Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/9xg5b-l3SCE2_Q-Kxmyyj00HyFg.roa
File: 9xg5b-l3SCE2_Q-Kxmyyj00HyFg.roa (raw, json)
Hash identifier: hqS+NXAKyciCdA/kNahVhTA3YET0vjwh1iOSB8XQMGE=
Subject key identifier: F7:18:39:6F:E9:77:48:21:36:FD:0F:8A:C6:6C:B2:8F:4D:07:C8:58
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018B853BE19F1427FC4947D466D5423480EB
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/9xg5b-l3SCE2_Q-Kxmyyj00HyFg.roa
Signing time: Tue 31 Oct 2023 10:16:15 +0000
ROA not before: Tue 31 Oct 2023 10:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49773
IP address blocks: 151.237.31.0/24 maxlen: 24
151.237.33.0/24 maxlen: 24
151.237.34.0/23 maxlen: 23
185.242.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:3b:e1:9f:14:27:fc:49:47:d4:66:d5:42:34:80:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Oct 31 10:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f718396fe977482136fd0f8ac66cb28f4d07c858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:97:96:e5:0a:1a:3c:d2:d4:cf:a7:c7:92:69:
1c:6b:62:4f:ad:21:7c:4b:66:e5:da:4b:54:5c:e6:
ef:55:a4:1c:3d:3a:30:bf:81:5d:a6:84:29:f2:24:
dc:4f:75:da:c6:e0:2e:d4:c1:67:4f:7d:16:8e:ff:
b4:c0:52:a0:81:66:63:5d:55:9d:6b:77:a4:c0:1f:
69:f5:bb:29:18:27:10:38:53:42:1e:95:e7:9c:6b:
14:c4:b4:a6:2e:d2:f1:82:9d:37:c1:41:b1:70:bc:
15:b5:f3:05:de:d2:c4:a5:b1:80:9c:23:3c:e8:9a:
24:71:b7:4a:47:59:5f:08:60:28:f4:41:01:3f:7e:
62:6f:a1:ce:7a:12:3a:1f:a6:c0:9c:fb:bd:7e:ca:
98:db:a8:3a:b7:e9:9f:5f:83:4f:d5:43:f0:18:a2:
a7:c9:25:bf:28:e2:43:8c:5c:eb:e9:bd:cb:26:ab:
39:6d:cc:55:69:a4:aa:41:9b:d2:60:6a:15:2f:03:
df:4f:0c:67:36:98:c2:b6:43:ef:15:26:b6:92:5b:
73:10:52:8a:df:1f:71:ca:71:f1:0b:75:db:e1:09:
ad:3a:24:a5:08:3b:e4:fd:d7:fe:a4:b0:7b:ca:3b:
73:9d:3d:76:72:85:fd:29:e4:ee:ea:67:93:08:64:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:18:39:6F:E9:77:48:21:36:FD:0F:8A:C6:6C:B2:8F:4D:07:C8:58
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/9xg5b-l3SCE2_Q-Kxmyyj00HyFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.31.0/24
151.237.33.0-151.237.35.255
185.242.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:aa:1e:de:ad:d8:a5:3b:b1:7b:19:41:c3:7b:46:79:6c:37:
dc:4f:1b:e8:8e:35:fa:a3:e2:40:be:44:13:7b:ba:43:3b:10:
8a:99:e1:7d:4f:3a:20:53:2c:44:02:6d:b5:64:70:3e:23:90:
20:3a:c3:c2:4a:71:8b:a7:85:9e:70:9a:1b:ea:05:be:5f:31:
63:7b:9a:ba:0a:82:d3:a3:70:8e:50:f2:c1:e6:e0:60:03:57:
c0:af:f5:78:ad:7c:ae:ea:e1:2a:6d:5e:84:5e:9c:98:e0:a2:
70:55:69:74:78:03:03:0c:c9:dd:5a:f7:a9:cc:d2:3e:98:2d:
17:0a:5f:ff:fd:64:d5:bf:30:4f:b3:ea:13:13:06:2e:08:21:
52:78:a2:37:8b:9c:cf:fc:2e:42:b2:3d:8c:4d:87:99:52:a2:
15:13:f8:2c:a9:f8:52:2f:b8:d2:89:bf:88:a2:c7:33:b1:6d:
9e:5c:4e:59:d2:e9:f7:9d:31:55:f7:77:36:cc:d4:77:c3:ee:
5e:37:e4:21:a7:0c:d4:1e:98:82:b2:eb:f5:ea:9f:81:24:17:
70:76:3b:87:74:ed:29:78:3c:43:37:1f:90:91:27:61:80:07:
f4:1b:13:f5:93:a9:99:67:8d:c4:3e:dd:8a:4f:a7:57:a8:6e:
15:98:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org