Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Dl-gyxHMmji4CyPLnNeRABazlcs.roa
File: Dl-gyxHMmji4CyPLnNeRABazlcs.roa (raw, json)
Hash identifier: 0cFULYSj83BrHEm1tGqdmBiJtyymwIGlehPnz/5oMbs=
Subject key identifier: 0E:5F:A0:CB:11:CC:9A:38:B8:0B:23:CB:9C:D7:91:00:16:B3:95:CB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01948DB39FAE66BB427D73674AFA6FC64671
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Dl-gyxHMmji4CyPLnNeRABazlcs.roa
Signing time: Wed 22 Jan 2025 11:09:06 +0000
ROA not before: Wed 22 Jan 2025 11:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8100
IP address blocks: 151.242.52.0/22 maxlen: 24
151.243.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 15:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:b3:9f:ae:66:bb:42:7d:73:67:4a:fa:6f:c6:46:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 22 11:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e5fa0cb11cc9a38b80b23cb9cd7910016b395cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:36:d0:e9:00:16:08:fd:f4:3d:73:38:6d:39:
dc:62:0f:b7:89:73:19:4f:bc:ff:4c:03:aa:58:45:
ad:f8:bb:85:7e:48:c7:dd:c7:c0:24:d0:2a:11:df:
fb:56:05:58:f4:af:a2:bf:70:81:b6:f2:19:15:6d:
83:61:7d:05:29:1e:31:48:d5:8b:db:cf:8e:56:a2:
ea:27:44:5c:2f:af:a2:b3:cc:2c:64:41:1c:c5:3a:
71:9a:8a:98:24:67:ab:50:2c:6f:49:73:58:14:f9:
11:20:be:72:61:34:9d:4f:56:6b:0d:62:64:3c:53:
b0:4e:1a:c5:71:a4:38:7c:49:c8:cb:ab:d5:34:6e:
80:92:fd:4a:8c:c5:34:53:f2:39:62:bf:7d:e6:f1:
a8:ef:45:50:8f:5e:d0:26:42:83:31:46:f9:fa:c7:
11:c4:84:3f:5e:cc:1b:80:42:51:39:3e:18:52:c0:
2e:5a:fd:0f:a6:a1:7d:d3:32:b5:e8:89:8c:7b:67:
34:f9:79:eb:6d:65:40:ab:da:02:0e:09:d9:37:35:
f1:cd:bd:46:67:39:54:eb:12:a1:08:69:92:8a:01:
35:3a:41:f2:74:f3:21:9b:08:42:47:27:66:d5:ab:
14:64:fa:20:eb:c1:ac:99:db:e5:e4:8f:15:92:65:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5F:A0:CB:11:CC:9A:38:B8:0B:23:CB:9C:D7:91:00:16:B3:95:CB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Dl-gyxHMmji4CyPLnNeRABazlcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.52.0/22
151.243.100.0/22
Signature Algorithm: sha256WithRSAEncryption
72:2c:89:3a:e6:f3:5a:b5:7d:2e:54:43:18:3d:6e:08:cf:8e:
14:59:f9:be:e3:18:d1:43:7e:54:cd:3c:36:d8:11:c5:76:e1:
d9:ac:93:64:0b:bd:b0:9f:28:9b:35:de:4c:ae:ba:24:a4:b7:
df:9f:b7:6d:5e:5a:ab:47:b3:a2:43:46:86:06:a9:f6:d4:cb:
a3:7d:ad:42:7d:e3:dc:20:0c:c1:5b:21:44:af:ff:58:ba:8b:
96:41:f9:a9:e1:2b:6e:9c:a8:10:2e:20:5e:5d:e4:80:fc:97:
ac:6a:fe:62:40:40:f5:17:ee:8c:dc:c2:7d:bc:52:99:da:da:
13:2a:98:b3:01:84:1e:34:4f:a9:72:be:a7:79:23:f7:87:a9:
52:6d:73:da:e2:1a:ed:0d:c3:cb:68:72:aa:11:80:4a:1b:1c:
e5:da:5d:ec:f5:d9:11:e6:9d:3a:6c:61:26:06:4a:5d:09:ba:
96:26:cf:ef:16:59:26:06:8e:f8:8b:af:f3:b6:42:56:2e:5d:
67:a5:0b:08:a1:46:88:a4:93:4d:f3:ae:7c:26:1d:d4:ff:86:
72:3e:1e:7e:e8:93:d7:68:94:ef:d4:db:87:78:d3:00:83:0f:
b5:8e:b8:1d:47:c8:9e:62:24:e5:df:ed:1e:b8:31:21:a8:f5:
7d:5b:cf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:10:36 2025 by rpki-client