Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ZxviuuLUHUohvwsg7ynN1xR2axs.roa
File: ZxviuuLUHUohvwsg7ynN1xR2axs.roa (raw, json)
Hash identifier: Cnrxk5xUIYJjYhcbcERRjY1Tz0OQmhooVZ1ILhKIvvA=
Subject key identifier: 67:1B:E2:BA:E2:D4:1D:4A:21:BF:0B:20:EF:29:CD:D7:14:76:6B:1B
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246CF2EB3C414A943721EE097782061
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ZxviuuLUHUohvwsg7ynN1xR2axs.roa
Signing time: Mon 02 Jan 2023 11:38:41 +0000
ROA not before: Mon 02 Jan 2023 11:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34314
IP address blocks: 151.237.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:cf:2e:b3:c4:14:a9:43:72:1e:e0:97:78:20:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=671be2bae2d41d4a21bf0b20ef29cdd714766b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0a:45:4a:96:10:22:48:6e:56:91:34:15:ca:
3c:ab:a2:1c:a8:44:0a:fb:76:9a:37:19:35:5b:41:
3b:2d:79:84:9a:29:38:59:c8:16:08:45:29:f4:1c:
2c:97:e9:a0:c1:d6:16:ad:e4:2a:2a:26:85:b2:4f:
e1:a6:1a:c4:52:2b:3a:43:08:70:7c:bd:02:68:c3:
53:6c:ab:da:c6:45:0f:01:86:a3:8a:97:a6:f1:fa:
14:55:85:7f:c6:b1:99:6e:d9:73:59:bd:2c:83:83:
d0:41:5b:a6:de:e9:d3:94:a8:af:2f:b4:5a:fa:4a:
c4:80:e0:04:a7:50:cb:21:53:54:4f:38:ac:be:5c:
73:a5:9c:f0:d3:4f:83:05:11:a8:01:6f:f3:27:7a:
c0:65:fd:48:00:15:44:3f:73:d2:d4:b5:ce:4a:36:
08:ed:d5:09:f2:71:50:9c:87:05:8c:45:8a:7a:a3:
4d:98:32:95:d4:7a:61:68:46:b3:09:26:bb:98:fd:
1c:40:d3:0b:26:f7:ed:ef:cb:01:8b:39:af:e6:6d:
c9:95:b9:71:fe:a7:21:62:41:98:ae:39:69:96:a3:
55:ca:02:03:8b:aa:6c:5b:b7:57:a4:e7:7c:6f:39:
b5:ca:37:c2:72:54:bd:b7:2d:8b:d0:39:18:1d:0e:
04:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:E2:BA:E2:D4:1D:4A:21:BF:0B:20:EF:29:CD:D7:14:76:6B:1B
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ZxviuuLUHUohvwsg7ynN1xR2axs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.143.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f5:ef:02:88:ca:fb:e7:f6:9b:df:ee:46:42:fb:8f:4b:a4:
9d:bc:a7:38:39:dc:c3:23:cc:8c:65:4e:4d:35:ed:8b:ee:8e:
80:9f:d5:76:9c:e0:96:13:29:e5:44:6c:72:75:65:67:b3:aa:
41:62:d6:a5:15:76:32:e2:4e:c9:37:cc:71:a0:d7:d3:d4:b3:
bf:73:65:20:d1:3d:2e:15:5f:cc:b5:d5:e4:35:56:d6:4c:99:
61:af:46:d3:9b:85:4f:9d:9b:25:f0:9a:f6:f0:74:ae:24:83:
79:66:d4:8a:4a:b8:74:72:27:61:e1:3f:55:bf:57:07:78:ef:
7a:fa:fb:9a:05:35:fd:f9:21:0a:0a:70:06:0e:3b:b8:09:24:
f7:63:a0:8c:ce:78:f2:7f:9d:3c:ca:9e:4d:0f:63:a3:1f:28:
0e:b8:92:75:8b:44:5b:23:bd:85:9d:3c:c4:ad:e0:f4:d1:f1:
8f:b6:68:94:67:8f:cc:9b:3b:f5:10:81:4a:7c:c3:ec:c1:2f:
f1:a6:b5:a2:e7:b6:b0:14:df:6c:71:b1:99:47:77:9e:d3:0d:
e3:47:f5:3c:04:29:15:db:2a:da:62:f5:55:bb:15:d2:d8:1b:
68:96:be:9c:40:9d:d9:6d:68:38:f4:2c:f8:65:ec:d8:0d:77:
23:20:59:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRs8us8QUqUNyHuCXeCBhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMwMTAyMTEzODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzFiZTJiYWUyZDQxZDRhMjFiZjBiMjBlZjI5Y2RkNzE0NzY2YjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjApFSpYQIkhuVpE0Fco8q6IcqEQK
+3aaNxk1W0E7LXmEmik4WcgWCEUp9Bwsl+mgwdYWreQqKiaFsk/hphrEUis6Qwhw
fL0CaMNTbKvaxkUPAYajipem8foUVYV/xrGZbtlzWb0sg4PQQVum3unTlKivL7Ra
+krEgOAEp1DLIVNUTzisvlxzpZzw00+DBRGoAW/zJ3rAZf1IABVEP3PS1LXOSjYI
7dUJ8nFQnIcFjEWKeqNNmDKV1HphaEazCSa7mP0cQNMLJvft78sBizmv5m3Jlblx
/qchYkGYrjlplqNVygIDi6psW7dXpOd8bzm1yjfCclS9ty2L0DkYHQ4ExQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGcb4rri1B1KIb8LIO8pzdcUdmsbMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvWnh2aXV1TFVIVW9odndzZzd5bk4xeFIyYXhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl+2PMA0G
CSqGSIb3DQEBCwUAA4IBAQCL9e8CiMr75/ab3+5GQvuPS6SdvKc4OdzDI8yMZU5N
Ne2L7o6An9V2nOCWEynlRGxydWVns6pBYtalFXYy4k7JN8xxoNfT1LO/c2Ug0T0u
FV/MtdXkNVbWTJlhr0bTm4VPnZsl8Jr28HSuJIN5ZtSKSrh0cidh4T9Vv1cHeO96
+vuaBTX9+SEKCnAGDju4CST3Y6CMznjyf508yp5ND2OjHygOuJJ1i0RbI72FnTzE
reD00fGPtmiUZ4/Mmzv1EIFKfMPswS/xprWi57awFN9scbGZR3ee0w3jR/U8BCkV
2yraYvVVuxXS2Btolr6cQJ3ZbWg49Cz4ZezYDXcjIFme
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org