Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MnDUQUQIBZ0Z1_vMC-F-3Rf6U8I.roa
File: MnDUQUQIBZ0Z1_vMC-F-3Rf6U8I.roa (raw, json)
Hash identifier: 4m42vZUywTngTI55ttc0jbCEqi3VjO1lMyeBpLOcLvU=
Subject key identifier: 32:70:D4:41:44:08:05:9D:19:D7:FB:CC:0B:E1:7E:DD:17:FA:53:C2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195653B7D5393F5A54484001D4C88E4D9E3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MnDUQUQIBZ0Z1_vMC-F-3Rf6U8I.roa
Signing time: Wed 05 Mar 2025 07:35:52 +0000
ROA not before: Wed 05 Mar 2025 07:35:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136501
IP address blocks: 151.242.255.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.3.0/24 maxlen: 24
151.243.10.0/24 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.37.0/24 maxlen: 24
151.243.38.0/24 maxlen: 24
151.243.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 18:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:3b:7d:53:93:f5:a5:44:84:00:1d:4c:88:e4:d9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 5 07:35:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3270d4414408059d19d7fbcc0be17edd17fa53c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:e0:d9:4c:0c:b4:37:b9:9d:05:ef:da:6f:
78:dc:66:b1:8e:e6:d5:a6:b5:48:52:dc:74:cd:ec:
78:40:5f:99:bc:3b:8a:33:f2:dd:28:89:07:f9:da:
ba:93:b3:2a:db:12:74:17:04:78:fe:cb:05:d3:70:
c4:d5:be:3d:66:ef:ad:af:44:24:53:08:55:f9:ac:
d2:73:05:c9:96:59:7f:e1:61:33:8b:f4:e2:da:c0:
29:84:fd:35:a9:5c:c7:07:6d:bf:b3:c4:7e:ca:02:
38:2f:da:9d:6c:31:b3:9d:2e:96:1e:89:7d:e6:ff:
7e:32:7f:52:7b:ae:de:88:89:d3:ee:99:3e:68:48:
9e:91:98:5e:77:60:a5:9a:78:cd:5e:bd:05:54:7c:
c6:e6:a6:8d:ce:17:d8:1e:17:22:76:9d:2f:18:0e:
9f:ca:e4:cb:f7:22:a9:59:20:8a:e2:bd:79:a3:80:
a9:f4:40:a6:a4:b4:d2:39:41:1d:4a:85:7a:20:c0:
78:bb:90:4c:99:bc:65:2e:2e:2c:72:37:ae:c7:cf:
71:3e:17:e3:08:ed:7f:41:c6:02:7b:12:03:27:14:
a7:13:5c:a1:33:91:17:ed:04:ea:de:3d:2e:9e:34:
7b:4f:92:d0:09:be:d4:58:91:2c:5f:3a:7a:9e:7d:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:70:D4:41:44:08:05:9D:19:D7:FB:CC:0B:E1:7E:DD:17:FA:53:C2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MnDUQUQIBZ0Z1_vMC-F-3Rf6U8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.255.0/24
151.243.2.0/23
151.243.10.0/24
151.243.35.0/24
151.243.37.0-151.243.39.255
Signature Algorithm: sha256WithRSAEncryption
04:fb:5a:a7:c5:eb:74:e1:a5:e4:bf:b6:22:27:3f:d4:64:05:
8d:ac:7c:d7:a0:d9:de:45:f4:4d:3f:35:f9:f4:0b:90:32:85:
20:a6:d0:ab:1e:fe:eb:66:2d:b0:0f:11:9f:4a:ad:4e:cf:6a:
f6:8a:64:5b:4f:ce:7a:2c:a5:b7:40:e7:d5:3c:52:5d:87:8d:
3f:ba:00:be:d1:6a:03:cc:22:1a:21:f9:26:16:40:fb:69:4d:
2f:45:40:21:27:78:ad:55:4a:27:a6:d0:bf:59:ad:7e:bd:88:
eb:da:19:e3:23:95:d6:6b:b3:58:35:df:f8:ea:eb:a3:e1:19:
13:1a:70:b1:19:49:de:90:f0:29:a3:d8:fa:48:5e:6f:c6:ed:
23:79:a6:a3:97:ae:36:aa:d5:b9:cf:c1:43:bf:e1:40:92:7d:
6e:3e:a0:f3:aa:76:2b:19:9a:f0:43:a2:aa:57:5d:56:37:bc:
a1:2a:de:70:2c:2f:df:27:88:83:fc:6e:de:dd:a3:37:15:12:
71:ec:b3:ca:50:10:e0:c6:55:0e:a5:c9:70:ed:c1:3f:b1:04:
8f:04:70:32:5e:e4:9b:18:31:61:bc:0e:93:75:6a:27:a7:d5:
06:9b:46:a1:2f:51:e4:98:e1:f8:61:6f:c9:9e:31:25:ab:6d:
38:0a:d9:2a
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZVlO31Tk/WlRIQAHUyI5NnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzA1MDczNTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjcwZDQ0MTQ0MDgwNTlkMTlkN2ZiY2MwYmUxN2VkZDE3ZmE1M2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SHg2UwMtDe5nQXv2m943GaxjubV
prVIUtx0zex4QF+ZvDuKM/LdKIkH+dq6k7Mq2xJ0FwR4/ssF03DE1b49Zu+tr0Qk
UwhV+azScwXJlll/4WEzi/Ti2sAphP01qVzHB22/s8R+ygI4L9qdbDGznS6WHol9
5v9+Mn9Se67eiInT7pk+aEiekZhed2ClmnjNXr0FVHzG5qaNzhfYHhcidp0vGA6f
yuTL9yKpWSCK4r15o4Cp9ECmpLTSOUEdSoV6IMB4u5BMmbxlLi4scjeux89xPhfj
CO1/QcYCexIDJxSnE1yhM5EX7QTq3j0unjR7T5LQCb7UWJEsXzp6nn31fwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFDJw1EFECAWdGdf7zAvhft0X+lPCMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvTW5EVVFVUUlCWjBaMV92TUMtRi0zUmY2VThJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAl/L/AwQB
l/MCAwQAl/MKAwQAl/MjMAwDBACX8yUDBAOX8yAwDQYJKoZIhvcNAQELBQADggEB
AAT7WqfF63ThpeS/tiInP9RkBY2sfNeg2d5F9E0/Nfn0C5AyhSCm0Kse/utmLbAP
EZ9KrU7PavaKZFtPznospbdA59U8Ul2HjT+6AL7RagPMIhoh+SYWQPtpTS9FQCEn
eK1VSiem0L9ZrX69iOvaGeMjldZrs1g13/jq66PhGRMacLEZSd6Q8Cmj2PpIXm/G
7SN5pqOXrjaq1bnPwUO/4UCSfW4+oPOqdisZmvBDoqpXXVY3vKEq3nAsL98niIP8
bt7dozcVEnHss8pQEODGVQ6lyXDtwT+xBI8EcDJe5JsYMWG8DpN1aien1QabRqEv
UeSY4fhhb8meMSWrbTgK2So=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:57:11 2025 by rpki-client