Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5VD576JIWgQ6cXITnIt7E5fRyQ4.roa
File: 5VD576JIWgQ6cXITnIt7E5fRyQ4.roa (raw, json)
Hash identifier: R2pR6+xOsA6Ezx1Iyl1gtOiQ74keNkm00XhtjSYt1os=
Subject key identifier: E5:50:F9:EF:A2:48:5A:04:3A:71:72:13:9C:8B:7B:13:97:D1:C9:0E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194283C79B9D3814A1198C830C95C274932
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5VD576JIWgQ6cXITnIt7E5fRyQ4.roa
Signing time: Thu 02 Jan 2025 18:17:19 +0000
ROA not before: Thu 02 Jan 2025 18:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3356
IP address blocks: 151.243.113.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.116.0/24 maxlen: 24
151.243.117.0/24 maxlen: 24
151.243.119.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.121.0/24 maxlen: 24
151.243.122.0/24 maxlen: 24
151.243.123.0/24 maxlen: 24
151.243.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 17:54:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:3c:79:b9:d3:81:4a:11:98:c8:30:c9:5c:27:49:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 18:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e550f9efa2485a043a7172139c8b7b1397d1c90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:24:bb:d0:48:8c:58:3e:de:d8:f6:3e:07:e8:
ea:34:f0:cf:a5:c8:88:4c:58:f4:01:13:54:ea:e7:
4a:cc:9d:8f:7c:5c:20:e6:d7:88:5c:87:1f:00:67:
42:e8:c1:07:44:3e:20:43:01:0f:8c:a7:0f:fa:9b:
ed:3b:29:4d:79:02:2d:03:6e:44:08:22:8f:8a:23:
85:cf:e4:13:b9:94:4b:f2:a5:8b:83:72:8f:3b:b7:
e1:bc:9a:5a:57:c8:5c:b4:a2:14:09:51:b5:06:38:
a2:b8:ff:09:b2:4b:72:9e:03:21:95:c9:92:1b:38:
29:64:5d:f5:fe:36:a1:ee:74:de:54:2a:9f:02:4b:
82:bd:02:45:74:6a:b6:23:e2:0a:87:b1:c6:93:c1:
88:53:d7:62:59:ff:4e:85:a7:84:b2:fd:d6:0b:a5:
71:eb:0a:f8:40:92:6c:2e:c5:d1:ee:e6:e6:89:89:
8e:de:98:95:b4:87:7f:8c:53:d7:f7:c8:f5:87:c3:
d3:78:5d:35:00:c1:be:2a:91:fc:ed:39:b7:5e:3b:
5b:73:9e:06:df:07:61:17:97:7e:c2:48:84:96:25:
6e:67:bc:45:88:06:01:c8:a1:b5:a0:fb:a7:83:2c:
a6:50:4a:02:12:f5:fb:48:31:11:19:d3:9b:4b:aa:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:50:F9:EF:A2:48:5A:04:3A:71:72:13:9C:8B:7B:13:97:D1:C9:0E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5VD576JIWgQ6cXITnIt7E5fRyQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.113.0/24
151.243.115.0-151.243.117.255
151.243.119.0-151.243.124.255
Signature Algorithm: sha256WithRSAEncryption
47:59:be:a7:d1:ea:dd:ce:ec:d3:6f:cb:6e:7e:5c:40:8b:07:
61:c1:ce:96:0a:5f:3f:d2:91:42:0c:19:a2:15:ca:6c:22:21:
8d:8e:d7:f7:d8:b1:39:10:df:d7:e6:87:a6:8a:b6:03:fb:dd:
b9:14:a6:ba:65:38:6c:54:6e:aa:7c:6a:80:59:4e:2a:7c:8c:
ef:31:fa:54:b6:b5:25:5e:80:3b:3a:a5:e5:17:7e:cf:cc:5a:
86:11:2e:fc:9d:d9:4f:3e:a5:27:aa:7f:80:22:fe:cd:b7:1e:
1e:35:4a:75:02:91:99:cc:7f:ac:15:13:fe:62:ae:63:a1:f9:
07:20:a1:84:2d:b3:9e:94:c3:f4:8e:60:8f:5d:f5:78:aa:88:
f7:4c:23:ee:5a:b5:0a:ea:fc:de:e3:da:aa:cf:c5:d0:3b:91:
3c:18:5b:2e:2e:37:80:77:0c:fd:a1:a4:db:05:07:74:87:42:
18:d7:af:e1:ec:93:3b:b5:f9:94:9e:f3:93:1a:5d:bd:56:20:
75:32:76:64:8a:3c:16:9e:4c:16:06:f0:c0:3d:29:a7:5d:3e:
38:68:4b:31:3b:3c:49:df:77:f1:35:38:29:f1:3a:de:5e:8d:
81:2e:fe:80:03:c7:f1:ae:1d:75:98:0c:6e:ff:b4:5f:84:27:
6d:9b:c0:a5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQoPHm504FKEZjIMMlcJ0kyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTAyMTgxNzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTUwZjllZmEyNDg1YTA0M2E3MTcyMTM5YzhiN2IxMzk3ZDFjOTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yS70EiMWD7e2PY+B+jqNPDPpciI
TFj0ARNU6udKzJ2PfFwg5teIXIcfAGdC6MEHRD4gQwEPjKcP+pvtOylNeQItA25E
CCKPiiOFz+QTuZRL8qWLg3KPO7fhvJpaV8hctKIUCVG1BjiiuP8JsktyngMhlcmS
GzgpZF31/jah7nTeVCqfAkuCvQJFdGq2I+IKh7HGk8GIU9diWf9OhaeEsv3WC6Vx
6wr4QJJsLsXR7ubmiYmO3piVtId/jFPX98j1h8PTeF01AMG+KpH87Tm3Xjtbc54G
3wdhF5d+wkiEliVuZ7xFiAYByKG1oPungyymUEoCEvX7SDERGdObS6qGSwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOVQ+e+iSFoEOnFyE5yLexOX0ckOMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvNVZENTc2SklXZ1E2Y1hJVG5JdDdFNWZSeVE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAl/NxMAwD
BACX83MDBAGX83QwDAMEAJfzdwMEAJfzfDANBgkqhkiG9w0BAQsFAAOCAQEAR1m+
p9Hq3c7s02/Lbn5cQIsHYcHOlgpfP9KRQgwZohXKbCIhjY7X99ixORDf1+aHpoq2
A/vduRSmumU4bFRuqnxqgFlOKnyM7zH6VLa1JV6AOzql5Rd+z8xahhEu/J3ZTz6l
J6p/gCL+zbceHjVKdQKRmcx/rBUT/mKuY6H5ByChhC2znpTD9I5gj131eKqI90wj
7lq1Cur83uPaqs/F0DuRPBhbLi43gHcM/aGk2wUHdIdCGNev4eyTO7X5lJ7zkxpd
vVYgdTJ2ZIo8Fp5MFgbwwD0pp10+OGhLMTs8Sd938TU4KfE63l6NgS7+gAPH8a4d
dZgMbv+0X4QnbZvApQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 06:51:17 2025 by rpki-client