Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/dR7v4C8udaM7jcBK-S4_vgPQ9ww.roa
File: dR7v4C8udaM7jcBK-S4_vgPQ9ww.roa (raw, json)
Hash identifier: jxZBR80boje9OZ6sV8TZPPQWA8TuML+VK0mtGBPO7fU=
Subject key identifier: 75:1E:EF:E0:2F:2E:75:A3:3B:8D:C0:4A:F9:2E:3F:BE:03:D0:F7:0C
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 01856E0B10FCFCE9ABAE9C84E17E594E67A1
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/dR7v4C8udaM7jcBK-S4_vgPQ9ww.roa
Signing time: Sun 01 Jan 2023 15:54:57 +0000
ROA not before: Sun 01 Jan 2023 15:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205052
IP address blocks: 151.248.94.0/24 maxlen: 24
151.248.92.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:10:fc:fc:e9:ab:ae:9c:84:e1:7e:59:4e:67:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 1 15:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=751eefe02f2e75a33b8dc04af92e3fbe03d0f70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:5f:e6:9b:10:05:1e:e2:bf:9d:a7:1a:27:
b5:b6:01:c0:a6:05:27:29:eb:50:29:a8:6d:ac:14:
a0:79:f4:68:66:be:62:ef:5b:b2:a4:87:7c:c4:6e:
9a:3e:57:d1:9b:7a:7c:d6:e4:d7:d2:27:67:03:2e:
90:d9:f2:d9:24:ba:01:fd:d3:50:d4:cd:3c:f7:b8:
c9:b8:ca:0b:f1:d5:7b:ec:ae:d0:b2:12:69:62:47:
5c:de:8b:f0:5b:71:ed:40:93:8f:d0:d8:1a:b3:64:
5b:97:f8:33:35:b2:39:43:1f:91:41:92:c7:72:75:
da:c4:9e:b5:ae:5a:cb:ac:57:5e:ee:17:31:ca:75:
d8:39:80:fc:f1:5c:78:b2:78:59:c1:4c:42:a6:97:
60:2e:db:bd:b0:f9:6c:41:05:48:32:b9:da:08:ce:
d7:a8:01:9e:05:62:a8:84:23:ff:e3:6f:f3:21:5c:
db:b2:78:49:01:1d:64:a8:56:79:a4:59:2b:20:ee:
b6:7e:b8:b2:de:87:23:03:fd:5a:41:62:55:4d:ef:
79:e7:e5:c2:44:19:a8:ba:a9:49:ff:0d:29:a2:7f:
37:27:ce:f1:0e:4a:28:b2:40:e2:4d:f7:c0:5a:cb:
87:69:f7:4e:11:d6:de:46:35:eb:97:82:0e:e8:22:
a8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1E:EF:E0:2F:2E:75:A3:3B:8D:C0:4A:F9:2E:3F:BE:03:D0:F7:0C
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/dR7v4C8udaM7jcBK-S4_vgPQ9ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.92.0-151.248.94.255
Signature Algorithm: sha256WithRSAEncryption
80:27:d4:97:ac:5a:17:39:68:5e:86:41:f9:1e:0f:b4:86:86:
24:0e:6a:31:87:79:4c:af:33:34:01:92:eb:7d:d9:c4:9f:18:
cc:16:c1:94:b0:12:62:d7:f6:2b:6c:1d:4c:11:e5:f9:83:ea:
da:6b:fc:d5:9c:c4:f2:4c:69:3a:ce:60:a8:84:32:e1:c7:40:
36:36:2b:12:43:71:6c:c8:53:25:6c:22:54:63:86:11:e5:10:
58:4c:94:78:ce:09:3f:8d:f0:09:75:cf:81:6f:88:a3:c2:06:
4b:e8:b5:e5:d9:ff:10:07:2b:b2:54:3a:11:ad:11:f6:d5:88:
d4:cf:51:49:69:e2:74:fb:93:bc:32:7c:13:14:6d:da:cd:97:
31:66:d8:a3:b7:64:4f:c6:8e:24:13:20:32:56:bc:fb:84:91:
3f:71:3d:94:01:f0:77:2e:cb:69:fa:8b:dd:fd:fe:9d:1d:63:
27:86:42:dd:7d:47:da:37:0e:3b:13:1e:cc:ed:4b:31:05:f6:
92:99:13:64:1f:23:ad:f7:a9:6b:97:7c:c3:10:2b:66:19:43:
39:e2:83:9c:41:bf:29:77:f5:74:54:8b:0c:7f:42:ff:43:34:
eb:e1:ab:20:ca:47:68:ec:d8:9a:75:d2:85:c0:a7:a2:3c:30:
62:25:82:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:06 2024 by rpki-client on console-ams.rpki-client.org