Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jLGyfWEh_XF6fAUXZ1-Ii01QtDw.roa
File: jLGyfWEh_XF6fAUXZ1-Ii01QtDw.roa (raw, json)
Hash identifier: Uv4C7HqCjXBPfSeiaBfm1OVUMLi/2JBDHNqdSSgEByo=
Subject key identifier: 8C:B1:B2:7D:61:21:FD:71:7A:7C:05:17:67:5F:88:8B:4D:50:B4:3C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194B03A1FE65058DB28BB0CE5F206163C86
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jLGyfWEh_XF6fAUXZ1-Ii01QtDw.roa
Signing time: Wed 29 Jan 2025 04:03:06 +0000
ROA not before: Wed 29 Jan 2025 04:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 151.243.8.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 30 Jan 2025 06:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b0:3a:1f:e6:50:58:db:28:bb:0c:e5:f2:06:16:3c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 29 04:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cb1b27d6121fd717a7c0517675f888b4d50b43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:98:85:db:42:4c:44:a3:48:bf:7d:f1:0b:
dd:0e:55:ee:01:4c:78:41:70:4a:8f:77:ad:bb:eb:
f8:14:99:1e:fc:5d:88:1c:f1:d4:be:09:41:e6:08:
b4:c3:bd:46:0c:a5:bc:93:10:41:80:f5:c2:c9:bc:
06:3e:13:d2:16:3b:1f:39:f3:cd:6b:5a:6e:d9:87:
b6:45:2f:14:13:8e:8f:76:27:f2:03:6d:48:9f:3f:
7c:a3:a6:12:08:ff:1f:14:58:55:42:ed:ba:1c:4d:
c4:96:80:58:ab:3b:9f:17:e8:a9:df:21:4b:d7:ca:
dd:38:92:6a:35:57:f7:a0:cf:a7:11:26:15:bf:22:
09:af:51:9f:8a:d5:17:99:52:6b:b9:32:79:4c:0e:
06:54:8e:66:94:89:43:eb:5b:b4:a5:ff:04:6c:f2:
4b:ce:bd:48:a9:57:6f:ec:3e:db:86:a6:74:55:6d:
c3:5e:70:d0:c3:1a:08:71:f1:69:86:14:28:ad:f9:
ea:49:5f:be:54:fb:58:d8:08:f1:3b:fb:a8:b4:4d:
6f:b1:73:c8:9f:56:0a:82:7b:15:0e:ed:a7:2d:8e:
20:f1:2b:d6:36:24:06:16:8e:4d:68:ce:19:65:b1:
09:8f:92:ab:62:d7:9b:47:b5:ca:c8:44:81:be:f8:
5c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B1:B2:7D:61:21:FD:71:7A:7C:05:17:67:5F:88:8B:4D:50:B4:3C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jLGyfWEh_XF6fAUXZ1-Ii01QtDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.8.0/23
Signature Algorithm: sha256WithRSAEncryption
39:48:8a:58:14:db:a1:4d:d7:7f:f4:ff:fc:70:2b:c9:c4:df:
0a:48:e2:e5:ae:72:81:e7:99:3e:17:96:75:38:fe:60:7f:91:
8b:0e:5f:36:9c:f3:92:c8:ee:f5:11:1d:d0:f8:82:8b:b8:bf:
b8:d8:c0:30:f5:74:50:f6:ab:07:b8:e8:97:41:8c:5f:c9:b3:
18:63:bd:77:18:0e:1a:e5:7a:4b:e7:1c:d2:9a:98:86:67:8d:
30:8a:34:00:c9:3f:e2:16:af:b7:57:9f:06:2d:1b:f7:2d:0f:
4b:3f:6e:26:1b:94:d3:b4:27:65:b9:c5:6a:52:40:1c:65:9e:
66:d5:c7:77:b0:e2:15:e4:24:95:ba:83:c4:9d:87:fb:b2:47:
31:57:b5:2a:ec:9d:40:93:48:85:6e:2f:e6:d3:f3:cf:b8:df:
b5:e5:12:ab:02:7a:cb:c1:26:00:b4:b7:b6:69:5b:3e:cb:b2:
2b:4c:f2:5d:a7:3d:c3:ce:20:2d:a5:cd:98:77:a9:52:29:3c:
d8:14:1a:24:c7:51:74:4f:94:0f:7c:8b:fa:fb:84:31:bb:91:
86:4e:3d:b5:69:3d:72:a2:f0:77:02:a7:a8:a1:13:3d:7b:de:
f4:c9:0b:da:fd:e2:82:64:41:7e:79:0e:df:98:b6:b6:d6:07:
d7:c2:16:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:26 2025 by rpki-client