Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Xxh3xMttv1-SG18EgmOz_hTMmKM.roa
File: Xxh3xMttv1-SG18EgmOz_hTMmKM.roa (raw, json)
Hash identifier: 4wkGYTCqGh/nKEHEVK32XWQysYOFO1Xjuteh/bo5JZM=
Subject key identifier: 5F:18:77:C4:CB:6D:BF:5F:92:1B:5F:04:82:63:B3:FE:14:CC:98:A3
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01924E33C6B13177302D2004D7502F6C057A
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Xxh3xMttv1-SG18EgmOz_hTMmKM.roa
Signing time: Wed 02 Oct 2024 17:07:48 +0000
ROA not before: Wed 02 Oct 2024 17:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49658
IP address blocks: 151.237.16.0/24 maxlen: 24
185.236.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4e:33:c6:b1:31:77:30:2d:20:04:d7:50:2f:6c:05:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Oct 2 17:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f1877c4cb6dbf5f921b5f048263b3fe14cc98a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:08:e2:4a:5f:49:34:37:18:3c:5d:1e:f0:
98:f5:8e:31:57:32:ca:fd:52:84:b6:c6:07:aa:04:
96:ed:4e:2a:27:5c:18:ba:4b:e7:fb:e7:2c:c8:b4:
b6:c8:42:4e:40:62:fd:3c:4e:3d:66:f9:a5:50:65:
9b:fc:3b:69:b3:50:5c:2c:63:de:a1:a8:f6:93:56:
95:86:1f:79:3e:68:71:48:a1:04:4f:fb:e8:4b:76:
ab:17:ea:0e:9d:83:c2:a1:83:a2:e0:80:00:e5:2d:
92:75:8f:3e:13:15:59:d5:16:0c:2d:52:b5:dc:55:
c0:c8:0b:17:3d:62:c6:c5:9d:73:c5:6d:2f:4d:27:
ea:5a:73:b6:e2:8b:c5:68:91:0e:c1:be:70:86:01:
96:e3:51:1c:77:9a:9f:fe:eb:c5:3d:52:a6:1b:77:
ef:d3:24:b8:ad:1a:35:6b:dd:c4:81:a6:2a:d7:94:
29:e2:dc:80:35:2d:22:a3:ac:c7:99:80:e8:6c:d4:
8c:cd:5a:8a:85:ad:49:d5:a3:5f:83:18:78:16:25:
12:b6:41:a0:b6:9a:61:09:8f:6f:6f:44:7d:2a:12:
20:90:fd:bf:65:8b:18:f4:d0:f0:46:69:20:3c:8d:
fa:40:11:fb:3f:1a:c2:03:5d:0a:bb:2e:24:05:c7:
d0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:18:77:C4:CB:6D:BF:5F:92:1B:5F:04:82:63:B3:FE:14:CC:98:A3
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Xxh3xMttv1-SG18EgmOz_hTMmKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.16.0/24
185.236.236.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:16:ae:ae:e3:3e:bb:e8:2e:9c:6c:21:71:a7:a3:2b:c4:0e:
9a:02:43:13:ed:36:ae:3d:90:b1:c0:80:7d:6d:1a:41:af:95:
10:72:82:11:d8:6e:45:fd:99:c7:82:b6:fb:60:06:61:1c:73:
74:09:5b:d8:09:65:0d:5c:f3:d7:41:c5:d5:fa:1c:1c:ae:09:
6d:f2:cc:19:79:26:16:70:9a:43:6c:b9:80:7a:0d:fe:b0:38:
85:4e:63:61:55:98:c7:14:c8:e5:c8:17:bc:3c:1d:a5:50:02:
47:84:60:9f:c1:59:ff:3a:66:5d:b3:c2:47:2a:24:8b:36:3f:
96:05:ab:c7:0e:a7:cf:76:d3:13:4f:03:35:ef:d4:e4:57:9c:
33:c9:dc:44:83:b0:98:dc:01:2d:b2:eb:be:b2:a7:84:ac:6d:
2b:eb:97:b8:9c:55:cf:e8:a3:47:12:a1:40:bf:64:f0:63:fe:
dd:63:c3:b8:2e:e4:16:ca:38:2a:5a:ec:a9:a7:61:05:0c:b7:
df:b9:b2:54:29:c3:ee:e1:e6:3d:05:f0:61:0c:33:8e:e3:7a:
9d:7c:86:bb:ea:a5:b0:49:a4:0f:c6:f4:22:60:a2:85:aa:52:
24:34:4a:03:92:c1:ac:97:1b:66:60:7e:6a:fa:47:35:e8:ec:
60:0f:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:57:52 2025 by rpki-client