Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/j_jtfhM-VbSn8nU9-SFJsStOz_o.roa
File: j_jtfhM-VbSn8nU9-SFJsStOz_o.roa (raw, json)
Hash identifier: HnHP67er0QTUfikbJh2e/OEPqGvVfI1dsyabBHpGYac=
Subject key identifier: 8F:F8:ED:7E:13:3E:55:B4:A7:F2:75:3D:F9:21:49:B1:2B:4E:CF:FA
Certificate issuer: /CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Certificate serial: 018854CE472E1A09042B6063495D76EE3614
Authority key identifier: 7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/j_jtfhM-VbSn8nU9-SFJsStOz_o.roa
Signing time: Thu 25 May 2023 21:26:24 +0000
ROA not before: Thu 25 May 2023 21:26:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201005
IP address blocks: 151.237.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:ce:47:2e:1a:09:04:2b:60:63:49:5d:76:ee:36:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7b4bcabeb29605ea511de973e4675c4b8a29df
Validity
Not Before: May 25 21:26:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ff8ed7e133e55b4a7f2753df92149b12b4ecffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:0d:00:e2:11:0b:30:76:eb:0c:7f:21:0d:
a4:8d:e1:9d:4b:07:4f:d3:d1:2a:25:93:d0:21:28:
ff:39:2c:2a:ca:12:3f:39:36:41:e7:8e:1d:29:29:
6a:b9:73:c5:ee:41:35:5d:ab:43:87:0c:04:2e:4b:
4e:30:80:5b:02:2b:a1:eb:bd:65:13:33:8c:46:5d:
75:e8:76:75:ad:77:a9:36:f7:97:2c:79:75:bb:4b:
ee:ee:4a:cd:92:f4:d3:cb:e6:42:db:cd:5e:ee:01:
57:aa:db:46:c7:e3:b3:68:0d:57:02:d0:5d:33:55:
22:bc:54:a4:3b:2e:78:a4:57:92:bf:90:00:a8:97:
c1:59:ae:18:e9:a2:a2:3b:26:6e:54:c9:56:ff:20:
76:3c:cc:a7:b5:41:2c:04:63:f0:1a:73:34:ad:73:
98:c9:35:4e:69:d3:73:23:3c:cd:9f:e2:cb:45:77:
19:60:93:64:ce:b3:b6:ee:12:3d:7d:10:12:d7:76:
57:3f:de:94:d5:ec:61:60:7d:de:e4:a7:fa:39:50:
40:6b:0a:86:7a:43:3d:35:6f:eb:fe:e9:56:17:b0:
77:18:5c:c2:08:2c:cd:e9:d0:29:5f:a5:ed:51:00:
06:e3:e8:ce:dc:a1:19:ec:ec:0a:58:21:66:19:e5:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F8:ED:7E:13:3E:55:B4:A7:F2:75:3D:F9:21:49:B1:2B:4E:CF:FA
X509v3 Authority Key Identifier:
keyid:7D:7B:4B:CA:BE:B2:96:05:EA:51:1D:E9:73:E4:67:5C:4B:8A:29:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXtLyr6ylgXqUR3pc-RnXEuKKd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/j_jtfhM-VbSn8nU9-SFJsStOz_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/8897fd-1862-4393-aa4b-447617a4a744/1/fXtLyr6ylgXqUR3pc-RnXEuKKd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.7.0/24
Signature Algorithm: sha256WithRSAEncryption
