Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Ea9ebhJ4q6YuDWBVT78VI_wvYeg.roa
File: Ea9ebhJ4q6YuDWBVT78VI_wvYeg.roa (raw, json)
Hash identifier: SNtYHJJmLaC4HXxGe8+SUyCnfHtyxm7/9plISBkWSP8=
Subject key identifier: 11:AF:5E:6E:12:78:AB:A6:2E:0D:60:55:4F:BF:15:23:FC:2F:61:E8
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0187BF2761498DD4C689310E8E729ED9A524
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Ea9ebhJ4q6YuDWBVT78VI_wvYeg.roa
Signing time: Wed 26 Apr 2023 20:00:41 +0000
ROA not before: Wed 26 Apr 2023 20:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206004
IP address blocks: 151.237.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bf:27:61:49:8d:d4:c6:89:31:0e:8e:72:9e:d9:a5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Apr 26 20:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11af5e6e1278aba62e0d60554fbf1523fc2f61e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:15:84:76:8b:e5:e6:d8:0f:15:d9:e7:28:ea:
11:88:ff:15:30:c1:27:a4:05:0c:64:d5:02:1f:b5:
a5:b1:16:7d:b5:b7:55:d6:65:3d:b0:00:b4:01:cc:
94:0b:dc:63:a5:34:78:90:28:3e:00:33:f1:b1:61:
6b:f3:3d:a5:55:20:4b:e4:cc:fa:11:84:eb:ad:60:
8f:a0:22:d5:51:4c:81:97:92:bb:dc:86:75:7a:7b:
90:7d:b7:7e:14:b8:78:69:6c:f5:55:a6:38:40:26:
11:99:fe:45:e3:1c:7a:0e:07:3d:d0:3f:5d:3a:0e:
38:da:c3:60:ca:fc:f0:b3:90:72:05:cb:04:4c:32:
a6:34:74:fd:fb:67:9d:b2:e3:0f:9e:c7:21:88:a9:
b0:a0:ee:36:30:16:96:8d:88:df:4c:bf:24:83:db:
0a:2a:19:ff:a2:00:10:c8:85:dd:2c:11:dc:8a:51:
3e:a1:58:67:7a:ca:cb:7b:2e:57:eb:16:89:bc:0f:
08:74:09:30:9b:1a:bc:ce:1a:f7:75:7c:43:81:44:
7d:61:ce:5d:58:61:aa:b6:50:92:75:ff:15:a7:b1:
5e:91:a9:f1:7f:17:18:1d:b1:8f:d1:14:f4:93:9a:
7f:49:ad:3e:3b:4c:fb:f5:24:b7:dc:77:2f:83:6c:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:5E:6E:12:78:AB:A6:2E:0D:60:55:4F:BF:15:23:FC:2F:61:E8
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Ea9ebhJ4q6YuDWBVT78VI_wvYeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.30.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3f:32:8e:3b:c3:f9:8b:01:bc:5a:79:71:c1:1d:b3:16:58:
42:bd:49:f1:61:01:64:60:69:fc:c1:08:bc:05:45:aa:f2:79:
55:94:59:9c:1c:8c:fe:7b:31:0b:60:1d:52:f5:9c:49:cc:0e:
e4:9c:d7:94:a8:5d:03:0e:0f:f8:e4:db:90:25:aa:8d:fd:6e:
55:6b:aa:22:ec:cb:77:12:be:3c:f7:25:e7:96:6c:53:75:cb:
fd:91:16:e7:4e:fa:ae:18:70:66:25:2f:fb:fb:c3:27:10:66:
6b:0f:5d:8a:56:aa:aa:6c:a1:79:73:b3:86:83:fb:f1:42:a5:
a7:61:4f:e5:cc:7d:0e:c7:77:54:eb:14:61:a9:91:01:59:97:
1f:4e:25:64:10:81:54:ec:93:86:a4:8d:cb:07:ce:50:29:b0:
26:f4:bd:3d:f1:84:01:59:74:95:52:14:a9:2d:48:33:fe:79:
67:cf:ae:5a:dd:06:b5:e5:67:51:11:47:1b:a0:a4:e4:77:24:
11:8a:32:97:5f:24:00:9f:ed:de:65:e0:bd:41:2d:97:c0:2c:
07:a7:ff:c1:19:a9:56:67:ee:e3:df:42:fa:e5:1b:12:b6:10:
5a:69:1f:e5:b1:fc:4b:ed:7e:b2:24:ef:9b:95:18:57:33:2e:
f2:de:0f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org