Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qFNsf-CVtZxYVjBIw44j11cbS9o.roa
File: qFNsf-CVtZxYVjBIw44j11cbS9o.roa (raw, json)
Hash identifier: 8l7RjdKe1BMfdb2RHsTh1fXVmAbjEyMwilMpVa5eW8E=
Subject key identifier: A8:53:6C:7F:E0:95:B5:9C:58:56:30:48:C3:8E:23:D7:57:1B:4B:DA
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01863319BAA8E72423E3D48BFCA34BD9E015
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qFNsf-CVtZxYVjBIw44j11cbS9o.roa
Signing time: Wed 08 Feb 2023 22:16:09 +0000
ROA not before: Wed 08 Feb 2023 22:16:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62386
IP address blocks: 151.237.36.0/24 maxlen: 24
151.237.37.0/24 maxlen: 24
151.237.38.0/24 maxlen: 24
151.237.36.0/22 maxlen: 22
151.237.39.0/24 maxlen: 24
85.187.234.0/24 maxlen: 24
85.187.235.0/24 maxlen: 24
85.187.234.0/23 maxlen: 23
151.237.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:33:19:ba:a8:e7:24:23:e3:d4:8b:fc:a3:4b:d9:e0:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Feb 8 22:16:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8536c7fe095b59c58563048c38e23d7571b4bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:65:6e:5c:fe:3e:66:89:f9:9d:d9:1c:7b:9e:
61:7c:cf:f9:69:f3:7e:b3:c7:b7:f9:2f:fa:90:b4:
74:7e:93:14:f6:dc:dd:e9:8d:81:12:d1:31:2d:79:
a0:16:68:12:39:f1:06:cd:74:30:17:f7:04:c4:9d:
57:00:6c:07:3c:47:4e:b4:9d:3f:c8:a9:8e:bb:33:
71:25:2e:21:35:25:cf:e0:e3:8a:a9:4b:22:df:c0:
67:84:6f:91:7b:3b:85:20:03:ea:0a:cf:d1:e4:95:
ee:ec:a5:2b:16:72:f3:8e:b7:1e:2a:45:bb:75:3c:
b6:ee:ea:fb:4a:97:12:dc:01:99:b6:5f:bf:ff:7c:
25:81:4a:0a:93:97:44:0e:d7:26:26:0f:68:c1:d6:
9a:e5:2c:7e:2a:a3:23:f1:7e:b8:31:70:b0:c8:09:
0a:86:9a:b2:42:7e:83:7e:ad:51:10:23:de:e0:03:
09:a8:93:f8:e3:32:96:a4:74:0a:eb:70:21:da:2b:
48:8d:e6:4b:0e:08:7f:d1:01:f4:b4:04:77:01:fe:
3f:5b:98:7f:db:62:51:bf:2f:30:bb:6d:49:1e:f2:
69:66:d4:4e:a3:08:16:05:9c:7b:39:8e:6e:d6:83:
57:b2:69:13:e8:05:df:ed:78:96:23:7b:09:e1:af:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:53:6C:7F:E0:95:B5:9C:58:56:30:48:C3:8E:23:D7:57:1B:4B:DA
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qFNsf-CVtZxYVjBIw44j11cbS9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.234.0/23
151.237.36.0/22
151.237.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:19:21:8e:3c:20:4d:1c:5d:24:8f:a8:d2:e2:0d:1b:87:00:
6d:97:e8:39:95:89:34:b7:4b:03:59:22:c0:3b:18:f3:36:3c:
77:5d:c4:43:24:ed:68:44:9c:d8:55:a7:4d:d6:89:ee:05:18:
c7:b1:1f:45:3d:ae:79:3a:24:61:d6:2d:89:31:90:7f:ef:61:
05:bd:6d:3d:31:eb:f7:ea:88:22:da:33:f9:8d:8d:60:d7:e3:
1e:51:8e:ac:af:3b:fc:f8:ca:88:d2:93:1d:fb:23:db:ed:b1:
be:61:25:ff:94:87:29:c3:95:dd:3c:9e:a0:43:e1:bf:50:cd:
6b:4e:0e:0b:1a:63:89:03:db:e4:8b:e8:eb:a9:46:ca:24:88:
1a:35:67:79:f2:64:b7:ce:af:05:b4:08:9a:08:40:71:cc:d0:
4b:0e:6b:02:3b:b3:c0:a3:e4:ea:9e:ee:b4:5f:34:07:15:cd:
42:22:83:55:91:9b:a8:b5:6d:49:f4:77:f5:66:ae:43:e7:04:
bd:b6:e9:24:d2:1f:f2:aa:84:97:73:ad:55:41:db:89:cc:b1:
a2:ce:13:f7:23:ba:28:bb:e4:d1:37:18:e0:a2:f4:b8:59:77:
d3:0e:8a:b9:56:23:a7:8a:a3:0f:6f:11:bc:1b:b3:7a:b9:c9:
c6:cf:ce:b4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYYzGbqo5yQj49SL/KNL2eAVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMwMjA4MjIxNjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODUzNmM3ZmUwOTViNTljNTg1NjMwNDhjMzhlMjNkNzU3MWI0YmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmVuXP4+Zon5ndkce55hfM/5afN+
s8e3+S/6kLR0fpMU9tzd6Y2BEtExLXmgFmgSOfEGzXQwF/cExJ1XAGwHPEdOtJ0/
yKmOuzNxJS4hNSXP4OOKqUsi38BnhG+RezuFIAPqCs/R5JXu7KUrFnLzjrceKkW7
dTy27ur7SpcS3AGZtl+//3wlgUoKk5dEDtcmJg9owdaa5Sx+KqMj8X64MXCwyAkK
hpqyQn6Dfq1RECPe4AMJqJP44zKWpHQK63Ah2itIjeZLDgh/0QH0tAR3Af4/W5h/
22JRvy8wu21JHvJpZtROowgWBZx7OY5u1oNXsmkT6AXf7XiWI3sJ4a/xuQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKhTbH/glbWcWFYwSMOOI9dXG0vaMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvcUZOc2YtQ1Z0WnhZVmpCSXc0NGoxMWNiUzlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVbvqAwQC
l+0kAwQAl+0/MA0GCSqGSIb3DQEBCwUAA4IBAQA/GSGOPCBNHF0kj6jS4g0bhwBt
l+g5lYk0t0sDWSLAOxjzNjx3XcRDJO1oRJzYVadN1onuBRjHsR9FPa55OiRh1i2J
MZB/72EFvW09Mev36ogi2jP5jY1g1+MeUY6srzv8+MqI0pMd+yPb7bG+YSX/lIcp
w5XdPJ6gQ+G/UM1rTg4LGmOJA9vki+jrqUbKJIgaNWd58mS3zq8FtAiaCEBxzNBL
DmsCO7PAo+Tqnu60XzQHFc1CIoNVkZuotW1J9Hf1Zq5D5wS9tukk0h/yqoSXc61V
QduJzLGizhP3I7oou+TRNxjgovS4WXfTDoq5ViOniqMPbxG8G7N6ucnGz860
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org