25:53:55:8d:f5:d1:36:31:22:ba:73:72:77:3b:ce:ed:6b:8e:
88:26:73:36:e6:be:43:f4:32:dd:93:f3:3d:09:82:d2:0a:65:
c9:d8:6c:0e:52:20:b3:3f:cf:fa:65:3f:6e:5a:cc:9a:cf:dc:
78:fb:8a:38:ac:ab:91:8e:6e:e0:af:28:b3:f0:e3:23:68:aa:
c2:92:71:f7:73:2f:67:f6:30:3b:02:6d:d4:70:1f:a6:be:ba:
53:e3:86:c4:9b:23:7f:08:7f:e1:ee:8c:19:f5:5f:b6:db:c8:
b0:ce:d7:96:02:a1:75:00:2a:ad:a9:04:fa:93:f5:62:34:96:
c1:98:5a:5b:1b:f8:08:a7:49:93:7a:0d:6d:94:26:43:7e:96:
0c:f7:81:63:86:23:a5:22:47:ff:e6:fb:77:22:fb:de:f4:2c:
9f:09:a3:c6:5f:fd:49:93:d4:7d:de:8e:ad:70:b7:b3:6e:8e:
fe:94:d1:9c:1f:90:99:cd:c1:8c:20:3d:91:7a:09:fb:c0:82:
6f:6f:25:5d:ac:90:f3:db:69:46:ad:e6:5f:e8:46:31:33:d8:
7e:e7:c6:b5:6e:09:c4:9c:0b:aa:bf:de:db:17:5c:13:26:24:
b3:06:03:58:88:b2:f0:79:b1:bb:c1:64:58:de:2e:4a:ed:4c:
6c:93:3d:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhUzkcuGgkEK2BjSV127jYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkN2I0YmNhYmViMjk2MDVlYTUxMWRlOTczZTQ2NzVjNGI4
YTI5ZGYwHhcNMjMwNTI1MjEyNjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmY4ZWQ3ZTEzM2U1NWI0YTdmMjc1M2RmOTIxNDliMTJiNGVjZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcANAOIRCzB26wx/IQ2kjeGdSwdP
09EqJZPQISj/OSwqyhI/OTZB544dKSlquXPF7kE1XatDhwwELktOMIBbAiuh671l
EzOMRl116HZ1rXepNveXLHl1u0vu7krNkvTTy+ZC281e7gFXqttGx+OzaA1XAtBd
M1UivFSkOy54pFeSv5AAqJfBWa4Y6aKiOyZuVMlW/yB2PMyntUEsBGPwGnM0rXOY
yTVOadNzIzzNn+LLRXcZYJNkzrO27hI9fRAS13ZXP96U1exhYH3e5Kf6OVBAawqG
ekM9NW/r/ulWF7B3GFzCCCzN6dApX6XtUQAG4+jO3KEZ7OwKWCFmGeV4UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI/47X4TPlW0p/J1PfkhSbErTs/6MB8GA1UdIwQY
MBaAFH17S8q+spYF6lEd6XPkZ1xLiinfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGIt
NDQ3NjE3YTRhNzQ0LzEval9qdGZoTS1WYlNuOG5VOS1TRkpzU3RPel9vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84ODk3ZmQtMTg2Mi00MzkzLWFhNGItNDQ3NjE3YTRhNzQ0
LzEvZlh0THlyNnlsZ1hxVVIzcGMtUm5YRXVLS2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl+0HMA0G
CSqGSIb3DQEBCwUAA4IBAQAlU1WN9dE2MSK6c3J3O87ta46IJnM25r5D9DLdk/M9
CYLSCmXJ2GwOUiCzP8/6ZT9uWsyaz9x4+4o4rKuRjm7gryiz8OMjaKrCknH3cy9n
9jA7Am3UcB+mvrpT44bEmyN/CH/h7owZ9V+228iwzteWAqF1ACqtqQT6k/ViNJbB
mFpbG/gIp0mTeg1tlCZDfpYM94FjhiOlIkf/5vt3Ivve9CyfCaPGX/1Jk9R93o6t
cLezbo7+lNGcH5CZzcGMID2Regn7wIJvbyVdrJDz22lGreZf6EYxM9h+58a1bgnE
nAuqv97bF1wTJiSzBgNYiLLwebG7wWRY3i5K7Uxskz11
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:42 2024 by rpki-client on console-ams.rpki-client.org