BBF9470D665D
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/JhWpnwbvYmZW93iXpHVcueEczl0.roa
Signing time: Fri 13 Sep 2024 09:17:48 +0000
ROA not before: Fri 13 Sep 2024 09:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 51.199.252.0/23 maxlen: 24
51.199.254.0/23 maxlen: 24
2a06:5901:8000::/40 maxlen: 48
2a06:5901:8100::/40 maxlen: 48
2a06:5901:8200::/40 maxlen: 48
2a06:5901:8300::/40 maxlen: 48
2a06:5901:8500::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 18 Sep 2024 08:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:ac:a5:bc:cd:10:71:6c:57:c0:bb:f9:47:0d:66:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Sep 13 09:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2615a99f06ef626656f77897a4755cb9e11cce5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:49:a8:df:21:c7:db:7c:c5:05:6f:18:9a:dc:
3b:b2:87:12:ed:97:7f:7f:f7:39:44:6a:f4:86:32:
59:dc:04:3e:88:79:6d:7c:ea:44:b9:06:6d:aa:b7:
65:25:b8:69:1a:54:47:fd:cb:03:5b:b7:4d:c9:a3:
16:12:20:d6:93:b0:23:d7:c4:9d:04:69:d0:70:b4:
aa:1f:79:60:28:27:64:cb:eb:1a:35:0c:62:ed:0a:
22:c4:4e:a5:91:a9:a7:36:a4:5a:1f:9a:ce:e6:a0:
a6:24:aa:5e:7b:a6:1f:2e:3b:62:39:1d:99:d9:69:
ec:fd:0e:6d:b4:62:ba:2f:88:be:07:e3:a8:c6:de:
ec:7b:d3:06:fa:d0:eb:15:21:40:cd:bf:fa:15:72:
d3:f6:ac:09:43:87:46:83:ca:7b:2f:7f:34:7b:58:
60:43:a5:5b:ce:67:c6:77:28:00:3b:95:4b:77:49:
e6:a5:13:45:b8:81:d1:a6:39:72:9b:e5:2b:4b:f2:
25:30:e0:26:74:af:2c:39:c4:7c:3e:9d:f9:64:be:
13:fd:27:37:07:ab:92:5f:55:9b:5a:bd:03:59:81:
e5:1e:09:9f:00:a8:e8:f3:86:6a:24:5b:93:15:80:
13:a1:17:d6:60:3a:67:c5:80:b1:08:b6:d8:0c:56:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:15:A9:9F:06:EF:62:66:56:F7:78:97:A4:75:5C:B9:E1:1C:CE:5D
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/JhWpnwbvYmZW93iXpHVcueEczl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.199.252.0/22
IPv6:
2a06:5901:8000::/38
2a06:5901:8500::/40
Signature Algorithm: sha256WithRSAEncryption
3a:8e:b8:82:bb:f6:0a:2e:02:11:94:0f:da:18:5d:9a:05:36:
e3:93:82:22:a0:4c:48:28:2f:1b:ef:3d:bc:a8:b6:53:7b:5b:
11:d7:16:4f:19:96:a8:29:e1:89:e0:a9:b2:97:bf:8f:5f:78:
94:69:28:94:89:2f:74:a9:ad:57:22:8c:f0:77:c5:f3:f4:4b:
a5:c2:a4:27:51:2f:0c:8b:31:60:01:0d:66:1f:6a:59:27:25:
e2:05:24:da:fe:ed:45:04:32:24:1a:65:6f:7c:58:6b:fc:d6:
96:3f:40:61:d9:c4:92:7b:31:1d:e4:9b:12:a4:ce:fb:49:df:
b4:09:d6:d4:ec:bf:f8:2b:eb:e1:b5:9d:74:23:be:ea:ed:e7:
ad:1c:b2:30:1f:ec:08:88:28:80:84:da:35:aa:f9:27:69:af:
0f:7a:d4:ff:53:78:20:b4:05:e2:df:ea:fd:f9:af:36:b9:81:
fb:48:a1:aa:8b:b7:13:f0:f7:88:a6:22:98:51:d5:a6:11:24:
e5:e6:51:5e:44:c0:39:39:b7:eb:c0:b4:a4:67:a3:c1:b9:bf:
92:7f:f4:fc:67:09:f1:42:9e:27:da:b7:7c:e6:16:40:5d:1b:
a0:03:38:66:d0:d8:c3:61:6b:b3:c7:68:1d:3f:36:8c:0b:ad:
1b:4d:3e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 12:51:52 2024 by rpki-client on console-fra.rpki-client.org