Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/q1W1pME3DmXLKAw0TezopAqd-ZU.roa
File: q1W1pME3DmXLKAw0TezopAqd-ZU.roa (raw, json)
Hash identifier: 4TjnGqplnjIqaQar4lQ224Vq9aSAcq2z3YUI0yFVYWs=
Subject key identifier: AB:55:B5:A4:C1:37:0E:65:CB:28:0C:34:4D:EC:E8:A4:0A:9D:F9:95
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246F592B3BCAC3814A408A866F3B68E
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/q1W1pME3DmXLKAw0TezopAqd-ZU.roa
Signing time: Mon 02 Jan 2023 11:38:50 +0000
ROA not before: Mon 02 Jan 2023 11:38:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210212
IP address blocks: 151.237.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f5:92:b3:bc:ac:38:14:a4:08:a8:66:f3:b6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab55b5a4c1370e65cb280c344dece8a40a9df995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:30:cc:43:8f:b0:24:a7:4f:57:1a:b3:c9:
86:23:3a:e2:7d:14:e4:b8:ce:1d:52:c3:4b:21:70:
46:dd:cb:33:e1:8f:25:e4:d5:f1:e9:58:6d:45:8d:
50:5b:9b:ca:d6:ee:c9:4a:16:38:56:e8:22:68:0e:
5b:4a:d8:72:c3:c0:a9:98:24:f5:2d:2c:47:4c:e1:
30:c7:b9:df:48:95:fb:13:2b:47:6f:b0:0c:e0:80:
36:30:96:65:8f:ff:14:e2:04:7f:c5:e6:b7:c5:5d:
f6:af:0a:31:52:59:e2:da:0c:e6:68:2c:86:89:d8:
e1:27:5e:24:90:ef:28:91:e0:a6:02:a9:c7:11:f6:
b3:45:6e:be:72:90:91:ac:59:50:6c:c1:46:72:76:
ab:15:3d:33:51:f9:ed:a0:c6:0c:35:5d:a0:bf:41:
b0:bf:78:60:ae:e5:33:b1:7e:9e:8b:25:d1:f5:7f:
d5:cb:76:82:cb:ff:94:3f:fd:bd:f9:1e:cd:1e:c1:
04:f6:11:fc:49:28:ec:c5:5b:f5:9c:8b:3b:ef:d1:
b3:df:65:c9:42:42:e0:90:20:8b:7a:04:90:c0:c3:
74:89:7d:93:57:63:1d:b5:c7:88:08:41:f2:13:14:
dc:10:ff:05:26:65:f6:51:3a:84:79:9c:f3:40:11:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:55:B5:A4:C1:37:0E:65:CB:28:0C:34:4D:EC:E8:A4:0A:9D:F9:95
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/q1W1pME3DmXLKAw0TezopAqd-ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:59:e3:74:1c:91:5a:98:82:89:ad:03:de:22:ea:44:61:84:
ef:5d:42:0b:28:bd:fb:24:92:b9:62:a2:11:95:e2:1b:0f:24:
8f:80:38:35:ef:65:72:6d:4e:cc:3b:ff:15:34:91:6c:74:a8:
a2:21:0a:54:6c:65:06:1f:41:81:97:0a:c8:8d:c1:2e:b3:05:
36:00:17:d9:97:78:a9:2a:cf:eb:17:48:c2:be:01:56:0d:ef:
0b:1e:d0:0c:56:69:85:b5:4f:9e:7c:cc:18:cd:8b:8f:50:44:
f2:45:e0:2e:06:b3:87:c7:5f:7f:cc:13:6c:8b:1b:a2:03:55:
52:0f:16:5e:9e:cf:b6:54:bb:9a:f4:f9:3a:5c:31:13:03:1a:
0c:e4:d9:d3:24:df:ac:6c:db:ac:39:70:44:c6:44:1a:1a:05:
05:86:63:4c:6d:4b:44:f1:dc:f8:00:5f:11:bf:95:04:da:fc:
f2:c6:c2:44:0f:64:59:fa:ba:5d:03:b8:e4:46:32:58:78:c9:
83:c1:75:75:11:18:c8:e5:9f:e2:70:4d:27:28:9e:13:c7:e6:
56:79:f7:03:a7:ad:1f:a0:21:1c:83:f4:1d:5a:e3:46:f8:31:
cd:3f:f9:75:72:9e:78:4a:68:80:95:6e:d7:97:be:aa:1e:e8:
69:8a:95:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org