Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ez6KhyenKDrqrhpMafOLhC9m9Xw.roa
File: ez6KhyenKDrqrhpMafOLhC9m9Xw.roa (raw, json)
Hash identifier: lrezLTK86ax/D4NB+cMSQSW7atbdUsIxYrBB6SzNvtI=
Subject key identifier: 7B:3E:8A:87:27:A7:28:3A:EA:AE:1A:4C:69:F3:8B:84:2F:66:F5:7C
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018AAC9043566078800EE111109B2CA6C58A
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ez6KhyenKDrqrhpMafOLhC9m9Xw.roa
Signing time: Tue 19 Sep 2023 08:30:50 +0000
ROA not before: Tue 19 Sep 2023 08:30:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201005
IP address blocks: 151.237.67.0/24 maxlen: 24
151.237.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:90:43:56:60:78:80:0e:e1:11:10:9b:2c:a6:c5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Sep 19 08:30:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b3e8a8727a7283aeaae1a4c69f38b842f66f57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:12:ea:b9:78:6e:bd:19:81:89:60:68:f8:4c:
ea:48:ad:5a:46:59:de:87:c7:1d:1b:01:2f:92:1a:
d8:e7:45:a3:82:06:b5:f3:0f:9e:47:ad:4a:76:a2:
6c:d9:4e:47:aa:a9:a6:20:fe:77:f4:ef:f8:8a:1c:
e8:ba:51:1d:ad:1d:54:65:37:c7:06:ab:f3:1c:94:
96:2c:74:b4:fb:7c:96:a1:42:15:47:74:1b:71:77:
05:48:f7:71:0b:95:70:7b:50:eb:43:1c:5a:87:53:
e1:c3:62:cb:07:54:45:1e:83:11:6f:5d:e0:2c:09:
97:3a:7a:be:bb:c7:58:8b:6c:39:8d:61:ee:06:c5:
df:a6:46:5a:e9:66:24:2b:aa:91:7b:cc:62:8e:5c:
23:d1:6f:8a:00:50:fa:4a:1a:3f:a7:af:f9:6c:9e:
52:07:bc:87:97:60:4b:0d:9b:c5:40:99:1a:c4:e2:
ee:ae:34:4c:22:1b:0f:6d:97:30:5b:86:91:23:01:
69:61:0f:59:d5:d2:d6:20:16:7a:20:56:0f:0c:86:
b5:e7:9d:05:4b:4c:b2:80:39:ff:3e:6a:3e:44:06:
01:49:fb:ab:d6:6e:07:ad:db:45:d1:e6:d9:5b:d3:
4d:2f:49:dd:15:86:06:25:2f:27:71:f7:d3:05:eb:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3E:8A:87:27:A7:28:3A:EA:AE:1A:4C:69:F3:8B:84:2F:66:F5:7C
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/ez6KhyenKDrqrhpMafOLhC9m9Xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.67.0/24
151.237.142.0/24
Signature Algorithm: sha256WithRSAEncryption
86:36:05:b6:09:14:ff:75:df:b6:7d:13:13:a1:6f:31:16:70:
ba:de:10:41:bb:ea:13:21:9c:8d:c2:6c:c0:9f:f1:94:80:2f:
9a:b3:67:cd:c8:ed:0a:81:04:98:d9:45:3e:4c:8a:88:df:35:
cd:b9:31:c2:e4:dc:a4:e2:ea:0f:57:7e:80:82:c9:e2:a7:2f:
00:13:16:08:1a:9d:66:0d:e0:8b:5a:cd:03:be:fb:c9:f0:71:
55:a3:8e:ef:25:17:77:a2:f8:65:da:0b:50:d4:4f:d5:7c:c9:
12:60:b2:ba:8b:b1:98:3d:1a:bd:36:60:45:15:99:70:99:81:
4f:29:70:d0:86:e9:84:9c:86:ae:b2:5f:5f:fb:73:4b:33:df:
6f:87:f1:2d:a0:0d:a4:0b:f7:b4:c3:5b:15:cc:61:e4:1c:46:
2d:d0:70:2e:e1:3a:09:09:9f:1e:a4:f8:e0:e3:08:81:69:14:
93:90:3d:68:38:18:17:4a:7d:c1:16:40:65:7e:0a:3b:c2:91:
28:a4:0e:0d:76:34:6d:8d:81:1f:06:1b:a2:d1:97:d8:36:24:
01:2d:c9:97:2a:6c:77:c2:ae:d3:80:8a:d4:f3:e4:22:69:41:
81:8c:b3:c6:0c:01:66:7f:e8:02:f7:f7:91:43:1b:38:f9:51:
c6:f4:be:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org