Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Uxt9xtNoM4UmPfW3AD2yl96P1g4.roa
File: Uxt9xtNoM4UmPfW3AD2yl96P1g4.roa (raw, json)
Hash identifier: Hmj3pBb7cHH+AUZxj6RnL4nH/svIdPL8CJUVFbcYvdk=
Subject key identifier: 53:1B:7D:C6:D3:68:33:85:26:3D:F5:B7:00:3D:B2:97:DE:8F:D6:0E
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019421B1EF8CEC765BDB5445635FC4916B9D
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Uxt9xtNoM4UmPfW3AD2yl96P1g4.roa
Signing time: Wed 01 Jan 2025 11:48:16 +0000
ROA not before: Wed 01 Jan 2025 11:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43212
IP address blocks: 151.247.184.0/22 maxlen: 22
151.247.193.0/24 maxlen: 24
151.247.194.0/24 maxlen: 24
151.247.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Feb 2025 07:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ef:8c:ec:76:5b:db:54:45:63:5f:c4:91:6b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=531b7dc6d3683385263df5b7003db297de8fd60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:da:b4:12:0c:1a:11:85:0b:f2:3c:49:8a:
e1:19:9b:fd:76:4c:0b:2c:d4:37:1d:92:33:23:ff:
c7:2d:9b:be:db:d7:11:6e:70:d5:8e:dc:9f:bf:80:
df:67:70:c5:81:d0:70:37:f0:10:46:86:4c:d4:7d:
f3:4d:84:20:37:4b:e8:79:4c:e4:00:be:40:45:b7:
58:49:ee:cd:39:bb:3e:05:6a:a8:52:8b:e2:1a:06:
fa:46:1c:f9:32:52:f4:e8:5a:ad:40:d1:59:49:6d:
c5:17:08:25:e3:f1:22:e4:5b:0f:4c:77:80:16:13:
ff:81:08:23:35:33:7f:41:06:12:0b:92:0a:3f:a1:
bc:b3:15:ff:5b:42:13:58:bd:3e:51:03:99:e1:a9:
43:75:db:61:6b:59:bc:d0:fe:19:d0:55:6c:da:35:
8e:05:6d:f7:07:2b:5e:3a:da:e4:8e:1a:ee:bd:40:
71:b4:03:bc:c5:39:6f:a4:39:0b:c0:f9:92:db:b7:
7a:8f:56:9d:93:cd:80:a0:47:94:98:f6:94:b5:c9:
8a:87:1f:be:af:08:68:3d:e9:ae:bc:3e:c1:70:6b:
f9:06:3b:ae:62:3d:68:01:85:f9:fd:e9:ce:60:97:
2e:17:e2:86:14:1e:f7:3f:25:e8:f1:e3:a7:ad:9f:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1B:7D:C6:D3:68:33:85:26:3D:F5:B7:00:3D:B2:97:DE:8F:D6:0E
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Uxt9xtNoM4UmPfW3AD2yl96P1g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.184.0/22
151.247.193.0-151.247.195.255
Signature Algorithm: sha256WithRSAEncryption
46:98:d3:10:b5:84:63:db:b6:23:6c:4d:0d:f8:09:ca:2b:28:
0a:44:7f:b6:18:de:78:05:2d:07:a9:bd:02:99:f0:b8:f1:c3:
55:70:aa:88:be:e4:30:00:50:ed:f9:fe:78:14:04:fa:59:28:
c2:c1:aa:9c:80:e9:1f:8e:a4:29:55:b4:5e:11:12:fa:06:b5:
fb:02:2f:21:4b:ea:99:ff:d1:f1:ef:67:0f:83:14:c2:8c:eb:
ed:81:ec:bf:b1:b7:a7:e8:07:cc:11:3e:38:94:92:a4:dc:83:
f5:71:42:83:4b:5f:ea:49:ae:ca:18:4b:5d:7c:4b:3d:48:bd:
b9:67:20:b1:ea:c2:ef:77:88:66:62:a3:4e:2d:1c:e9:84:42:
8a:fd:8d:25:a3:ac:b2:cb:e9:69:55:c1:b9:2f:65:34:e4:4a:
1d:6a:74:c5:37:a3:09:9a:95:7e:85:94:61:73:9e:0f:85:36:
ed:ed:6f:79:f9:41:c6:cc:5c:90:a1:c2:65:07:d2:d4:43:48:
17:56:f2:e3:78:33:00:dd:f4:63:4c:3c:5e:c1:3f:20:b1:d2:
df:7a:0c:8f:81:f0:39:2e:14:1c:19:3c:e5:c6:a0:66:c0:0c:
3e:0b:08:8e:49:0b:41:72:37:92:f9:2f:f0:a1:2b:7f:96:99:
dc:77:52:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:04:39 2025 by rpki-client