Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qQL60EkxbXzorR_zYPx8A0AVqEo.roa
File: qQL60EkxbXzorR_zYPx8A0AVqEo.roa (raw, json)
Hash identifier: ePXVKVGnRvHj760rqLnSl+ipNG2SVavbpI4v66uiVcE=
Subject key identifier: A9:02:FA:D0:49:31:6D:7C:E8:AD:1F:F3:60:FC:7C:03:40:15:A8:4A
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246EAAA9E84424F17E8A47F9145F20E
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qQL60EkxbXzorR_zYPx8A0AVqEo.roa
Signing time: Mon 02 Jan 2023 11:38:48 +0000
ROA not before: Mon 02 Jan 2023 11:38:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202439
IP address blocks: 151.237.138.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ea:aa:9e:84:42:4f:17:e8:a4:7f:91:45:f2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a902fad049316d7ce8ad1ff360fc7c034015a84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:44:7e:23:d6:8d:19:70:49:5c:a0:e0:bc:
cf:dc:14:5b:bf:f4:76:2f:ea:1e:99:3f:d0:da:ad:
ba:4b:e6:b3:75:b2:f9:fa:37:26:d7:5c:e7:1d:fc:
10:ba:2b:06:c9:15:d8:4c:07:05:39:54:a5:9e:87:
b1:0d:0d:be:c7:de:e4:e6:65:6e:8e:d5:a7:d1:58:
8b:1d:6a:d1:e9:4a:86:65:23:51:c3:bd:fb:bc:d8:
f4:12:47:4e:77:64:7a:a6:17:c3:c1:29:ee:78:38:
8b:6b:39:59:a9:b8:e7:f5:71:b2:da:ba:6e:ad:52:
47:4b:ec:5c:73:32:e7:66:61:4d:33:cb:80:0e:0c:
5f:f9:0d:5a:d8:37:27:07:45:f6:49:d8:0b:e6:fd:
c2:74:c7:60:81:27:f2:36:95:7f:37:45:83:6d:17:
8a:18:54:c6:6f:27:25:74:39:ed:24:e5:d6:de:03:
aa:77:50:2c:79:9f:6b:6d:25:47:59:1d:d2:97:8a:
67:91:fd:02:48:11:1a:a5:68:7b:c3:50:b6:59:00:
7e:a2:58:5e:58:9c:da:86:12:9f:8d:88:9d:23:4c:
f4:f8:b3:2b:b5:a6:07:53:47:fe:a8:e2:b1:b7:3c:
02:b1:b0:8f:66:7f:a9:fc:91:d8:1b:90:cf:fa:fc:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:02:FA:D0:49:31:6D:7C:E8:AD:1F:F3:60:FC:7C:03:40:15:A8:4A
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qQL60EkxbXzorR_zYPx8A0AVqEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.138.0/23
Signature Algorithm: sha256WithRSAEncryption
59:bc:51:ec:d3:87:da:77:96:30:54:45:25:38:54:9a:ef:f9:
97:1f:a4:e8:5c:bd:36:b2:68:bf:71:ca:f1:94:b4:94:62:36:
9a:c1:06:f2:dc:89:b8:c9:ee:10:e7:7e:35:94:e7:77:19:6b:
b2:f5:86:d8:73:e7:06:96:eb:9f:c0:c9:fb:7f:20:af:26:aa:
68:ed:9e:8a:ba:b6:00:d0:da:b6:e9:bf:89:af:96:47:06:e0:
97:5e:7f:36:07:fd:83:5e:92:6f:cb:5c:91:8f:5d:6e:7d:71:
20:d6:9f:92:fb:c5:61:03:a3:55:1f:bc:10:ab:84:2e:50:cc:
83:6a:89:7f:f1:64:9e:bc:f6:47:d6:ad:48:e9:6b:94:50:b6:
69:1f:ce:75:5e:5f:2e:34:1d:30:92:37:52:c9:b2:44:22:12:
d4:07:0e:bf:27:be:d3:a0:19:d1:9f:31:fe:0d:14:46:54:53:
eb:7b:8b:78:ff:f0:f3:cc:48:60:15:1b:fe:a9:78:43:4f:3b:
fd:cc:0a:97:7f:77:f4:a5:84:db:a1:de:57:7c:a5:a8:0e:1e:
f4:3e:02:f0:9c:fb:c6:10:5c:95:dd:7a:f7:f5:c9:7a:dc:ce:
14:7a:bf:70:be:62:49:76:f8:ca:89:46:91:8c:af:c9:9b:d4:
ea:01:e9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org