Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Ioah8u4qjLMXaYO4MaDIb1OZPmc.roa
File: Ioah8u4qjLMXaYO4MaDIb1OZPmc.roa (raw, json)
Hash identifier: c1b+Uy3WG8oLB/53tuECLxfZHC13OW9tK2OrWJgxfIg=
Subject key identifier: 22:86:A1:F2:EE:2A:8C:B3:17:69:83:B8:31:A0:C8:6F:53:99:3E:67
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246E8E3CE6614D2882D4B445077E580
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Ioah8u4qjLMXaYO4MaDIb1OZPmc.roa
Signing time: Mon 02 Jan 2023 11:38:47 +0000
ROA not before: Mon 02 Jan 2023 11:38:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199230
IP address blocks: 151.237.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e8:e3:ce:66:14:d2:88:2d:4b:44:50:77:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2286a1f2ee2a8cb3176983b831a0c86f53993e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3d:51:e4:0b:07:c8:3d:72:46:02:a6:7d:58:
57:3a:8d:25:14:fc:2f:5f:12:01:02:7f:a5:bd:65:
4d:6d:53:0a:2e:ff:3a:68:be:09:03:28:69:9b:be:
2b:c4:da:11:eb:81:e4:b9:63:e5:fe:b2:12:b5:17:
13:55:b3:17:9c:70:ca:72:29:a8:54:62:e4:4e:4e:
be:ce:85:4f:b5:6d:7a:3a:37:63:bd:77:57:7b:d7:
12:d5:46:62:1a:b2:57:ce:0e:55:35:24:b7:5b:cd:
d1:84:67:78:c6:52:e8:fe:8d:31:5d:77:69:d6:6a:
3d:e4:d2:44:5d:bd:ba:5c:06:de:84:f9:40:73:c4:
09:6a:a9:ff:47:4a:3e:6d:3c:91:25:56:8b:52:26:
4a:ac:44:4a:f8:d0:7c:53:78:5f:62:6e:5f:d9:5c:
ff:c3:ff:be:b8:6e:da:32:2b:2d:e3:57:32:d0:53:
40:be:7b:65:bc:04:e0:32:08:e7:22:48:78:b1:a3:
34:61:56:5a:88:f7:18:ff:a4:4f:61:a4:33:d1:19:
57:d8:60:08:c1:71:45:85:f1:fb:af:2d:ef:d1:3b:
6b:53:e2:ec:91:08:08:ea:e9:25:4d:44:52:6b:70:
77:60:1d:28:23:d1:00:3b:74:65:e5:ba:86:52:31:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:86:A1:F2:EE:2A:8C:B3:17:69:83:B8:31:A0:C8:6F:53:99:3E:67
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Ioah8u4qjLMXaYO4MaDIb1OZPmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.129.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f3:e7:ab:af:be:3c:cb:20:34:11:7d:cb:c4:1e:cc:72:3c:
cb:fb:72:18:00:9f:a1:53:9a:f3:7e:56:85:07:0e:13:af:4e:
52:ab:45:bc:aa:09:4a:7a:a0:79:cd:c4:d1:2d:d4:7b:ef:d7:
64:c9:31:04:d6:56:94:1a:fb:c0:c6:34:ad:a1:f1:82:ac:7b:
b1:15:19:7b:81:91:d4:85:1c:be:50:82:81:b5:26:98:ce:3c:
c2:b3:b0:5d:d7:e5:ad:a4:cf:7a:d7:57:26:bf:ec:5d:25:c9:
d3:c6:6c:b3:c4:74:3f:2d:f1:b7:b8:1a:75:1b:c2:cb:bc:0f:
03:29:da:8b:84:e0:91:7d:14:b8:83:8f:bd:70:cd:06:68:34:
9a:e0:4a:70:10:ed:01:93:21:c4:f1:3e:a8:2e:40:0d:8c:0a:
60:c2:e3:4b:9e:a2:49:8b:cf:0d:58:1f:4b:e4:85:4b:92:1e:
85:8b:f4:e2:77:38:4b:35:af:7e:27:a8:51:90:e8:8c:f1:c1:
92:ac:3b:de:b9:66:b7:53:3c:6d:78:9c:1f:fd:00:c7:4c:69:
e0:96:93:f1:8a:dc:d7:3b:6a:3d:19:f9:7e:0b:4a:9d:35:28:
72:c6:cb:07:da:cc:10:73:28:54:d6:93:64:43:b7:48:50:9f:
80:9d:0e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org