Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-r_2sctUqbBl_P8BPYPLZswddpU.roa
File: 1-r_2sctUqbBl_P8BPYPLZswddpU.roa (raw, json)
Hash identifier: ai07X32y3MK4qnJYXatkICBtR1RTpAZA/VYPk16e03g=
Subject key identifier: FA:BF:F6:B1:CB:54:A9:B0:65:FC:FF:01:3D:83:CB:66:CC:1D:76:95
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01944C0368E5E1827FB84E70907D5FAD3B9A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-r_2sctUqbBl_P8BPYPLZswddpU.roa
Signing time: Thu 09 Jan 2025 17:01:19 +0000
ROA not before: Thu 09 Jan 2025 17:01:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153377
IP address blocks: 151.243.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Jan 2025 04:50:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4c:03:68:e5:e1:82:7f:b8:4e:70:90:7d:5f:ad:3b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 9 17:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fabff6b1cb54a9b065fcff013d83cb66cc1d7695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:ee:1b:e5:3a:fd:50:8e:2e:17:b4:3b:09:
0d:27:a6:25:61:f5:30:fe:89:62:46:b3:2b:16:cb:
04:0d:51:de:e2:91:87:27:93:7c:67:c5:55:c9:f6:
f1:7c:90:11:2a:c4:1e:c8:32:7b:89:b2:56:37:13:
99:83:01:f8:14:31:31:a5:41:d9:98:b9:c4:79:28:
ee:43:c2:87:49:60:52:fa:8b:c0:17:67:56:01:c3:
a5:c5:95:86:44:59:45:fe:b9:ae:a2:4a:39:5e:96:
47:97:1b:b7:26:dc:2b:5c:fd:bf:13:5d:30:5e:b7:
f2:da:f8:29:0a:1c:43:c8:28:0a:d0:54:b6:67:67:
df:46:ba:14:b1:4c:5b:27:33:39:4f:e4:bf:8a:39:
c3:f0:a9:67:3b:d8:74:15:b9:8b:6d:28:df:cc:2f:
b2:3d:64:4f:b5:52:ab:6c:37:f2:b8:c5:08:e2:74:
1b:16:29:42:9d:ff:b9:2f:64:2a:d5:3a:6a:1a:98:
20:b8:e0:0c:81:cb:8b:62:f6:a8:21:33:2b:54:fe:
f9:2e:34:5b:38:30:c8:1a:54:be:32:18:8a:85:c1:
92:98:82:79:61:fc:3f:06:46:a1:d5:9c:11:8b:4a:
3a:c2:34:d9:92:a6:cd:aa:af:a4:36:00:51:3a:d2:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BF:F6:B1:CB:54:A9:B0:65:FC:FF:01:3D:83:CB:66:CC:1D:76:95
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-r_2sctUqbBl_P8BPYPLZswddpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:91:5a:22:06:fb:b9:0c:8a:fa:4b:c7:94:46:0d:73:61:c2:
05:d7:98:70:e4:5e:6d:a9:01:49:f5:54:d9:42:ba:31:78:38:
f3:22:97:9c:1c:05:af:93:d1:2d:db:e0:65:22:d0:ac:b4:7a:
ca:25:7d:c7:e8:8a:b0:dd:bd:ac:47:fd:a4:c4:57:9b:29:60:
4d:16:d5:8b:34:cc:6c:e1:71:08:46:22:d9:f3:52:92:d0:f7:
84:58:3a:20:d6:f1:04:67:fc:7b:b8:38:6e:44:a6:ba:1f:c1:
21:cd:4e:d8:34:fd:27:01:5a:95:93:06:7e:45:75:03:92:0a:
02:13:05:9a:a9:a4:33:56:5a:1a:ae:bf:a7:e2:1c:a6:ba:7a:
72:c3:3e:45:4e:80:19:b0:da:f2:6e:40:4b:a0:e7:72:af:a6:
34:2b:90:5d:55:a6:58:9b:f2:be:12:0c:19:6d:13:2f:2d:57:
68:60:7a:37:ca:c2:20:e7:34:f5:3e:c9:d9:40:c2:13:8c:21:
6f:16:a1:4c:b2:6e:d8:a9:7d:3f:7c:a9:fb:85:44:67:bf:8f:
c7:89:29:c3:17:ac:c5:32:0a:da:68:90:6c:5d:19:d0:59:97:
8c:bf:d5:83:fd:4d:5a:3c:6e:d0:b8:65:bc:b8:6f:8d:ed:6b:
19:2c:0f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:17 2025 by rpki-client