Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/kj0q1oK-OulnLmEHMB9GRepB2Y8.roa
File: kj0q1oK-OulnLmEHMB9GRepB2Y8.roa (raw, json)
Hash identifier: ncTdCOH4hZkTUZvB2urKhMEIg461N9fK1JgWyG+qWmk=
Subject key identifier: 92:3D:2A:D6:82:BE:3A:E9:67:2E:61:07:30:1F:46:45:EA:41:D9:8F
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246EF48D46A1FE4DC22AB6FABD416C7
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/kj0q1oK-OulnLmEHMB9GRepB2Y8.roa
Signing time: Mon 02 Jan 2023 11:38:49 +0000
ROA not before: Mon 02 Jan 2023 11:38:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205874
IP address blocks: 151.237.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ef:48:d4:6a:1f:e4:dc:22:ab:6f:ab:d4:16:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=923d2ad682be3ae9672e6107301f4645ea41d98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fd:11:78:5b:c1:0e:d0:67:a8:70:bf:d3:18:
b6:d3:a6:f7:f7:ef:b9:2e:c3:16:71:ae:53:9d:92:
5b:49:47:10:c8:91:c6:c9:3f:5a:7d:88:1a:e6:ca:
35:f3:15:45:a6:17:d8:6e:7d:cc:6f:da:07:70:57:
88:00:40:76:7a:31:65:d3:d0:0c:5f:6a:31:90:28:
cd:19:ec:af:00:a6:7d:ae:35:d4:aa:27:5a:a5:91:
05:49:f4:e4:a2:c5:2f:4d:2a:cb:8c:71:ba:a3:66:
2d:8a:0d:3d:80:30:a3:37:f5:88:49:c5:64:4d:36:
eb:67:fa:2d:43:0c:5e:92:cf:3c:09:e1:8e:9e:71:
5b:be:fb:54:b0:a7:49:72:a3:96:32:dc:34:49:8b:
13:2c:db:a9:9f:f9:1c:f2:36:9b:e2:57:c0:d7:44:
f3:b6:9a:d4:88:ea:ce:d7:d3:1c:9f:00:4d:1d:f5:
39:fd:24:bd:cc:db:08:a0:78:8e:98:cc:e0:b5:b3:
4e:21:c5:cd:dd:d9:c5:cd:f8:3e:47:81:d1:7b:14:
8b:95:03:f6:21:a2:b0:fc:70:74:a9:9e:1e:b3:ee:
1c:06:03:e9:35:f4:13:31:66:12:5a:9d:43:a9:57:
dd:4f:de:77:e0:b7:cb:6b:82:da:67:48:d3:52:e8:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:3D:2A:D6:82:BE:3A:E9:67:2E:61:07:30:1F:46:45:EA:41:D9:8F
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/kj0q1oK-OulnLmEHMB9GRepB2Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.25.0/24
Signature Algorithm: sha256WithRSAEncryption
84:13:ef:f0:4a:07:db:4a:b4:89:89:2b:e7:da:95:4e:86:bc:
38:86:80:63:3e:5e:70:21:db:1e:e3:14:af:b3:5e:4d:38:09:
94:b9:ab:1f:14:29:1d:c0:be:3c:5d:d2:95:72:28:13:04:44:
57:c3:b8:c8:91:36:41:f8:cf:a1:1d:8b:b5:ba:c3:3d:81:11:
75:ce:be:fa:f9:49:e4:40:51:29:b7:a3:03:98:d8:3d:ee:35:
01:ee:8e:62:37:25:0e:e6:b4:d1:42:74:93:38:37:f2:df:24:
1a:a0:0e:51:6a:63:bd:92:39:94:e9:e1:0b:90:2b:78:39:e7:
d8:e5:d2:16:90:0c:eb:51:38:1b:01:25:37:f3:6b:1d:cb:34:
df:67:a2:f9:0c:5b:41:60:10:42:94:52:a2:3c:12:7a:63:88:
b4:14:85:27:f6:15:f8:96:9a:25:b7:3b:d8:55:9a:3c:5f:b2:
7b:5a:3c:b1:2d:0d:cb:19:3b:76:8f:7a:05:61:71:4b:8f:0c:
12:a8:cd:aa:78:99:83:44:16:60:94:96:3e:2c:5e:70:d7:15:
4a:8e:3c:38:76:20:36:68:72:68:8f:90:0c:9c:2a:93:b9:84:
60:97:db:6f:74:75:cb:6d:1b:38:1d:61:91:1b:f7:d5:c6:da:
be:c4:d1:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyRu9I1Gof5Nwiq2+r1BbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjMwMTAyMTEzODQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjNkMmFkNjgyYmUzYWU5NjcyZTYxMDczMDFmNDY0NWVhNDFkOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf0ReFvBDtBnqHC/0xi206b39++5
LsMWca5TnZJbSUcQyJHGyT9afYga5so18xVFphfYbn3Mb9oHcFeIAEB2ejFl09AM
X2oxkCjNGeyvAKZ9rjXUqidapZEFSfTkosUvTSrLjHG6o2Ytig09gDCjN/WIScVk
TTbrZ/otQwxeks88CeGOnnFbvvtUsKdJcqOWMtw0SYsTLNupn/kc8jab4lfA10Tz
tprUiOrO19McnwBNHfU5/SS9zNsIoHiOmMzgtbNOIcXN3dnFzfg+R4HRexSLlQP2
IaKw/HB0qZ4es+4cBgPpNfQTMWYSWp1DqVfdT9534LfLa4LaZ0jTUuiRQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJI9KtaCvjrpZy5hBzAfRkXqQdmPMB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEva2owcTFvSy1PdWxuTG1FSE1COUdSZXBCMlk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl+0ZMA0G
CSqGSIb3DQEBCwUAA4IBAQCEE+/wSgfbSrSJiSvn2pVOhrw4hoBjPl5wIdse4xSv
s15NOAmUuasfFCkdwL48XdKVcigTBERXw7jIkTZB+M+hHYu1usM9gRF1zr76+Unk
QFEpt6MDmNg97jUB7o5iNyUO5rTRQnSTODfy3yQaoA5RamO9kjmU6eELkCt4OefY
5dIWkAzrUTgbASU382sdyzTfZ6L5DFtBYBBClFKiPBJ6Y4i0FIUn9hX4lpoltzvY
VZo8X7J7WjyxLQ3LGTt2j3oFYXFLjwwSqM2qeJmDRBZglJY+LF5w1xVKjjw4diA2
aHJoj5AMnCqTuYRgl9tvdHXLbRs4HWGRG/fVxtq+xNEe
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org