Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HdquGcyRGzlkOaNZ9cRx6Pp-zQ4.roa
File: HdquGcyRGzlkOaNZ9cRx6Pp-zQ4.roa (raw, json)
Hash identifier: CKjM5CwPa4p8ZY8kzjjiGmhvAOPfzx/8/KjeDxs35IE=
Subject key identifier: 1D:DA:AE:19:CC:91:1B:39:64:39:A3:59:F5:C4:71:E8:FA:7E:CD:0E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194D49ADDB990AECD2C15F6F9E07A42BABB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HdquGcyRGzlkOaNZ9cRx6Pp-zQ4.roa
Signing time: Wed 05 Feb 2025 05:35:06 +0000
ROA not before: Wed 05 Feb 2025 05:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 151.240.105.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.242.34.0/24 maxlen: 24
151.242.44.0/24 maxlen: 24
151.242.56.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.243.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Feb 2025 07:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d4:9a:dd:b9:90:ae:cd:2c:15:f6:f9:e0:7a:42:ba:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 5 05:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ddaae19cc911b396439a359f5c471e8fa7ecd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:a2:0a:07:04:6f:12:d0:bb:c6:3b:07:60:
77:60:72:c3:7d:8d:09:bc:bb:e3:9f:f6:2d:f8:eb:
a6:da:1f:ef:33:a6:03:ac:a4:14:9a:f4:e8:55:1f:
0c:18:3d:97:90:c8:38:39:f4:ba:6e:3b:5f:a4:69:
9a:6a:52:43:e4:60:77:26:b5:34:3e:a9:5a:7b:1c:
b9:48:73:a0:4d:55:4d:cd:56:1c:04:54:2e:8d:bf:
02:db:4d:13:98:39:f7:67:a4:94:ff:8f:f4:62:15:
2e:d3:1c:57:38:c7:3a:33:01:9c:52:3d:51:db:f9:
d8:19:ab:3e:7b:d1:f6:46:5c:ad:b5:e4:32:10:e1:
f2:27:ce:68:77:7c:d8:4f:bd:1f:02:3e:51:24:b4:
7b:45:f1:b2:5e:55:29:e0:ce:a2:8c:5e:d4:ad:86:
59:21:bb:98:bd:be:56:28:e8:c6:5d:08:5d:b2:96:
7e:1e:9f:43:47:b7:16:c1:5c:68:71:e5:98:79:64:
6c:d8:41:71:61:82:30:78:c1:16:df:79:8d:30:d2:
c5:e7:32:04:84:0e:ac:4d:21:50:a7:ee:b3:0a:83:
9e:c0:2a:7f:88:04:21:59:87:60:8a:5a:7f:9b:f1:
88:1f:32:20:b9:59:55:6c:03:63:82:57:4d:ec:58:
1a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DA:AE:19:CC:91:1B:39:64:39:A3:59:F5:C4:71:E8:FA:7E:CD:0E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HdquGcyRGzlkOaNZ9cRx6Pp-zQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.105.0/24
151.240.140.0/24
151.241.110.0/24
151.242.34.0/24
151.242.44.0/24
151.242.56.0/24
151.242.64.0/24
151.243.234.0/24
Signature Algorithm: sha256WithRSAEncryption
12:72:5d:cc:f0:8c:94:2f:9f:f9:40:bf:1b:d3:88:cb:74:a0:
54:50:58:94:74:be:2a:6f:e7:c2:7c:37:7c:88:a6:12:62:c9:
81:b4:12:01:da:78:1a:77:24:4d:d7:23:0c:8c:73:21:56:8a:
f7:08:c3:69:a9:4d:ae:a6:fd:6e:2e:75:2e:01:28:9a:de:08:
05:19:37:34:53:21:90:93:f2:a6:28:fc:4f:73:11:d9:e1:73:
94:a2:c4:1d:4e:6d:ea:e1:f0:13:07:41:26:02:47:26:71:3e:
d6:89:7d:18:2f:ff:21:40:f0:be:f1:02:26:c4:7e:60:db:be:
71:e6:1f:2a:01:66:d2:6b:d1:ed:ae:23:48:cb:da:44:60:2e:
65:d9:0a:2c:bc:ff:6b:32:02:72:ca:bb:e7:da:ec:e0:28:38:
6d:e2:46:3d:54:f3:31:25:92:29:1a:69:d6:ca:1d:ba:ff:ca:
a5:28:73:a4:dd:e5:92:03:f6:dd:ef:f9:f1:3c:23:f7:b7:51:
5e:ff:bb:ed:60:32:26:68:15:56:e7:18:ff:9e:8c:ce:01:db:
ae:19:d4:b8:92:44:8f:d3:97:6c:1c:43:6d:7e:c3:60:44:bd:
db:bd:b7:f9:b4:e9:7d:84:b1:b0:02:8a:c7:3b:4f:d6:f9:e4:
51:62:96:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:03:40 2025 by rpki-client