Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A4hL225T0IszuIEa5Oy91rNKJVY.roa
File: A4hL225T0IszuIEa5Oy91rNKJVY.roa (raw, json)
Hash identifier: sv+VswLuGt1pd5yfpI+TsBk/bCIMn/Ra6SceJK6IVZU=
Subject key identifier: 03:88:4B:DB:6E:53:D0:8B:33:B8:81:1A:E4:EC:BD:D6:B3:4A:25:56
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01958FD44D20730B6AC4839CD38574347025
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A4hL225T0IszuIEa5Oy91rNKJVY.roa
Signing time: Thu 13 Mar 2025 14:06:49 +0000
ROA not before: Thu 13 Mar 2025 14:06:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.44.0/24 maxlen: 24
151.242.56.0/24 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.236.0/22 maxlen: 24
151.243.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Mar 2025 07:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:d4:4d:20:73:0b:6a:c4:83:9c:d3:85:74:34:70:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 13 14:06:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03884bdb6e53d08b33b8811ae4ecbdd6b34a2556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:de:92:69:74:ff:bb:38:6b:13:35:46:71:
cd:7d:f1:de:58:23:38:56:e1:b5:4a:29:7f:1e:93:
98:30:52:60:8a:04:d5:64:65:47:04:3b:4c:87:49:
d4:db:39:ee:f5:47:3f:86:21:68:f9:31:fe:16:32:
92:c4:ae:6d:bf:26:57:20:6e:96:25:4d:5c:3d:21:
43:15:36:dd:f9:d2:4e:8b:76:d2:fc:c9:25:0c:2f:
38:5e:5c:3e:e1:1c:82:3f:cf:e6:79:9f:28:09:44:
c4:cd:38:3c:58:26:a0:c0:59:1f:49:5b:cd:53:fb:
50:6f:6c:d0:49:a2:37:98:26:3b:3d:80:82:26:17:
61:e4:2c:cb:e6:fe:73:45:30:81:c0:7a:eb:9c:10:
bc:6a:ac:0a:73:39:e7:0a:a5:78:fc:24:80:0a:8b:
1b:83:1c:76:c3:ee:f3:33:cf:29:b8:75:37:19:53:
a0:c8:20:7a:ff:06:dc:3d:ba:be:a8:e6:a5:8c:de:
23:3a:94:25:2c:7b:dc:0b:35:5e:81:1b:13:13:14:
5a:cd:c7:56:df:cf:8f:88:c3:97:61:20:72:37:17:
6d:92:5e:86:e1:58:1e:28:fc:54:a0:ab:ce:6b:38:
fc:ee:07:b0:59:5f:d0:0c:4d:89:e2:90:dd:79:f0:
6e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:88:4B:DB:6E:53:D0:8B:33:B8:81:1A:E4:EC:BD:D6:B3:4A:25:56
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A4hL225T0IszuIEa5Oy91rNKJVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.44.0/24
151.242.56.0/24
151.242.224.0/22
151.242.236.0/22
151.243.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:bb:35:4a:bd:22:08:31:91:41:cb:21:d2:1e:10:8b:a8:5a:
7f:67:cc:eb:80:36:24:70:d2:12:09:fc:fa:97:bf:ee:a0:40:
5b:bf:60:9b:7d:49:87:b6:37:17:ce:39:0f:32:78:1e:8f:91:
4c:d9:f3:10:1c:dd:46:b7:a5:6a:56:20:0a:3a:c6:94:0a:55:
6a:12:a2:a9:d8:cf:dd:c0:19:5d:a6:fa:89:da:f2:83:75:10:
d0:99:e5:41:2f:bf:f2:ce:e6:e0:1c:5b:66:d7:ef:f1:1b:36:
36:44:35:77:5a:52:ea:68:bf:c8:9f:26:60:3b:ed:54:60:81:
0f:41:47:65:4d:93:12:56:d3:b9:9b:f8:bb:4a:31:da:bf:57:
ec:58:3f:a4:eb:ed:8a:df:b4:78:82:b4:dc:b5:75:83:7b:25:
1b:e4:2a:96:59:46:a6:a1:a0:06:8f:c2:11:b1:3f:06:6e:28:
8b:7b:23:ed:71:35:fe:f0:04:86:42:3f:19:13:19:b6:14:b0:
92:f1:dd:ef:e2:ab:41:ea:c6:5a:bf:68:2b:44:77:77:8a:ac:
3a:e0:ce:81:a0:39:d6:b6:64:7f:70:a0:a3:7d:2a:93:2e:7e:
52:1b:4f:ad:dc:09:1b:9d:51:32:a6:5c:26:f4:ae:7d:58:17:
4d:0b:a0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:22:22 2025 by rpki-client