Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/zUSRQHo1DrOM2y_2TnsrCImE_y4.roa
File: zUSRQHo1DrOM2y_2TnsrCImE_y4.roa (raw, json)
Hash identifier: A/hmq/SJcMfVVAavUjwzGgtWhMTcOwuwSRf44IFKFow=
Subject key identifier: CD:44:91:40:7A:35:0E:B3:8C:DB:2F:F6:4E:7B:2B:08:89:84:FF:2E
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B9354DD77A39F618AE4D3E2E85BC9C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/zUSRQHo1DrOM2y_2TnsrCImE_y4.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41782
IP address blocks: 151.237.16.0/24 maxlen: 24
151.237.17.0/24 maxlen: 24
151.237.18.0/24 maxlen: 24
151.237.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 16:37:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:35:4d:d7:7a:39:f6:18:ae:4d:3e:2e:85:bc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd4491407a350eb38cdb2ff64e7b2b088984ff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:d2:7e:e4:11:3a:98:90:47:bf:75:d1:54:
c9:c8:3d:e6:2c:64:2a:33:8e:0a:60:a6:f0:f6:a0:
d7:cf:7a:6c:5a:8a:5a:d2:94:85:0d:fd:e6:ce:44:
49:20:80:42:b4:f8:ba:cf:10:df:bd:d8:87:c7:e5:
14:99:65:a0:47:77:ec:69:7c:43:c3:48:ef:d4:8d:
53:aa:76:9d:42:f1:dc:4c:12:36:6c:d2:97:d8:f3:
36:62:33:64:02:10:98:f8:fc:dd:05:4e:8d:de:e8:
6c:71:73:63:52:6a:09:0e:a8:33:ed:13:dc:2c:21:
54:db:08:8d:e1:a5:66:59:e1:c0:da:3f:f9:f6:96:
26:bb:ca:f3:af:a1:d1:18:a7:1d:7a:fc:55:f8:36:
0b:ff:a5:5b:b7:5a:23:f9:88:6d:f4:c8:05:fa:02:
09:69:09:7b:f7:86:f0:c2:f6:19:27:a8:39:54:b7:
dd:c1:5b:43:42:11:8e:fd:37:b5:f2:7c:b2:1a:cd:
f7:c4:81:12:8b:a5:89:39:65:85:22:18:d1:4d:87:
35:63:35:44:b0:23:70:15:7a:18:e7:84:94:6b:19:
e0:81:27:80:c3:62:fc:75:ee:7a:aa:c9:5d:aa:df:
b6:40:e3:7a:36:aa:55:28:7c:12:cf:d4:2c:41:ad:
28:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:44:91:40:7A:35:0E:B3:8C:DB:2F:F6:4E:7B:2B:08:89:84:FF:2E
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/zUSRQHo1DrOM2y_2TnsrCImE_y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.16.0/22
Signature Algorithm: sha256WithRSAEncryption
e2:93:07:79:16:43:d0:fc:e9:f7:23:1d:41:93:74:ca:8e:27:
73:fa:e3:a9:fe:ad:bf:3b:8b:da:48:66:cc:62:22:d9:f7:3b:
fd:f3:b2:94:cd:4f:65:83:70:8e:c7:1c:c6:fa:77:3b:b4:95:
56:f7:7b:dc:f5:0b:a7:6a:fe:71:6d:73:e4:21:e8:39:12:88:
21:09:1e:f2:0a:2e:92:48:11:06:25:9f:53:fe:31:9a:5e:ae:
b3:d5:9c:08:a2:77:b0:26:a1:04:61:43:74:16:59:47:b3:3b:
82:27:ab:20:5d:38:62:dc:9a:b1:89:e2:15:12:57:b7:7e:f5:
93:e5:3b:db:5f:de:bf:6a:65:15:a2:df:56:2b:91:79:f4:5d:
a7:c8:91:b6:39:f3:d1:34:cb:fc:72:78:77:72:46:19:68:b9:
a3:da:30:5c:9e:6a:e0:cd:46:41:ee:0c:53:86:3e:b3:f5:1c:
04:e0:99:56:23:cc:df:60:59:23:ee:ef:3c:91:46:cb:7a:b4:
1e:1c:a4:ce:3c:2d:e3:d5:19:77:3d:8b:04:e5:73:d9:60:02:
ec:e8:13:ef:31:b4:b5:c4:df:87:49:14:07:a4:77:a9:5d:c2:
50:0d:5d:5f:48:66:16:3d:e4:85:4e:0a:32:b8:af:aa:e5:8d:
12:fd:c3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org