Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1mn3CPRNrtre4F3d5juAjInnMsk.roa
File: 1mn3CPRNrtre4F3d5juAjInnMsk.roa (raw, json)
Hash identifier: KJs+tCZpw+ZqL1JfLXdXCZHKV5dSI4C53Dve0dvVM88=
Subject key identifier: D6:69:F7:08:F4:4D:AE:DA:DE:E0:5D:DD:E6:3B:80:8C:89:E7:32:C9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194D56F44E742A725A1A18E0FC8618ADBE9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1mn3CPRNrtre4F3d5juAjInnMsk.roa
Signing time: Wed 05 Feb 2025 09:27:06 +0000
ROA not before: Wed 05 Feb 2025 09:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.243.105.0/24 maxlen: 24
151.243.184.0/22 maxlen: 22
151.243.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 19 Feb 2025 13:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:6f:44:e7:42:a7:25:a1:a1:8e:0f:c8:61:8a:db:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 5 09:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d669f708f44daedadee05ddde63b808c89e732c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:43:ce:61:ab:65:9a:b4:29:c8:0b:0c:b4:e6:
dc:74:1b:b0:77:e8:2a:30:6f:c1:2f:3b:24:2e:4a:
a8:ab:a6:07:ea:45:72:24:f0:98:37:f7:7a:a9:59:
3e:9c:93:0b:9c:5a:b0:e3:4c:49:d5:38:ca:8e:05:
fc:37:db:6a:a5:1e:23:06:e5:2b:93:b5:4c:1c:f1:
01:5c:00:cf:8b:7a:8e:4d:c2:c6:14:ee:b2:b3:d6:
9a:92:b1:dd:5c:20:70:bc:90:a8:1c:b3:44:76:1b:
77:e0:f8:b3:26:46:9b:38:49:3c:c2:68:04:d2:22:
18:1a:90:38:b9:c6:19:42:bf:5b:ba:c7:0e:36:90:
b1:76:72:c4:60:9d:fc:3e:a6:0d:a4:85:4c:f4:6a:
2b:80:66:92:6f:ae:05:1f:33:ef:bb:c7:f0:dd:9e:
a1:0f:74:1d:98:d9:99:86:ae:65:9b:75:90:75:24:
bc:77:65:2e:ab:4c:20:75:aa:67:a6:6b:c3:07:87:
77:e1:f9:dc:14:84:ac:d2:08:bb:91:43:fe:7f:f4:
7f:c9:a3:7b:10:94:38:2d:8a:01:cf:9d:38:e0:c6:
f4:e4:ad:54:dc:09:1f:dc:88:09:5a:31:de:5f:6a:
18:15:b7:6d:1b:23:14:2e:1e:fd:2f:75:5d:02:99:
1c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:69:F7:08:F4:4D:AE:DA:DE:E0:5D:DD:E6:3B:80:8C:89:E7:32:C9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1mn3CPRNrtre4F3d5juAjInnMsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.105.0/24
151.243.184.0/22
151.243.204.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:1b:01:d7:43:6d:ec:33:d3:7b:37:3c:bc:34:f1:ce:e0:16:
5b:cd:6f:25:c9:08:2f:e0:1c:18:7b:1d:d0:16:10:dd:01:73:
57:c9:69:02:8f:9a:c5:9e:e6:25:4c:8d:dd:7e:b9:aa:8a:89:
7d:a1:50:7c:e6:02:53:f8:0a:e7:8f:da:49:e9:77:c5:88:b4:
2b:0b:4f:c9:88:da:9a:dc:72:c5:18:0d:54:d4:60:8a:c3:16:
8e:cf:84:de:7c:73:74:4b:6d:d0:9b:5d:ca:a1:81:96:f5:58:
99:ca:50:40:e3:ac:40:e8:b3:bb:3e:ef:70:cc:48:b7:e5:85:
07:a2:34:c1:dd:a0:2f:3b:b9:f5:4e:0d:fa:06:bc:e7:a1:81:
07:7f:86:66:02:b4:7d:b3:44:4e:98:20:ea:c1:e9:62:30:5d:
98:9f:28:ef:21:c0:fa:d7:61:1d:eb:24:da:cf:cd:40:02:38:
85:82:ee:92:96:dc:5a:6c:48:0b:1a:f9:5e:8b:e3:f3:f1:db:
6d:9a:9b:20:5b:ad:6d:28:91:50:35:72:14:b8:0e:37:5f:97:
3f:ae:8d:af:2b:e2:99:1f:7b:38:1d:be:1c:e0:61:ff:e9:8e:
62:82:4f:34:71:90:09:bf:0f:06:8d:a2:f9:b3:68:cb:3a:6a:
f8:e4:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:30:46 2025 by rpki-client