Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-0Saqh28vS1cpqKalJlDqAxxBDI.roa
File: 1-0Saqh28vS1cpqKalJlDqAxxBDI.roa (raw, json)
Hash identifier: 5/4tCC4Zi35hGBBVLIyyaRXd33dPPzV97TlaCsZvNxs=
Subject key identifier: FB:44:9A:AA:1D:BC:BD:2D:5C:A6:A2:9A:94:99:43:A8:0C:71:04:32
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246D1720231393C3E5B1B8F9C25F5FA
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-0Saqh28vS1cpqKalJlDqAxxBDI.roa
Signing time: Mon 02 Jan 2023 11:38:41 +0000
ROA not before: Mon 02 Jan 2023 11:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35621
IP address blocks: 151.237.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d1:72:02:31:39:3c:3e:5b:1b:8f:9c:25:f5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb449aaa1dbcbd2d5ca6a29a949943a80c710432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:17:31:1c:d2:8e:b0:80:c1:29:5e:af:f2:9b:
48:09:60:f7:26:fa:0a:5f:5a:d2:d5:b6:4e:77:ad:
cb:4c:71:3d:df:40:4d:a4:1f:86:61:f0:bb:7b:da:
71:b6:99:b0:6d:35:5f:a3:45:86:ee:dd:08:76:a9:
19:a3:53:3b:ad:c6:27:67:8c:e3:ac:5b:3b:28:63:
80:d1:59:3c:39:1b:df:ea:61:59:a2:d0:e6:72:48:
8d:72:d2:20:35:08:e6:db:16:aa:80:99:d3:33:63:
2c:0e:9a:a0:6a:b8:49:38:d5:74:b3:8d:24:28:d7:
c4:36:e0:12:ee:29:58:1e:d3:52:82:95:40:59:fd:
d5:32:97:51:47:7c:32:13:e5:ec:8f:88:9d:61:c4:
b3:84:12:90:6c:a2:21:89:50:34:28:94:49:70:3f:
66:38:04:ac:bb:37:fe:21:da:cf:bf:59:5a:f4:e5:
9f:9b:4c:09:1b:48:9b:c6:79:30:58:48:96:8d:3e:
9f:66:d1:01:ed:af:b3:1c:2e:7c:ca:97:ac:0c:2e:
c1:76:91:71:b7:c4:85:59:23:a3:d0:e2:2f:59:14:
e4:19:f6:4c:8d:66:0a:b2:1c:18:ad:99:02:05:24:
8a:43:6f:2d:8f:4f:9f:f3:8e:71:50:c6:42:b5:c6:
dc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:44:9A:AA:1D:BC:BD:2D:5C:A6:A2:9A:94:99:43:A8:0C:71:04:32
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-0Saqh28vS1cpqKalJlDqAxxBDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.142.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9c:ec:0a:0f:12:8a:fa:1a:db:87:87:de:25:29:bc:a3:4d:
31:76:71:6c:7f:a6:79:93:e9:eb:8b:df:12:d0:41:bc:6b:69:
07:8d:6b:05:cd:08:c8:4a:6d:bc:23:55:ca:17:40:e3:c3:7f:
5a:dc:54:b9:4f:ee:61:ff:20:46:98:f8:b7:93:41:d6:88:2a:
92:b7:27:06:d2:77:92:14:53:1d:17:46:c0:c2:1c:47:b6:bc:
17:c3:65:71:94:ef:36:52:9d:d0:39:94:48:4c:52:27:14:58:
01:bd:96:5a:02:a1:19:e5:b5:ef:aa:e2:8a:01:29:1a:a9:c5:
a2:23:a0:fa:2a:61:6a:9f:ea:98:c2:b8:c1:f0:28:7b:22:43:
98:9f:02:3a:50:c1:ba:86:33:55:c6:8d:c1:9e:b1:95:8c:36:
cf:02:bd:df:b0:2e:0c:88:25:d4:8d:40:fd:71:8f:6f:ed:48:
30:4e:1a:a6:a1:88:c8:16:8b:94:ec:e3:fe:7f:f2:f6:a6:8a:
e8:56:26:bf:8c:18:73:f0:0e:23:1c:a3:50:48:fb:dd:ed:41:
09:f0:a7:08:6a:d6:77:e1:67:8e:71:97:75:e0:89:ff:b7:6d:
35:6f:45:7e:d1:71:7c:97:13:bd:bf:0f:db:9d:27:22:4e:85:
ad:7f:dd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org