Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/8pIFkJOGWtq7jVqZExpaix2ETMI.roa
File: 8pIFkJOGWtq7jVqZExpaix2ETMI.roa (raw, json)
Hash identifier: EzeJf4Gt8XnM35eMahJnUbBImZDi4EOfrJeRYt4d+cA=
Subject key identifier: F2:92:05:90:93:86:5A:DA:BB:8D:5A:99:13:1A:5A:8B:1D:84:4C:C2
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0189069459780FF733A9B22E78D727B9DE32
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/8pIFkJOGWtq7jVqZExpaix2ETMI.roa
Signing time: Thu 29 Jun 2023 09:55:32 +0000
ROA not before: Thu 29 Jun 2023 09:55:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201005
IP address blocks: 151.237.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 08:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:94:59:78:0f:f7:33:a9:b2:2e:78:d7:27:b9:de:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jun 29 09:55:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f292059093865adabb8d5a99131a5a8b1d844cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:67:c1:ca:63:f8:05:33:92:58:33:1d:b7:
77:98:45:33:ef:8d:ff:31:b4:ce:ef:7d:a0:ad:e6:
e6:d7:89:1e:54:b7:a6:71:3f:a5:73:05:74:d2:6d:
0e:88:0e:00:af:b8:a2:a6:42:a1:04:24:4d:5a:7a:
aa:06:f6:53:97:49:7c:81:44:c4:e0:07:42:cc:0b:
23:7f:b4:44:c8:33:76:06:d8:e7:8d:85:34:72:e6:
65:22:fe:5b:5e:77:d5:ff:fc:96:b6:d3:4c:49:2e:
d7:72:43:b8:6c:20:f8:3d:de:13:31:b3:b6:11:d9:
ba:2a:b8:50:a6:01:40:09:b1:9a:aa:20:e2:90:c2:
13:58:5d:7a:c4:88:37:83:85:ec:65:a6:67:f2:b9:
d2:9d:92:3b:ea:b1:98:8b:c1:d2:e0:b1:c0:ee:ce:
e9:e2:8c:4b:cc:98:55:29:7b:d7:09:eb:79:4a:af:
63:19:ee:83:52:1b:37:90:a5:08:7b:8c:4a:69:14:
8a:9e:d8:6b:fe:04:c1:47:7c:36:7f:2b:7a:9c:de:
69:9b:d2:6d:ba:94:05:be:7a:eb:2b:0d:b6:26:b5:
fd:49:c7:3d:cf:ec:bf:77:77:20:47:25:8a:7b:b7:
ff:c7:ae:47:b5:1d:a5:0d:49:7c:e4:e1:5f:96:cd:
26:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:92:05:90:93:86:5A:DA:BB:8D:5A:99:13:1A:5A:8B:1D:84:4C:C2
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/8pIFkJOGWtq7jVqZExpaix2ETMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.142.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:6f:b2:a0:8b:12:68:25:f6:91:69:63:b2:08:2b:20:cb:65:
4c:ec:7e:42:53:8a:27:ec:40:59:f8:7e:4a:6c:a0:b6:25:5f:
3a:fc:e7:55:d2:0a:0d:5b:12:30:31:8b:ef:8d:9c:c1:14:ba:
97:a2:19:eb:f6:64:11:29:75:ee:29:0e:7b:cf:d7:dd:57:17:
0f:18:75:d9:d8:2e:96:45:1b:86:4a:81:1c:46:4c:9f:18:2c:
eb:48:83:f6:99:ca:79:ae:7b:d7:7e:44:06:1e:2e:d0:23:80:
f9:f2:ac:0e:62:57:6c:86:df:dc:86:5e:94:ac:24:d9:3f:48:
eb:ca:c3:8a:da:0d:73:fb:c0:75:40:dd:e4:bb:ec:d3:26:98:
f9:6b:fa:c4:b7:8e:a0:d8:e7:3c:ae:4b:8f:96:a8:f3:a2:36:
5b:bd:ed:a5:73:b9:2c:a6:bc:f5:3b:73:95:09:5a:5e:b1:ba:
86:43:c0:2c:cd:15:50:b7:be:15:47:74:e6:4e:16:56:00:18:
25:cf:f9:c3:7d:3f:90:01:e5:59:89:cb:5a:ca:6c:da:5d:28:
77:67:67:b5:0b:c2:2b:7d:3f:4a:c5:ff:b6:d5:6a:ad:1e:72:
0c:55:60:e6:84:36:3f:dd:14:07:7f:99:b3:ed:8d:41:4c:67:
6b:f3:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org