Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CQCyMvMn42Ud0LaluvD4kPG6O9k.roa
File: CQCyMvMn42Ud0LaluvD4kPG6O9k.roa (raw, json)
Hash identifier: m9qtut9OXP9g2bPUFeR1c0TKbhVymll37/zM84Pc3aA=
Subject key identifier: 09:00:B2:32:F3:27:E3:65:1D:D0:B6:A5:BA:F0:F8:90:F1:BA:3B:D9
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B93D30FF1AEB7F240E58E06A697088
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CQCyMvMn42Ud0LaluvD4kPG6O9k.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62110
IP address blocks: 151.237.78.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 06 Apr 2024 12:46:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3d:30:ff:1a:eb:7f:24:0e:58:e0:6a:69:70:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0900b232f327e3651dd0b6a5baf0f890f1ba3bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b9:92:db:ce:13:b6:f7:70:60:cc:5a:5c:6a:
88:c7:11:20:23:11:d3:c1:41:d1:14:d0:a2:a8:6f:
16:7a:13:4d:a9:12:33:68:8c:93:6f:bc:c9:3a:20:
17:ad:44:02:48:58:3c:69:c3:d0:24:15:07:68:61:
c0:5c:70:a8:b5:4e:75:0b:95:2c:8c:4b:3f:0a:d8:
6d:58:74:58:67:b6:ff:63:c1:95:0c:5f:80:cf:d6:
6f:e8:6d:75:5a:f5:87:44:70:46:2e:12:23:2a:38:
e0:eb:ca:20:51:18:1b:70:70:5d:a9:95:c3:15:dd:
71:2a:8f:63:e4:bd:0f:21:f0:b0:d3:bc:00:fb:6d:
43:75:9f:ca:3f:aa:61:ab:fa:05:1a:5e:40:d3:a3:
9a:34:32:1c:9a:9a:d9:0f:ac:12:a6:bb:fa:b7:b3:
ff:2b:32:36:9b:b3:b0:67:17:84:f4:f1:c7:05:63:
eb:a4:d3:b3:c0:fb:27:b8:69:e5:c9:50:f9:e2:bd:
4e:1b:b8:92:5d:81:35:b6:68:a3:91:62:da:e6:d4:
2f:c4:75:34:d8:b3:0d:ba:36:9f:49:2f:57:25:8b:
32:9d:7f:86:e8:23:66:b4:3a:64:36:c2:83:e9:f5:
0d:83:ec:f2:b5:d9:d9:56:75:f4:3f:90:4d:28:3d:
c1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:00:B2:32:F3:27:E3:65:1D:D0:B6:A5:BA:F0:F8:90:F1:BA:3B:D9
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/CQCyMvMn42Ud0LaluvD4kPG6O9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.78.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:6f:54:74:ae:d8:3a:de:5d:80:07:0a:a4:87:24:3a:a5:3e:
16:51:8b:4a:12:b3:45:6b:ad:d5:21:8c:97:fc:9d:7b:4a:f9:
f8:76:b4:8a:0a:be:12:72:99:1c:3f:77:d4:8a:96:0c:eb:49:
56:2f:0d:7d:bd:13:e1:50:db:43:9f:c2:e0:64:fb:01:ff:70:
40:8d:06:97:1e:93:0a:1e:cc:f2:88:11:ea:b5:13:6d:9c:76:
34:b1:54:56:90:84:fe:b1:ae:88:4f:b7:27:6e:ea:30:66:ee:
6a:e8:1a:79:1c:2a:7f:03:03:a1:d3:c3:7c:c6:a4:22:12:0f:
86:e8:84:ba:9d:33:58:e6:20:de:6e:63:88:b4:49:4d:4f:f4:
ed:78:bd:b4:a3:a9:19:fa:c8:b8:97:46:86:a0:7b:0f:5a:48:
48:be:44:da:d6:90:00:8d:ef:ec:00:8c:3a:a1:e9:65:be:dc:
a9:73:aa:45:29:54:7b:4e:1c:03:8b:84:d6:ee:b8:5b:fd:75:
46:40:0b:34:df:8c:bc:ef:c6:f5:e0:3c:e5:eb:4a:f3:14:32:
f4:8b:a1:64:29:41:36:f5:89:13:c7:12:36:d3:9d:fd:f1:dd:
6a:c2:75:98:95:a0:52:b6:21:f6:5c:5f:c8:5d:71:6a:f2:39:
c5:3a:e1:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuT0w/xrrfyQOWOBqaXCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjQwMTAxMjAzMTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTAwYjIzMmYzMjdlMzY1MWRkMGI2YTViYWYwZjg5MGYxYmEzYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobmS284TtvdwYMxaXGqIxxEgIxHT
wUHRFNCiqG8WehNNqRIzaIyTb7zJOiAXrUQCSFg8acPQJBUHaGHAXHCotU51C5Us
jEs/CthtWHRYZ7b/Y8GVDF+Az9Zv6G11WvWHRHBGLhIjKjjg68ogURgbcHBdqZXD
Fd1xKo9j5L0PIfCw07wA+21DdZ/KP6phq/oFGl5A06OaNDIcmprZD6wSprv6t7P/
KzI2m7OwZxeE9PHHBWPrpNOzwPsnuGnlyVD54r1OG7iSXYE1tmijkWLa5tQvxHU0
2LMNujafSS9XJYsynX+G6CNmtDpkNsKD6fUNg+zytdnZVnX0P5BNKD3BHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAkAsjLzJ+NlHdC2pbrw+JDxujvZMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvQ1FDeU12TW40MlVkMExhbHV2RDRrUEc2TzlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl+1OMA0G
CSqGSIb3DQEBCwUAA4IBAQCkb1R0rtg63l2ABwqkhyQ6pT4WUYtKErNFa63VIYyX
/J17Svn4drSKCr4ScpkcP3fUipYM60lWLw19vRPhUNtDn8LgZPsB/3BAjQaXHpMK
HszyiBHqtRNtnHY0sVRWkIT+sa6IT7cnbuowZu5q6Bp5HCp/AwOh08N8xqQiEg+G
6IS6nTNY5iDebmOItElNT/TteL20o6kZ+si4l0aGoHsPWkhIvkTa1pAAje/sAIw6
oellvtypc6pFKVR7ThwDi4TW7rhb/XVGQAs034y878b14Dzl60rzFDL0i6FkKUE2
9YkTxxI205398d1qwnWYlaBStiH2XF/IXXFq8jnFOuGr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:11 2024 by rpki-client on console-fra.rpki-client.org