Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/gQNUVlsXzOLcu6Eapfq9VYzRacI.roa
File: gQNUVlsXzOLcu6Eapfq9VYzRacI.roa (raw, json)
Hash identifier: Gy3S1nrHwrxc11f15cNyVtXO1QZrQIFUcUMxB7EX418=
Subject key identifier: 81:03:54:56:5B:17:CC:E2:DC:BB:A1:1A:A5:FA:BD:55:8C:D1:69:C2
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018EB37293031000259BE742DA7F10ED9C3C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/gQNUVlsXzOLcu6Eapfq9VYzRacI.roa
Signing time: Sat 06 Apr 2024 12:46:54 +0000
ROA not before: Sat 06 Apr 2024 12:46:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62110
IP address blocks: 151.237.78.0/23 maxlen: 23
151.237.78.0/24 maxlen: 24
151.237.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b3:72:93:03:10:00:25:9b:e7:42:da:7f:10:ed:9c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Apr 6 12:46:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=810354565b17cce2dcbba11aa5fabd558cd169c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:d1:33:70:2a:ce:0e:b2:ee:5c:3e:da:b6:
67:fb:9b:be:2e:e5:f0:cf:5b:a0:36:0d:e4:36:32:
22:68:52:48:1d:4c:47:c4:34:44:84:4f:7c:04:e6:
57:25:00:f7:3d:aa:c8:b6:05:94:73:7c:7b:df:f3:
5d:f6:8c:76:75:b1:82:eb:ec:ba:59:08:f4:53:94:
3d:0d:df:7e:87:25:5c:ba:de:59:a9:b3:28:29:ea:
25:fd:c3:de:42:a3:e9:16:6d:58:78:86:d6:8a:03:
87:d1:7e:bb:fe:87:ee:39:19:d1:4b:eb:13:6e:fd:
26:7c:3c:92:d8:a4:5a:b0:c2:6b:2d:dd:1e:8b:15:
76:91:f2:70:ff:02:76:dd:0a:a0:86:c7:a1:59:2d:
ab:91:27:a4:ca:7e:ec:f8:b1:94:2e:65:ad:bd:d7:
6f:7e:fb:8c:dc:b3:f4:19:76:80:12:18:00:63:2f:
c5:44:0c:ff:9b:b6:6b:6f:b6:0b:39:c2:6b:a6:9b:
d6:cd:e8:01:70:ca:16:a9:82:ba:dc:09:4d:0d:c4:
b8:15:fa:a8:18:cb:9d:e4:e4:1f:fe:03:0b:19:30:
3a:2d:be:80:33:a8:8c:bb:37:1a:94:a1:f3:bf:b7:
f0:26:f8:ac:e9:6e:63:97:d2:da:90:47:ba:c6:7a:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:03:54:56:5B:17:CC:E2:DC:BB:A1:1A:A5:FA:BD:55:8C:D1:69:C2
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/gQNUVlsXzOLcu6Eapfq9VYzRacI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.78.0/23
Signature Algorithm: sha256WithRSAEncryption
05:fe:6b:92:7a:96:e4:35:37:f8:bf:99:12:24:c1:6c:fa:6f:
b8:92:46:e4:9d:5e:a1:fb:1a:62:87:d1:42:d4:4b:52:9a:bc:
6b:8c:dc:65:38:2b:9f:e4:e1:e7:75:b2:f0:fa:c6:75:89:d9:
5e:39:18:6f:0f:d2:f1:7c:a1:99:51:c4:02:e0:60:8e:97:18:
78:97:29:6f:aa:bc:2f:93:27:7b:89:93:33:2c:7d:99:34:bc:
76:7a:e6:c7:bf:ca:b1:80:db:f8:0d:fb:17:6b:6e:41:07:91:
2c:a6:e8:49:26:4b:aa:29:97:d2:0a:8c:46:e2:37:67:48:a5:
49:1e:51:9c:04:65:38:58:4e:1d:fe:7b:74:b8:18:58:33:c4:
02:8b:fa:f4:3b:3e:59:ec:2d:06:bd:0b:09:90:1d:2d:83:27:
53:86:dc:70:41:69:41:c9:c7:52:a8:06:36:4f:5c:3f:23:53:
58:8f:a9:aa:3c:31:ab:d3:2f:b1:e2:b1:8e:83:cf:df:83:f4:
70:d8:07:2e:e4:2e:f8:12:3c:90:22:3e:49:49:0d:d4:38:ea:
30:d5:01:88:e7:94:02:45:8d:8f:1f:0b:fd:6c:c5:40:c9:8c:
08:a9:be:4e:42:63:71:cf:6a:20:5d:c9:cf:af:2c:c1:4b:ee:
3e:14:6f:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6zcpMDEAAlm+dC2n8Q7Zw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjQwNDA2MTI0NjU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTAzNTQ1NjViMTdjY2UyZGNiYmExMWFhNWZhYmQ1NThjZDE2OWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA/RM3Aqzg6y7lw+2rZn+5u+LuXw
z1ugNg3kNjIiaFJIHUxHxDREhE98BOZXJQD3ParItgWUc3x73/Nd9ox2dbGC6+y6
WQj0U5Q9Dd9+hyVcut5ZqbMoKeol/cPeQqPpFm1YeIbWigOH0X67/ofuORnRS+sT
bv0mfDyS2KRasMJrLd0eixV2kfJw/wJ23QqghsehWS2rkSekyn7s+LGULmWtvddv
fvuM3LP0GXaAEhgAYy/FRAz/m7Zrb7YLOcJrppvWzegBcMoWqYK63AlNDcS4Ffqo
GMud5OQf/gMLGTA6Lb6AM6iMuzcalKHzv7fwJvis6W5jl9LakEe6xnqykwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIEDVFZbF8zi3LuhGqX6vVWM0WnCMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvZ1FOVVZsc1h6T0xjdTZFYXBmcTlWWXpSYWNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl+1OMA0G
CSqGSIb3DQEBCwUAA4IBAQAF/muSepbkNTf4v5kSJMFs+m+4kkbknV6h+xpih9FC
1EtSmrxrjNxlOCuf5OHndbLw+sZ1idleORhvD9LxfKGZUcQC4GCOlxh4lylvqrwv
kyd7iZMzLH2ZNLx2eubHv8qxgNv4DfsXa25BB5EspuhJJkuqKZfSCoxG4jdnSKVJ
HlGcBGU4WE4d/nt0uBhYM8QCi/r0Oz5Z7C0GvQsJkB0tgydThtxwQWlBycdSqAY2
T1w/I1NYj6mqPDGr0y+x4rGOg8/fg/Rw2Acu5C74EjyQIj5JSQ3UOOow1QGI55QC
RY2PHwv9bMVAyYwIqb5OQmNxz2ogXcnPryzBS+4+FG92
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:27 2025 by rpki-client