Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/69EZbjcms9wep_IbQJrCyHw90dw.roa
File: 69EZbjcms9wep_IbQJrCyHw90dw.roa (raw, json)
Hash identifier: ZN732GtK4QiuvvuA2GJOY/ODAusTkxI6cy6Z/xH27xs=
Subject key identifier: EB:D1:19:6E:37:26:B3:DC:1E:A7:F2:1B:40:9A:C2:C8:7C:3D:D1:DC
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018E85ECAFBA74D3A4A1ADF96755EDD4D826
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/69EZbjcms9wep_IbQJrCyHw90dw.roa
Signing time: Thu 28 Mar 2024 16:37:44 +0000
ROA not before: Thu 28 Mar 2024 16:37:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41782
IP address blocks: 151.237.16.0/24 maxlen: 24
151.237.17.0/24 maxlen: 24
151.237.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 05:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:ec:af:ba:74:d3:a4:a1:ad:f9:67:55:ed:d4:d8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Mar 28 16:37:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebd1196e3726b3dc1ea7f21b409ac2c87c3dd1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:19:b0:81:ea:23:10:fc:d1:e2:36:00:0b:
a8:8d:2c:73:44:62:f9:45:f9:b5:37:0a:98:d3:14:
96:fa:b1:55:99:d7:09:85:22:43:e9:1f:38:f8:10:
90:fc:05:8e:b1:5c:c0:f9:83:71:b7:ff:f8:6e:11:
bb:84:37:cc:3c:41:c6:52:53:5a:00:dd:59:e3:8c:
79:d4:b7:9e:58:89:ee:81:a1:7b:c7:3f:bb:a1:28:
12:c7:df:b1:47:ea:6a:f9:8e:a4:35:23:92:c0:0a:
69:d2:f6:56:9c:b2:96:29:f2:44:e8:e9:6c:ac:c7:
19:a4:65:a6:fe:c2:4c:b2:a3:14:c5:98:fe:ac:22:
b7:42:6d:5d:61:f2:f9:35:f5:59:a1:58:81:cc:fa:
29:c4:f7:ba:02:74:a3:7a:22:79:eb:52:5d:73:a2:
de:3b:b3:84:66:b2:7e:6d:c6:25:92:db:ec:93:5e:
bb:ac:be:a7:11:cc:83:fc:e0:0a:98:5e:b4:65:97:
82:f6:11:df:97:8c:49:6a:12:03:62:c8:5f:27:cd:
a8:18:b9:94:c1:36:e0:7d:c6:0e:84:d8:d0:cf:92:
5e:c4:e9:bc:16:c8:b3:ed:3d:e3:43:65:8b:9e:04:
e5:95:38:95:9f:fe:c6:c5:d3:03:f0:b6:a8:a1:93:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D1:19:6E:37:26:B3:DC:1E:A7:F2:1B:40:9A:C2:C8:7C:3D:D1:DC
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/69EZbjcms9wep_IbQJrCyHw90dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.16.0-151.237.18.255
Signature Algorithm: sha256WithRSAEncryption
dd:6e:f1:b8:d1:32:78:9b:bd:5c:9b:77:6f:99:90:bb:8f:45:
b7:fa:a3:44:28:4e:e9:43:45:90:b4:69:5f:2d:22:f6:aa:d9:
dd:ee:84:e5:99:f0:63:f9:83:ee:f4:3b:59:1d:27:5e:8a:24:
cb:d5:46:ee:36:41:bc:98:f7:b2:83:b4:67:e0:dc:1e:84:2a:
c2:be:36:03:d5:79:c5:11:d2:4e:c4:c8:99:3d:aa:68:7e:44:
ff:09:9d:b6:5f:90:30:c2:1f:d1:ed:5d:2a:65:ae:0b:88:b8:
8a:dc:3d:3f:64:ce:c3:e8:33:25:92:f2:c3:13:f9:fe:3e:da:
27:ea:3d:cf:69:79:05:8f:36:82:d9:98:51:5f:98:1c:5f:ee:
33:9d:0d:1e:ee:7f:74:45:00:95:97:55:fd:1f:28:7e:e1:53:
99:9f:df:bd:2f:93:cc:f3:00:93:b6:d5:cf:fd:2b:7c:a2:56:
32:f1:6f:a0:01:93:43:9c:75:d8:c8:20:06:08:7f:79:20:33:
5f:84:f5:b5:ee:6e:46:f9:82:d8:37:1d:ef:a5:5c:5a:9c:8b:
24:74:95:0f:b0:a4:1d:9b:dc:f0:a4:41:83:ce:29:d8:79:4c:
88:83:83:ff:c1:32:7c:4e:59:48:d7:a0:6d:c8:f5:c6:e8:52:
c8:12:4d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org