Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/JufQu4kkzjZbDjB4KMP4sU-IbvM.roa
File: JufQu4kkzjZbDjB4KMP4sU-IbvM.roa (raw, json)
Hash identifier: eXc8LeVCV+exzvkavtaKClkUA5iGlJOybiXP4/Z7aws=
Subject key identifier: 26:E7:D0:BB:89:24:CE:36:5B:0E:30:78:28:C3:F8:B1:4F:88:6E:F3
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246F3DC2F46F66AF0046BB3C262A05C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/JufQu4kkzjZbDjB4KMP4sU-IbvM.roa
Signing time: Mon 02 Jan 2023 11:38:50 +0000
ROA not before: Mon 02 Jan 2023 11:38:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209850
IP address blocks: 151.237.68.0/24 maxlen: 24
151.237.71.0/24 maxlen: 24
151.237.69.0/24 maxlen: 24
151.237.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f3:dc:2f:46:f6:6a:f0:04:6b:b3:c2:62:a0:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26e7d0bb8924ce365b0e307828c3f8b14f886ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:74:6a:90:76:73:1c:07:3c:f3:ad:49:19:
67:50:78:c3:cc:b6:4c:17:ee:62:25:01:6c:b8:57:
45:89:81:7f:27:aa:34:2f:1b:b8:7f:0c:8b:80:d5:
b1:78:be:c7:a4:03:9f:37:12:af:ae:ee:04:44:e5:
b7:e3:41:83:5a:27:2f:ce:19:15:dc:b5:3b:06:ee:
56:3c:6b:03:bf:c3:63:2a:ef:c1:e8:f0:67:4d:82:
7a:4b:d8:c2:03:ca:3e:39:51:20:4b:e1:74:97:ea:
72:91:3a:da:ae:26:72:92:6b:98:1d:14:c4:75:15:
cb:bc:44:1b:42:fc:6f:51:e9:94:76:c9:85:4b:f9:
4d:79:8c:dd:12:cc:ae:2f:b4:1c:6a:75:29:05:b8:
3d:2d:26:82:59:3a:00:57:99:8c:90:ba:50:b8:82:
ab:63:4c:ce:fd:33:3d:ee:57:7d:78:38:58:f4:b8:
15:ac:da:03:58:6a:43:d4:a9:bb:86:27:de:70:87:
8e:4d:50:02:d7:a9:25:53:80:97:87:1c:8c:34:21:
63:25:68:a2:20:3e:4b:b3:9b:38:ed:de:1a:08:8a:
3c:9b:86:ef:c2:fc:d8:d2:a5:8f:55:c8:56:d1:d2:
f1:99:e9:43:a1:72:35:f8:19:81:66:37:22:e7:f7:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E7:D0:BB:89:24:CE:36:5B:0E:30:78:28:C3:F8:B1:4F:88:6E:F3
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/JufQu4kkzjZbDjB4KMP4sU-IbvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.68.0/22
Signature Algorithm: sha256WithRSAEncryption
67:3a:31:74:11:d2:4b:b9:8e:f3:f2:ba:2b:68:95:4b:51:d0:
bc:6c:af:16:4d:ea:7b:cd:5a:6b:82:0e:30:60:92:76:fe:e8:
1f:6d:34:88:a0:24:33:76:4f:0c:14:8c:c4:b8:82:84:2e:ca:
0d:2b:27:0b:6e:c8:cc:02:cb:4f:49:2d:7b:15:49:09:48:5f:
6b:22:92:5f:22:f3:cc:bb:dd:2e:b2:62:08:64:a8:b7:ec:bb:
07:69:5e:5b:5b:5f:4b:c7:73:12:d6:bf:c4:af:64:06:ed:13:
93:ee:4f:17:a0:1d:8c:c5:90:ca:04:8e:ea:b3:72:1b:12:a7:
66:09:fc:7e:88:30:16:95:59:65:78:38:d4:ec:b6:d7:14:39:
60:2c:3f:b8:ce:93:df:b5:c4:f6:70:f5:99:45:59:df:a9:fd:
65:c9:cf:f3:a3:86:30:1b:a3:67:3a:b3:45:82:90:c2:df:ec:
77:70:db:11:c1:66:27:4e:ed:b5:49:38:75:86:ea:c2:aa:3f:
b4:7a:7a:58:47:85:96:fa:7d:6b:27:57:92:64:6a:5b:5d:55:
4b:7b:d4:f7:9b:e3:5b:b0:d8:df:b5:30:4f:77:de:bf:5b:c4:
38:ec:43:3f:3b:fe:87:fa:97:a2:88:95:2f:08:95:33:46:b7:
c9:c9:3c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org