Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y8pCbmfacV03mEXLWH7FZBdAib8.roa
File: Y8pCbmfacV03mEXLWH7FZBdAib8.roa (raw, json)
Hash identifier: 7mGzpq8epyjWcp/8DIuA4942zQBMXRS4Ysr/sOo7VZw=
Subject key identifier: 63:CA:42:6E:67:DA:71:5D:37:98:45:CB:58:7E:C5:64:17:40:89:BF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019402D14ED25B5621F748165393DA1D555E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y8pCbmfacV03mEXLWH7FZBdAib8.roa
Signing time: Thu 26 Dec 2024 11:54:19 +0000
ROA not before: Thu 26 Dec 2024 11:54:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215181
IP address blocks: 151.242.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:02:d1:4e:d2:5b:56:21:f7:48:16:53:93:da:1d:55:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 26 11:54:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63ca426e67da715d379845cb587ec564174089bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8f:09:5b:69:86:ee:42:32:03:bf:bd:61:91:
e7:84:01:5d:a1:65:89:c0:1a:1c:4f:6f:15:ff:2c:
d5:ee:dd:fb:7f:03:74:c8:3c:7d:b8:88:4b:c9:07:
c8:85:c2:a4:36:3e:09:3f:e9:56:a2:df:16:25:1d:
90:79:eb:2f:5a:cf:b7:c7:8f:3f:5a:5b:d8:f4:34:
94:89:22:71:03:40:02:cc:77:9f:4c:b9:bc:7f:76:
86:b7:c3:12:fc:32:a2:ab:c7:9f:27:1a:0f:e8:ac:
d8:a2:5d:69:3f:30:ae:cd:83:8a:3f:3d:01:2f:f7:
77:9b:54:72:f2:a8:a6:d9:da:02:52:71:aa:39:79:
54:68:b2:34:be:a9:02:e9:ea:cd:77:dc:35:be:f4:
63:91:ae:a7:31:63:04:eb:c7:af:28:16:47:ba:4d:
4c:57:0b:d4:0d:49:8e:c5:0a:2c:cd:24:44:74:cc:
13:4a:bd:22:19:ff:4f:2a:ed:26:91:ac:91:1a:2b:
48:5c:1d:4d:96:99:91:74:87:d2:97:0f:d8:60:b3:
eb:13:77:c9:b4:09:b4:90:c6:a6:d9:e9:db:1f:b3:
7f:2c:ee:63:76:4a:fd:2c:15:d5:99:3a:b0:d9:f6:
bf:a1:15:54:30:d4:36:9e:6c:28:7d:7f:c9:9e:ab:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CA:42:6E:67:DA:71:5D:37:98:45:CB:58:7E:C5:64:17:40:89:BF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y8pCbmfacV03mEXLWH7FZBdAib8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.242.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0f:e6:88:5e:e2:52:04:3d:8c:1b:0d:0b:91:be:a3:e0:51:
24:96:90:f4:a1:ef:40:ec:f4:4c:e6:f0:e1:84:59:7c:a6:83:
3d:ea:b2:26:f0:5e:9f:15:c6:ae:27:d3:95:d0:5b:67:72:5b:
de:07:38:f5:87:63:d9:c5:26:71:d3:52:8a:b2:56:53:07:ef:
3a:74:e2:50:e0:15:da:58:f7:ff:f0:ae:91:20:ed:12:2d:8e:
22:a8:0d:a1:e5:98:04:77:bc:d2:68:3b:b6:06:f9:58:14:be:
c8:1f:15:50:2c:bd:33:63:39:c2:a1:f6:74:41:85:ea:ec:2a:
7c:ce:74:72:70:d4:a1:62:cc:0c:ad:8c:29:6a:34:af:cb:fa:
d9:29:b7:f4:bd:26:64:d0:63:78:a0:25:e8:bb:5e:3d:ce:08:
8b:3e:83:87:5f:55:11:fb:c8:52:8d:91:55:00:7b:32:58:9b:
10:6a:78:e5:c5:9e:84:06:44:7d:61:54:c6:82:f5:16:02:5e:
fb:50:e1:a1:72:12:dc:5b:34:b3:0e:fa:ae:21:2a:64:6a:43:
d6:e5:d2:70:71:47:6f:fe:1f:31:16:6e:82:a1:93:1e:2b:43:
31:33:ea:02:39:af:ef:5c:f1:1f:74:8e:60:38:29:a8:01:38:
3e:05:a0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:29:11 2025 by rpki-client