Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2BHxXSB8fC2Fv7QrEX0HqHRfXrI.roa
File: 2BHxXSB8fC2Fv7QrEX0HqHRfXrI.roa (raw, json)
Hash identifier: Sd2SfzQVny4ChdMTQlMzEQvT+BkinXQBuY4MFwW1CPw=
Subject key identifier: D8:11:F1:5D:20:7C:7C:2D:85:BF:B4:2B:11:7D:07:A8:74:5F:5E:B2
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CAC2B283BE0AE60C3D01AB65845D25A3F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2BHxXSB8fC2Fv7QrEX0HqHRfXrI.roa
Signing time: Wed 27 Dec 2023 16:45:58 +0000
ROA not before: Wed 27 Dec 2023 16:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201838
IP address blocks: 161.51.48.0/20 maxlen: 24
161.51.192.0/19 maxlen: 24
161.51.96.0/23 maxlen: 24
161.51.224.0/20 maxlen: 24
161.51.252.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ac:2b:28:3b:e0:ae:60:c3:d0:1a:b6:58:45:d2:5a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 27 16:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d811f15d207c7c2d85bfb42b117d07a8745f5eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:04:21:1b:b1:c1:15:e4:fc:1b:89:1d:bc:
a8:c9:e3:75:ae:bc:94:7d:4f:a0:a9:8a:6f:59:b0:
d9:06:74:85:1a:98:52:89:ce:2c:7a:5c:01:89:3e:
ea:8d:86:4e:dd:58:d3:ae:58:be:47:d7:cd:ff:e8:
6b:d1:2f:d7:22:d5:25:29:7f:db:57:33:71:21:30:
72:11:ab:b9:de:53:7c:73:3a:25:34:12:a9:2d:5a:
f2:ec:7a:7c:ce:93:e6:ce:e7:8a:c9:75:0f:27:fa:
7c:b7:85:27:03:87:52:61:e8:42:42:46:b5:83:e8:
6b:c6:d6:2a:dc:41:5e:3c:36:2c:9d:58:20:95:ac:
10:be:ea:ee:26:c6:14:d0:31:8b:f0:98:79:b4:b9:
37:2b:67:01:10:89:a3:59:44:24:e5:7d:68:e9:ad:
b2:01:4c:db:c5:3a:d0:09:9a:07:35:b5:78:8c:7c:
9e:f6:f4:8d:1d:4b:1d:96:db:79:07:02:8c:57:a4:
e3:b5:a3:ff:8a:36:cb:3a:eb:e6:8e:9d:ff:3f:9b:
6b:7c:26:a0:d0:f1:c1:17:66:f5:22:9b:e1:b3:66:
ff:7a:a3:52:ca:a2:21:1e:6c:a0:4e:e6:8a:be:dd:
1d:2c:a9:9e:15:5a:4f:d8:f4:7d:77:d4:c4:14:d7:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:11:F1:5D:20:7C:7C:2D:85:BF:B4:2B:11:7D:07:A8:74:5F:5E:B2
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2BHxXSB8fC2Fv7QrEX0HqHRfXrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.51.48.0/20
161.51.96.0/23
161.51.192.0-161.51.239.255
161.51.252.0/23
Signature Algorithm: sha256WithRSAEncryption
61:cb:fd:01:ba:44:2a:06:62:55:2b:b5:77:c6:d2:99:75:17:
f3:43:f9:27:31:76:15:22:0e:07:0f:fe:ba:4e:3e:5f:2a:cd:
a1:29:0b:ca:cc:ae:8b:f2:6b:2b:c8:b9:82:85:31:5b:98:b2:
0a:90:88:4d:d2:e6:99:3b:48:94:1c:ff:a2:eb:7e:a1:0d:bc:
79:38:80:d2:d7:b8:2f:ef:f3:04:f2:61:89:28:10:e2:df:59:
30:ed:9b:bb:5e:c2:4c:74:9a:b1:38:d1:5f:74:5a:29:6f:8c:
a3:1b:a3:fe:45:81:0c:66:5f:84:1a:86:14:f1:56:6a:8d:64:
aa:57:ee:b7:01:2e:16:2b:05:10:00:58:71:70:8f:49:1a:99:
85:7a:5b:9e:a7:4c:3e:ae:1c:3a:bd:78:e7:44:da:ac:d3:ec:
63:8c:53:a1:5d:15:9e:97:e6:02:0a:08:2b:f5:9f:e3:7d:da:
0b:8a:d9:37:01:73:04:d3:50:71:bf:bf:21:f4:f9:f8:c2:10:
27:af:c3:c9:02:28:c2:f4:d9:f7:d9:69:97:7e:c0:7b:48:d2:
8a:9f:a2:7b:62:25:6b:12:05:5b:c7:61:c4:d9:cc:a0:87:3b:
95:a1:4d:c9:a9:03:80:55:58:26:f3:59:74:bb:d2:b0:91:d4:
d4:ad:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:17 2024 by rpki-client on console-ams.rpki-client.org