Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q0aBdkvFY2WfUtkSYij-UK_vOqA.roa
File: Q0aBdkvFY2WfUtkSYij-UK_vOqA.roa (raw, json)
Hash identifier: 6nNpVjL1+Wv1ghDWEgm7fg2cAHBYA/Sgf8eGN0pYcwE=
Subject key identifier: 43:46:81:76:4B:C5:63:65:9F:52:D9:12:62:28:FE:50:AF:EF:3A:A0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195BCAED7D81C22DF8BF44416F2F63D38C4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q0aBdkvFY2WfUtkSYij-UK_vOqA.roa
Signing time: Sat 22 Mar 2025 07:08:49 +0000
ROA not before: Sat 22 Mar 2025 07:08:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 151.242.36.0/24 maxlen: 24
151.243.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 09:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:bc:ae:d7:d8:1c:22:df:8b:f4:44:16:f2:f6:3d:38:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 22 07:08:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=434681764bc563659f52d9126228fe50afef3aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:9b:d7:a3:19:cb:96:3f:e1:a6:c5:21:e2:
31:f3:4c:87:2e:87:b5:35:38:29:3a:27:bb:2b:84:
c5:c2:21:4f:e4:10:c3:16:a9:f5:c3:d1:b4:3b:f7:
6c:4e:47:32:7c:47:04:88:2e:c6:4a:fd:13:cb:ab:
37:e3:4e:df:bf:dc:31:dc:dc:14:51:a2:33:f1:26:
cc:dd:48:e5:7a:da:a9:3d:bb:e2:e6:1e:53:6b:ea:
97:73:ee:d5:d6:6e:09:5b:7c:bf:e0:c0:c4:9e:72:
1a:56:8a:a1:31:62:6a:e4:1b:96:d7:9a:85:a7:7f:
83:4c:49:d4:ce:bd:02:b6:7c:45:18:6b:47:cc:ea:
12:26:23:48:5d:2d:eb:1a:94:be:f1:b9:68:0f:af:
b7:ef:1e:81:b9:ac:33:78:00:14:4c:8f:25:2c:36:
ff:e2:3b:a9:1f:d1:13:ea:31:1d:13:5a:ad:f9:25:
06:75:b5:96:ee:fb:03:00:75:b1:f2:f4:59:69:8e:
f0:02:6d:9b:b5:92:d7:01:6d:7f:f5:26:7e:46:59:
45:0f:74:87:a2:11:35:06:3a:98:88:88:ed:85:31:
dd:88:fa:80:de:ae:d7:da:cc:ac:d6:ad:4d:39:41:
4e:69:c1:ef:ed:ac:b3:ed:fd:9c:0b:2d:bd:9b:16:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:46:81:76:4B:C5:63:65:9F:52:D9:12:62:28:FE:50:AF:EF:3A:A0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q0aBdkvFY2WfUtkSYij-UK_vOqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.36.0/24
151.243.234.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:39:34:81:e6:db:0c:6c:40:3f:9f:75:c0:1c:45:cf:4d:80:
53:0f:7f:62:a0:2c:ed:22:e8:fc:66:54:c5:50:fc:fd:48:cf:
cb:ca:5e:e3:04:57:ea:75:30:ce:77:44:96:8b:b3:92:56:de:
63:5e:65:43:14:ee:c7:1c:81:1c:78:e2:48:02:4b:c3:a5:10:
75:a7:4e:f5:ce:8a:c7:aa:3c:68:d5:26:31:8c:a9:5d:2c:24:
9c:a7:e2:dc:e9:ec:91:98:74:4f:68:28:5d:5d:9b:e5:46:0f:
0e:9f:c0:19:28:49:c2:aa:76:32:3c:85:7a:3f:19:f5:f0:7c:
96:12:0d:64:0b:e6:38:ad:d4:30:87:22:e3:98:02:3e:be:fe:
61:27:96:8d:f8:55:34:c1:69:b3:4d:08:dd:45:7b:71:19:03:
fa:67:d9:3e:ba:f2:44:61:0b:6f:2f:4e:2d:ce:4f:6f:4a:67:
be:f7:d6:3c:c1:12:1b:1d:64:28:8f:06:82:3d:af:15:c6:f2:
77:47:1e:c8:41:dd:39:bf:f2:ef:43:7e:d5:2e:27:39:a5:da:
31:3e:98:05:a3:38:d0:44:6e:ef:4c:b1:63:0f:80:30:d9:bf:
b5:9b:52:79:66:dc:85:9f:c8:b3:4c:c4:86:7b:7f:fb:66:d3:
60:4b:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 11:39:56 2025 by rpki-client