Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/b3k-Xc_k1WALhsJnKvjySFYo1-8.roa
File: b3k-Xc_k1WALhsJnKvjySFYo1-8.roa (raw, json)
Hash identifier: msR2k+a5sZ9oJlL12vUKjq8x7qp7eVi5Q939pBfx1P8=
Subject key identifier: 6F:79:3E:5D:CF:E4:D5:60:0B:86:C2:67:2A:F8:F2:48:56:28:D7:EF
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 01856F79A3396B84C1E73180DBAE3B882107
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/b3k-Xc_k1WALhsJnKvjySFYo1-8.roa
Signing time: Sun 01 Jan 2023 22:35:20 +0000
ROA not before: Sun 01 Jan 2023 22:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39013
IP address blocks: 151.237.66.0/24 maxlen: 24
151.237.82.0/23 maxlen: 23
151.237.80.0/22 maxlen: 22
151.237.80.0/23 maxlen: 23
151.237.90.0/24 maxlen: 24
151.237.88.0/23 maxlen: 23
194.69.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a3:39:6b:84:c1:e7:31:80:db:ae:3b:88:21:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jan 1 22:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f793e5dcfe4d5600b86c2672af8f2485628d7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:78:7d:f2:87:ee:de:00:6a:e4:d3:e3:d7:
19:32:20:57:25:30:f5:3e:ed:f9:ad:94:7e:d3:dc:
ea:9b:1f:b6:30:1d:d6:83:7d:de:34:74:4c:74:85:
39:46:1b:a3:85:0e:91:1f:97:5b:8a:41:99:e0:f6:
ea:e0:60:31:b4:f1:3e:49:c2:d6:d1:99:27:cf:05:
0a:87:04:03:b2:ec:4e:44:5c:20:b0:ce:c7:4d:19:
3a:e4:c0:62:85:08:d4:97:c2:25:3e:70:e2:a7:6d:
4f:4a:0a:86:d0:43:0f:37:bc:65:6b:61:e3:5e:c8:
2a:4f:9c:43:7a:06:ce:4a:64:49:ce:5b:9e:2d:ff:
16:e3:d6:8e:52:9e:94:ed:81:01:fd:a8:90:47:68:
74:18:ee:bc:8e:96:65:3f:b5:5e:93:fc:53:9d:19:
97:3f:a6:ec:1d:74:4e:fb:95:8f:89:6e:04:61:2a:
fb:73:e3:ba:5c:4a:f4:cb:26:67:1b:63:fe:26:0b:
6f:c1:d9:96:fc:eb:86:9f:e5:9e:ed:e4:e0:dc:d4:
39:24:6b:f9:80:3c:c5:a0:04:d1:89:7b:da:c7:bc:
aa:78:cd:e1:da:f1:34:85:23:7e:9e:d6:48:20:ed:
e4:fd:ad:4a:6c:6a:fa:c7:41:3c:57:db:83:de:08:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:79:3E:5D:CF:E4:D5:60:0B:86:C2:67:2A:F8:F2:48:56:28:D7:EF
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/b3k-Xc_k1WALhsJnKvjySFYo1-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.66.0/24
151.237.80.0/22
151.237.88.0-151.237.90.255
194.69.203.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:68:da:d8:8b:a0:48:9d:23:df:76:53:41:77:bb:9d:ed:d2:
85:e9:f8:f9:6c:46:d6:55:01:fd:31:b0:2c:63:ce:d5:d4:10:
f2:2c:18:8d:27:97:38:63:37:87:a4:91:ee:8f:66:f3:a0:b8:
6f:c1:99:a1:b3:6b:01:b8:4d:d8:d6:3d:5f:42:6d:76:48:32:
ee:7f:73:a0:ee:f9:55:a5:89:b6:95:2d:ef:99:d0:78:f1:bf:
62:82:28:ee:7d:a9:43:96:81:46:03:89:59:5e:84:87:0d:33:
f1:aa:b8:8c:39:01:ec:86:a6:cb:e4:1a:c9:65:4c:f2:89:67:
35:31:40:71:c7:06:8f:e1:3c:6f:d6:02:50:55:c7:83:ac:f4:
cb:ea:1c:2c:62:49:9e:34:b4:24:91:1d:3c:a1:ac:ba:0b:3a:
27:0b:33:8f:b1:42:09:0a:2c:78:6f:98:82:65:86:52:cd:6b:
c7:37:03:95:52:89:e9:a2:f6:b5:69:2a:7f:7b:6b:8b:62:fa:
13:2a:17:9b:62:e5:a1:28:43:00:bd:a6:b0:12:c1:5f:a7:25:
d8:83:3e:04:01:46:d7:a6:89:b2:b0:86:db:a3:ee:2e:2e:9b:
69:ef:4c:5a:2c:f9:16:64:10:cc:3a:ee:a1:ba:1d:cd:f1:74:
b9:dd:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:50 2024 by rpki-client on console-fra.rpki-client.org