Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/GoZo67MrJKKKSYClLblC5OA38Po.roa
File: GoZo67MrJKKKSYClLblC5OA38Po.roa (raw, json)
Hash identifier: 9Zpm7MOsba6bt+1L7XfmGVXNGNzF/ek/pM8cMywFYu0=
Subject key identifier: 1A:86:68:EB:B3:2B:24:A2:8A:49:80:A5:2D:B9:42:E4:E0:37:F0:FA
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B947D3797320BFCAF27C3DC9AF1403
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/GoZo67MrJKKKSYClLblC5OA38Po.roa
Signing time: Mon 01 Jan 2024 20:31:20 +0000
ROA not before: Mon 01 Jan 2024 20:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210154
IP address blocks: 46.254.135.0/24 maxlen: 24
151.237.22.0/24 maxlen: 24
151.237.20.0/24 maxlen: 24
151.237.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 19:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:47:d3:79:73:20:bf:ca:f2:7c:3d:c9:af:14:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a8668ebb32b24a28a4980a52db942e4e037f0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:cb:f1:5d:2b:b4:90:a0:9c:5f:85:56:3b:
37:29:00:d6:86:0f:84:74:10:6a:7f:b5:a6:24:32:
80:9f:8b:2b:d2:d4:7e:90:49:79:10:82:ec:9a:d2:
58:07:46:e8:9c:bd:9e:ba:65:af:4c:79:79:7d:41:
99:40:b3:1e:d8:b4:66:97:38:22:21:f4:63:c9:bb:
38:0e:f5:08:6e:62:3e:11:9c:74:cc:e2:2c:f9:4a:
25:a0:6c:2c:61:7f:33:13:74:eb:b3:e0:4d:5b:68:
6f:67:e7:56:7a:97:fd:14:cd:b6:49:d4:ac:16:1c:
bb:84:e0:8e:f8:7c:37:eb:dc:a3:9b:01:b3:7c:0f:
00:e0:c4:55:59:d6:9a:3f:26:4b:d2:f7:c2:54:ad:
6f:88:e6:b2:6a:a5:f8:78:d3:5d:29:50:93:cd:d0:
27:81:9b:09:4f:9e:03:6d:80:46:10:35:4a:7d:a8:
c0:48:2e:f7:e2:05:9a:d8:84:ac:cc:38:ac:cb:cf:
d1:e8:9c:d7:49:01:05:8a:ec:87:20:0d:41:c5:99:
76:63:44:c5:6c:07:55:75:1f:35:1d:69:4c:67:80:
1d:17:1e:dc:f5:7d:1b:5b:ee:4c:61:35:20:a3:6f:
15:73:f9:0a:c2:cb:ce:25:ac:80:d3:f4:94:d4:4b:
6a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:86:68:EB:B3:2B:24:A2:8A:49:80:A5:2D:B9:42:E4:E0:37:F0:FA
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/GoZo67MrJKKKSYClLblC5OA38Po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.135.0/24
151.237.20.0-151.237.22.255
Signature Algorithm: sha256WithRSAEncryption
af:2c:87:a3:40:70:59:71:95:35:d3:21:66:30:23:1b:52:24:
56:24:d1:d1:d5:f0:b3:59:95:c7:96:f9:2f:de:7c:12:d9:3b:
1d:e5:7d:3b:11:19:07:e2:8b:ac:54:46:55:7b:1a:71:eb:9e:
8d:cc:73:6c:2b:17:d8:7c:c7:f3:2b:30:94:dc:09:29:89:b3:
4c:dd:b2:55:1b:7a:73:83:02:31:83:49:c7:9e:6d:95:6a:37:
6a:0b:45:67:3a:b6:e7:36:bc:c7:d8:ba:d3:b1:12:3e:12:0f:
4c:d9:08:20:ad:f4:c5:6b:7a:bd:30:29:b6:98:ae:74:92:1e:
73:6a:4f:7d:f2:e9:87:32:39:d4:a9:85:81:92:c4:51:1f:31:
2d:c7:5e:c1:74:6b:ca:be:ab:c2:a3:92:8e:cf:57:56:1e:3a:
12:b2:c9:1f:e5:cb:62:be:a1:f7:eb:c3:8e:ba:c7:4e:50:19:
b2:e8:41:98:4a:8d:d9:80:61:02:03:a9:60:7b:50:85:ae:c8:
63:cd:63:4c:d8:a5:d6:51:24:16:b6:c3:ef:3c:ca:ff:f1:3e:
77:71:bc:e4:72:de:08:6a:2c:23:91:1e:c3:9c:c3:54:16:2c:
a1:9f:96:75:1f:69:d2:45:5f:4d:1d:55:43:d7:ea:c0:6c:d1:
ae:58:fa:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org