Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Hr6PYyOgnNqlo_hQb2Z9oQ89b84.roa
File: Hr6PYyOgnNqlo_hQb2Z9oQ89b84.roa (raw, json)
Hash identifier: DnHByZ+7FqsFjV4CbwVJVYY+NgkTHhk3wF7m3jZN9NA=
Subject key identifier: 1E:BE:8F:63:23:A0:9C:DA:A5:A3:F8:50:6F:66:7D:A1:0F:3D:6F:CE
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0187397496036C0A1963B7CC559851819656
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Hr6PYyOgnNqlo_hQb2Z9oQ89b84.roa
Signing time: Fri 31 Mar 2023 20:55:54 +0000
ROA not before: Fri 31 Mar 2023 20:55:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41782
IP address blocks: 151.237.16.0/24 maxlen: 24
151.237.17.0/24 maxlen: 24
151.237.18.0/24 maxlen: 24
151.237.19.0/24 maxlen: 24
151.237.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Apr 2023 19:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:39:74:96:03:6c:0a:19:63:b7:cc:55:98:51:81:96:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Mar 31 20:55:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ebe8f6323a09cdaa5a3f8506f667da10f3d6fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9f:38:cd:1a:93:d2:71:da:31:f2:62:8e:f9:
27:4c:f9:76:1b:fa:28:29:ff:be:34:a4:1c:6a:2b:
53:86:6c:12:e8:8b:f3:dc:81:62:dc:58:e5:72:a3:
c0:b8:63:26:d4:3a:19:46:f2:1a:ca:57:0c:d6:dd:
18:62:b1:e1:46:a2:be:c8:e0:41:bf:b5:91:92:c5:
aa:6c:96:5c:c7:cd:04:5f:a3:1b:09:f3:0a:73:e4:
ea:fa:55:5f:53:91:b3:d3:c2:0d:19:52:f6:a9:54:
61:61:97:e2:5c:db:ba:04:7b:86:e6:0c:36:1d:37:
54:d9:58:fe:53:4d:d0:ec:b0:8d:90:76:46:0b:2f:
f1:c9:3a:3d:f9:c4:f2:1a:b4:cb:cd:22:b4:a6:f6:
ca:6b:53:d4:bf:ac:38:5a:1c:66:fb:37:36:0c:31:
6e:17:62:46:bc:97:a1:21:5e:7d:e2:05:2b:37:71:
5b:77:77:76:04:e1:32:22:33:63:17:33:11:6a:a2:
4c:6b:ad:24:77:e9:e2:cb:fb:a8:29:9e:dd:3a:ab:
0e:bd:43:e5:c5:4a:04:de:c8:ed:3b:a6:0c:f8:9e:
9d:57:3b:ac:7a:be:06:0f:b2:9f:4a:53:fd:fb:28:
2e:d2:86:9f:f3:11:b8:99:80:53:e8:3a:31:11:37:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BE:8F:63:23:A0:9C:DA:A5:A3:F8:50:6F:66:7D:A1:0F:3D:6F:CE
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Hr6PYyOgnNqlo_hQb2Z9oQ89b84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.16.0/22
151.237.30.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a7:7b:bd:9b:24:c8:af:2e:c1:67:fc:69:1d:80:9c:e0:fc:
47:71:d1:00:0e:83:28:a2:1b:06:4e:f9:93:96:02:bd:f2:ae:
ff:c8:5e:d9:d8:43:b2:c6:26:8c:63:9c:7c:c7:d9:dd:95:6b:
cb:09:65:4a:77:0c:62:a3:79:41:b1:17:14:f0:6c:b4:9f:4c:
89:9b:4a:00:b2:b0:54:79:5c:b4:40:10:dc:e7:60:6f:bc:b0:
c0:81:c6:c5:13:3e:83:48:6e:f6:2b:2e:33:45:c5:be:52:99:
7f:ea:55:17:2b:a2:2d:ed:21:10:fa:2c:d8:4c:0f:3f:10:80:
53:0f:ce:de:75:ab:c9:8e:88:d2:07:39:6a:12:1d:38:1e:70:
3a:5c:cf:71:6d:ee:28:ae:b0:6b:f0:03:f2:a3:1b:c2:49:c7:
39:26:8b:b0:ba:4f:0e:d6:17:24:69:a3:75:5e:4f:a8:05:bb:
61:ee:d9:9f:9e:c9:dd:9b:05:e8:5e:60:58:e1:8b:b9:ae:a2:
5f:b7:f1:7f:84:e4:4f:c9:b3:e0:dc:16:5a:5f:a1:0f:f7:fa:
5d:75:8c:85:df:70:c2:40:3b:8e:40:ab:95:0f:7d:b2:9e:9c:
6f:80:e3:8e:fc:95:71:63:3b:e4:67:ec:04:0c:23:0a:99:8a:
b9:8d:f3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org