Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/j1deNP037-rIkkXFqW0FK68Zfm4.roa
File: j1deNP037-rIkkXFqW0FK68Zfm4.roa (raw, json)
Hash identifier: INHh79gdelQexBs8eeC21zTPGcUTYAPHOvGC89X7/Cw=
Subject key identifier: 8F:57:5E:34:FD:37:EF:EA:C8:92:45:C5:A9:6D:05:2B:AF:19:7E:6E
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 0190C07F6AE95E2359F2AAE20DC3E4F39ACD
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/j1deNP037-rIkkXFqW0FK68Zfm4.roa
Signing time: Wed 17 Jul 2024 11:41:34 +0000
ROA not before: Wed 17 Jul 2024 11:41:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214509
IP address blocks: 103.132.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:7f:6a:e9:5e:23:59:f2:aa:e2:0d:c3:e4:f3:9a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Jul 17 11:41:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f575e34fd37efeac89245c5a96d052baf197e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:3e:ae:9f:42:e7:86:e8:b6:fd:f4:48:84:
ac:a8:11:cc:64:84:77:df:fb:0a:32:d4:28:13:1e:
bb:41:0e:59:56:c6:6f:68:45:68:f7:e0:81:b6:ad:
a2:76:ce:77:d3:e0:5b:8a:bb:68:88:07:9c:5b:14:
a7:95:4a:26:b0:78:00:c1:8b:5a:d2:7b:13:fd:75:
a0:c1:8a:4c:8b:83:c2:2b:87:cc:92:89:6a:54:8a:
f5:2a:ce:30:be:55:01:d2:11:fe:84:18:f6:f6:26:
92:80:c0:ec:00:e5:6f:5d:2d:5c:9c:cf:b2:51:16:
74:cf:27:2d:81:b0:d0:47:e7:93:85:6f:b8:7a:1e:
81:09:52:86:95:a9:fe:34:e4:5a:11:bb:fe:33:a8:
84:ba:d2:49:22:5e:11:f4:47:c6:bb:be:6b:99:cc:
b9:19:f0:fe:3f:78:36:1c:f3:a2:7b:ff:b6:a6:57:
6d:e0:bd:30:98:2d:97:07:82:31:61:73:55:3f:ec:
23:7f:8c:ac:c8:26:26:73:be:a5:91:a6:18:0c:21:
4e:1d:17:ac:f5:70:fd:84:be:24:78:d1:9b:d9:40:
52:33:f8:cb:60:2f:4e:e6:d9:78:8f:3b:56:42:08:
b8:7b:f2:4c:cc:f7:09:98:ea:93:19:cd:90:db:4a:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:57:5E:34:FD:37:EF:EA:C8:92:45:C5:A9:6D:05:2B:AF:19:7E:6E
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/j1deNP037-rIkkXFqW0FK68Zfm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.132.131.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:44:64:05:c5:07:11:9e:5c:17:2a:58:af:8b:89:0f:98:b3:
0e:72:35:49:8d:c6:5d:60:88:5c:3c:7d:6f:cd:ec:b0:ad:5b:
37:8d:75:5f:04:70:0f:7e:ca:a7:73:bc:5d:15:85:a9:1c:07:
02:05:99:7b:73:d3:95:6b:f9:eb:d4:d3:6c:04:ee:d8:93:c6:
c2:1f:44:d3:49:93:78:2b:ad:79:0c:2b:20:ff:76:06:c8:27:
55:74:08:8a:e9:6b:cd:95:af:10:94:31:a8:ad:cf:b6:6e:a9:
e5:99:83:f8:e1:b6:b8:c4:1a:b5:6d:bf:2b:87:ab:2f:ab:69:
c6:a1:17:1b:8e:b0:77:ff:04:3b:24:6e:7f:1a:cf:5c:6b:28:
d5:0a:d7:00:ef:6b:a2:db:fb:a1:39:d8:c5:c9:43:ed:16:34:
17:03:f9:47:7f:39:12:bf:e6:89:17:bb:bd:af:63:08:c1:8e:
dc:ab:ce:db:78:bb:96:20:f5:2c:8d:08:58:14:b2:8b:2c:94:
af:c6:b6:72:04:86:9e:00:ad:e0:c3:8a:bd:05:00:7d:19:7d:
0b:68:f5:a8:97:72:ef:b2:3b:6d:6c:86:53:5b:b9:c2:cc:e7:
fa:98:2c:f4:66:ac:e3:b7:f9:38:cc:70:f2:7a:5e:3c:65:a7:
cb:43:70:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDAf2rpXiNZ8qriDcPk85rNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmY2E5OTdkMzkwY2Q2ZTQ2ZTAxMjhlNTBkNzBiODRlN2Fi
Njc0MGYwHhcNMjQwNzE3MTE0MTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjU3NWUzNGZkMzdlZmVhYzg5MjQ1YzVhOTZkMDUyYmFmMTk3ZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvg+rp9C54botv30SISsqBHMZIR3
3/sKMtQoEx67QQ5ZVsZvaEVo9+CBtq2ids530+BbirtoiAecWxSnlUomsHgAwYta
0nsT/XWgwYpMi4PCK4fMkolqVIr1Ks4wvlUB0hH+hBj29iaSgMDsAOVvXS1cnM+y
URZ0zyctgbDQR+eThW+4eh6BCVKGlan+NORaEbv+M6iEutJJIl4R9EfGu75rmcy5
GfD+P3g2HPOie/+2pldt4L0wmC2XB4IxYXNVP+wjf4ysyCYmc76lkaYYDCFOHRes
9XD9hL4keNGb2UBSM/jLYC9O5tl4jztWQgi4e/JMzPcJmOqTGc2Q20pbAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI9XXjT9N+/qyJJFxaltBSuvGX5uMB8GA1UdIwQY
MBaAFP/KmX05DNbkbgEo5Q1wuE56tnQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTkt
ODE5YjdhN2VjNDM0LzEvajFkZU5QMDM3LXJJa2tYRnFXMEZLNjhaZm00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hZjBhMmEtN2ViZi00ZGMwLWEzMTktODE5YjdhN2VjNDM0
LzEvXzhxWmZUa00xdVJ1QVNqbERYQzRUbnEyZEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4SDMA0G
CSqGSIb3DQEBCwUAA4IBAQBsRGQFxQcRnlwXKlivi4kPmLMOcjVJjcZdYIhcPH1v
zeywrVs3jXVfBHAPfsqnc7xdFYWpHAcCBZl7c9OVa/nr1NNsBO7Yk8bCH0TTSZN4
K615DCsg/3YGyCdVdAiK6WvNla8QlDGorc+2bqnlmYP44ba4xBq1bb8rh6svq2nG
oRcbjrB3/wQ7JG5/Gs9cayjVCtcA72ui2/uhOdjFyUPtFjQXA/lHfzkSv+aJF7u9
r2MIwY7cq87beLuWIPUsjQhYFLKLLJSvxrZyBIaeAK3gw4q9BQB9GX0LaPWol3Lv
sjttbIZTW7nCzOf6mCz0Zqzjt/k4zHDyel48ZafLQ3Am
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:00 2025 by rpki-client