Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8KDlKLm8N4Q2yEolZDxYZXNTM5A.roa
File: 8KDlKLm8N4Q2yEolZDxYZXNTM5A.roa (raw, json)
Hash identifier: aTaBgLIHvcZp6/1KV4GHO4OrVqRFqJ8g+a0qQGWV3eo=
Subject key identifier: F0:A0:E5:28:B9:BC:37:84:36:C8:4A:25:64:3C:58:65:73:53:33:90
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194DF17312F97165D3C44A979198F203DA1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8KDlKLm8N4Q2yEolZDxYZXNTM5A.roa
Signing time: Fri 07 Feb 2025 06:27:06 +0000
ROA not before: Fri 07 Feb 2025 06:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 151.243.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 04:16:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:17:31:2f:97:16:5d:3c:44:a9:79:19:8f:20:3d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 7 06:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0a0e528b9bc378436c84a25643c586573533390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:04:14:5b:44:e7:1b:c2:8b:d0:6a:12:06:4c:
41:6b:ce:ba:ad:c7:e7:a9:58:02:db:3f:19:da:2b:
da:42:1c:0e:d7:6f:ed:29:1d:4d:4d:cc:c1:52:1c:
67:de:f2:cb:ee:bf:91:fc:6d:7c:15:a9:8d:42:43:
41:ee:a0:39:5b:10:38:8f:37:92:d9:c9:a5:64:7c:
60:ae:52:2b:6b:a5:44:ce:24:0f:99:68:83:15:03:
a9:76:23:38:2f:21:8f:ca:2d:25:83:3e:8f:91:93:
ba:9c:f2:74:5d:e6:6c:86:06:8c:69:45:1d:e7:86:
e9:72:bd:10:b6:10:8d:81:07:a5:91:1d:ca:49:74:
19:7a:9f:69:2c:28:8e:e7:0c:e5:5b:df:2b:c0:ae:
34:a4:14:61:48:69:d1:3e:e5:a6:83:ec:7c:49:dc:
5b:7c:e4:16:8f:28:1c:cb:1f:20:2e:d9:d9:1b:c7:
85:61:7a:fe:b8:39:2d:71:a2:44:9a:1d:2b:9d:24:
d6:b7:7d:7a:cf:f2:ea:5c:79:8b:c7:e4:78:43:f4:
26:0c:23:61:9f:64:74:30:50:c7:2f:01:b6:cc:f4:
87:78:71:08:07:cf:08:f7:0f:fe:32:6c:75:51:57:
63:fc:fe:45:a0:95:b9:8a:0f:42:8c:7e:3c:e4:39:
dd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A0:E5:28:B9:BC:37:84:36:C8:4A:25:64:3C:58:65:73:53:33:90
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8KDlKLm8N4Q2yEolZDxYZXNTM5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.158.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ca:19:65:a2:92:42:9a:bd:04:1a:30:27:98:e1:be:1f:4f:
70:40:ce:c2:e6:26:10:4d:44:58:48:a5:f4:aa:5a:31:26:b2:
76:3a:1f:ed:47:34:73:cd:38:e1:29:71:92:ba:09:a9:22:33:
22:0c:3c:ae:e6:8d:21:1a:1c:b0:30:f8:cb:41:86:51:53:80:
5c:15:08:f4:ca:7b:4e:54:2e:9a:aa:4f:51:71:1f:f1:3a:5c:
c3:26:08:ce:f6:12:73:a4:71:19:d2:fa:0d:15:02:7c:5d:5a:
a1:f4:af:91:6e:30:67:82:0e:8e:c7:ab:1e:9c:64:c4:24:3b:
70:90:01:45:e3:5f:a8:aa:d2:85:65:bf:46:47:83:d1:36:17:
01:f4:dd:30:dc:82:4e:8e:e6:e3:c5:51:30:df:66:27:4b:15:
d2:cf:a0:6c:0f:96:09:00:58:65:b6:ef:bb:ff:de:8a:59:3a:
ec:b5:e8:e7:ba:c9:4b:29:dc:31:28:c6:93:f4:d8:1e:b0:18:
cb:41:19:6d:5e:c2:ef:f6:03:ad:23:53:a3:af:fa:db:67:14:
42:d7:64:7f:a2:35:bd:a8:af:02:c9:0c:3e:20:d0:b9:7e:ad:
04:33:9d:ce:bb:20:da:15:0d:41:87:8c:fd:d3:fe:f1:52:37:
3b:32:f0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:18 2025 by rpki-client