Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/j-XcsFwj9oNCEftg6xEFrvWsDSw.roa
File: j-XcsFwj9oNCEftg6xEFrvWsDSw.roa (raw, json)
Hash identifier: ooie1nbML456zlogIoY7Z0wfz1H0OykGvZRy8uM81uk=
Subject key identifier: 8F:E5:DC:B0:5C:23:F6:83:42:11:FB:60:EB:11:05:AE:F5:AC:0D:2C
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246F8AA3D683EC89BD5C41F123FBC8F
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/j-XcsFwj9oNCEftg6xEFrvWsDSw.roa
Signing time: Mon 02 Jan 2023 11:38:51 +0000
ROA not before: Mon 02 Jan 2023 11:38:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213271
IP address blocks: 151.237.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f8:aa:3d:68:3e:c8:9b:d5:c4:1f:12:3f:bc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8fe5dcb05c23f6834211fb60eb1105aef5ac0d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:9d:81:34:b7:0e:de:f3:d4:2c:56:a8:28:
15:42:2f:00:d7:1f:1c:fa:64:53:95:1e:23:89:61:
f7:78:71:dc:02:c4:92:8c:55:d8:08:21:07:6e:87:
f2:a5:3c:d0:94:eb:39:aa:d5:cf:1d:8a:8e:c1:c5:
c0:83:fc:b4:67:4f:f9:a6:da:15:0c:81:a2:d2:79:
9a:f1:4c:93:c6:69:88:31:05:ca:eb:24:e3:d5:ec:
2a:b0:cb:3f:29:77:55:68:5c:d6:34:81:a6:65:cb:
ea:65:d1:49:c5:4e:57:53:97:99:f7:2d:e3:6d:41:
85:10:f7:88:26:83:00:6f:34:20:15:81:ce:ff:05:
3e:e4:ff:77:1d:6b:f3:95:cc:ed:d4:d6:a4:97:a2:
42:65:e2:b2:24:e0:a3:5f:b2:a3:40:11:e1:da:1e:
ef:73:c6:f1:67:ff:e1:ff:d2:69:fd:65:f8:30:98:
58:6d:66:3a:fa:08:9a:b2:65:59:e3:6d:44:cf:96:
1d:65:ab:63:b0:35:01:fb:1b:80:e8:07:bf:af:db:
c7:c4:99:8e:f7:85:e2:41:f7:02:3f:e4:9a:fb:d6:
06:87:d6:35:17:f4:f8:a2:d5:58:42:d9:a0:72:e0:
49:6e:63:f0:b5:7b:1a:5c:43:9e:81:77:85:aa:6c:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:DC:B0:5C:23:F6:83:42:11:FB:60:EB:11:05:AE:F5:AC:0D:2C
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/j-XcsFwj9oNCEftg6xEFrvWsDSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.18.0/24
Signature Algorithm: sha256WithRSAEncryption
60:cf:14:7c:9a:c6:60:d1:5c:55:b5:9e:27:00:0c:d5:83:d2:
3b:f5:3c:06:9f:b2:65:77:6b:87:50:59:f0:75:4b:3a:63:5c:
36:19:2f:98:fe:2a:b3:33:21:3d:88:81:c2:8c:84:fd:19:8b:
b4:c4:89:8c:f1:85:e6:b5:24:5a:30:df:31:fb:76:70:a5:fc:
ca:49:bc:51:a5:26:4e:7f:1a:3c:12:4e:3b:2f:2f:bb:a9:ed:
9a:99:3e:20:bc:3d:c7:ff:2b:98:b5:ba:f0:ef:73:25:06:eb:
8c:81:f5:ce:33:ae:e4:c7:46:fd:1e:3c:88:aa:e6:45:eb:99:
4e:82:27:ac:99:33:d2:3d:47:18:82:e9:68:23:52:17:a0:c9:
4d:33:08:6f:56:c4:5a:38:1e:a1:47:18:8a:c9:11:bd:50:7a:
34:38:db:f4:e0:58:98:c2:81:d8:95:11:43:bd:e0:e0:70:14:
55:b8:60:f3:11:d1:fd:26:dc:46:2f:15:c4:d5:2b:6e:8b:d3:
4b:de:19:36:81:7f:8f:16:89:6c:24:07:0e:00:e4:09:aa:b3:
78:4a:2a:8a:77:2c:dc:55:99:28:62:a4:a5:a8:5f:f9:5f:bb:
28:f2:6c:99:22:66:cd:2d:cc:9e:65:c1:b2:59:68:cd:a9:11:
5e:c9:c2:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRviqPWg+yJvVxB8SP7yPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMwMTAyMTEzODUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmU1ZGNiMDVjMjNmNjgzNDIxMWZiNjBlYjExMDVhZWY1YWMwZDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA+dgTS3Dt7z1CxWqCgVQi8A1x8c
+mRTlR4jiWH3eHHcAsSSjFXYCCEHbofypTzQlOs5qtXPHYqOwcXAg/y0Z0/5ptoV
DIGi0nma8UyTxmmIMQXK6yTj1ewqsMs/KXdVaFzWNIGmZcvqZdFJxU5XU5eZ9y3j
bUGFEPeIJoMAbzQgFYHO/wU+5P93HWvzlczt1Nakl6JCZeKyJOCjX7KjQBHh2h7v
c8bxZ//h/9Jp/WX4MJhYbWY6+giasmVZ421Ez5YdZatjsDUB+xuA6Ae/r9vHxJmO
94XiQfcCP+Sa+9YGh9Y1F/T4otVYQtmgcuBJbmPwtXsaXEOegXeFqmzTIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI/l3LBcI/aDQhH7YOsRBa71rA0sMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvai1YY3NGd2o5b05DRWZ0ZzZ4RUZydldzRFN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl+0SMA0G
CSqGSIb3DQEBCwUAA4IBAQBgzxR8msZg0VxVtZ4nAAzVg9I79TwGn7Jld2uHUFnw
dUs6Y1w2GS+Y/iqzMyE9iIHCjIT9GYu0xImM8YXmtSRaMN8x+3ZwpfzKSbxRpSZO
fxo8Ek47Ly+7qe2amT4gvD3H/yuYtbrw73MlBuuMgfXOM67kx0b9HjyIquZF65lO
giesmTPSPUcYguloI1IXoMlNMwhvVsRaOB6hRxiKyRG9UHo0ONv04FiYwoHYlRFD
veDgcBRVuGDzEdH9JtxGLxXE1Stui9NL3hk2gX+PFolsJAcOAOQJqrN4SiqKdyzc
VZkoYqSlqF/5X7so8myZImbNLcyeZcGyWWjNqRFeycL9
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org