Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6bSHWMry5QI61rb4I1URfuZ9Leg.roa
File: 6bSHWMry5QI61rb4I1URfuZ9Leg.roa (raw, json)
Hash identifier: KiGULYPFH8m+JpN2YKV0p/uVTebYA+r/1Hul2Jg3esQ=
Subject key identifier: E9:B4:87:58:CA:F2:E5:02:3A:D6:B6:F8:23:55:11:7E:E6:7D:2D:E8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019444BC4DF594D5A783EC5123B0B6047E3B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6bSHWMry5QI61rb4I1URfuZ9Leg.roa
Signing time: Wed 08 Jan 2025 07:06:18 +0000
ROA not before: Wed 08 Jan 2025 07:06:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6097
IP address blocks: 151.243.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Jan 2025 17:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:44:bc:4d:f5:94:d5:a7:83:ec:51:23:b0:b6:04:7e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 8 07:06:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e9b48758caf2e5023ad6b6f82355117ee67d2de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8d:d4:15:55:a2:0a:71:44:80:54:93:50:c0:
b6:1a:d5:fb:f0:19:89:33:27:78:53:02:0f:9a:5c:
69:76:39:28:c1:03:37:80:29:fc:47:a6:38:11:da:
62:29:20:d2:ac:a2:82:17:78:9e:b2:ee:61:1c:fb:
f4:e2:3c:0c:1d:e6:ce:42:01:b8:26:74:5b:a5:78:
ea:3c:ce:e4:2e:af:ae:f0:2a:81:27:83:be:6d:0c:
60:d3:ad:9c:51:07:cd:06:19:53:b1:b9:7b:4d:a7:
ba:f2:eb:3c:ab:4a:2f:94:15:26:92:b8:9b:64:30:
3f:89:05:37:01:a2:37:b5:40:57:0d:13:d5:09:4f:
29:37:80:f2:ee:e8:47:62:68:65:dc:6e:d4:35:64:
98:c2:d8:36:a9:31:9b:90:7f:1b:ec:47:05:30:3a:
c7:b0:f1:0d:23:7a:35:f4:8e:54:c5:68:14:71:58:
0a:87:0b:6d:92:a1:62:69:37:0a:6c:f8:63:d4:95:
41:78:69:e8:d5:e8:d1:3c:fb:22:5e:4f:9f:c9:df:
a4:d0:34:a5:5a:8b:75:70:6f:a7:08:49:e3:d1:d2:
2b:4c:56:a0:e4:46:10:cc:51:19:bd:e2:cf:19:01:
c3:d3:06:5b:2d:ec:a7:0f:e6:20:f6:79:28:55:0d:
6c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B4:87:58:CA:F2:E5:02:3A:D6:B6:F8:23:55:11:7E:E6:7D:2D:E8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6bSHWMry5QI61rb4I1URfuZ9Leg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.106.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3a:5a:4e:17:d2:6e:b2:2c:ec:74:9a:88:cb:0f:08:74:ce:
ae:ae:fa:0f:aa:b8:ec:10:9b:b0:d2:40:ad:a7:18:86:41:67:
f5:e8:7b:82:4c:d0:df:61:fb:da:8a:5d:1f:32:3c:3c:34:e7:
76:d7:97:da:5f:46:0a:9b:95:60:6f:cc:7b:09:e6:98:37:02:
d8:a7:ca:ea:62:81:31:f8:2b:c9:d4:c4:46:ca:2c:fb:9e:04:
e0:34:fe:19:97:ac:a0:f7:35:d7:87:8f:47:ba:14:04:cb:f5:
10:41:c7:d3:00:8a:9f:13:41:25:e8:b7:db:c5:2f:fe:95:7e:
47:dc:78:77:0f:a8:93:0a:1d:62:f4:33:61:4b:ee:2a:4c:f7:
f7:e3:84:4a:f2:55:11:67:fc:93:f6:40:ff:f9:44:f7:8b:26:
c7:e6:57:05:b4:68:13:f4:6d:1e:da:f3:7b:e3:ea:f2:9e:43:
4c:bf:f3:14:5c:10:5a:79:87:cf:11:72:1d:03:b8:5f:16:5d:
f2:e4:45:e5:87:bb:a3:80:5d:22:2d:6e:2a:60:b2:53:02:38:
02:2b:80:c5:98:5b:1e:07:2a:e5:8f:6e:3f:2d:35:4d:49:9b:
91:35:81:c3:fe:36:b6:c7:3e:76:6e:56:91:d1:07:f7:a0:d4:
96:a8:71:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:34:25 2025 by rpki-client