Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eHDWKGHpOMiip6E1StJ7yyvUe0c.roa
File: eHDWKGHpOMiip6E1StJ7yyvUe0c.roa (raw, json)
Hash identifier: +3q5HRmZnWC6U1gYltNEmV4JHhauDRNguEDCBo5hwPk=
Subject key identifier: 78:70:D6:28:61:E9:38:C8:A2:A7:A1:35:4A:D2:7B:CB:2B:D4:7B:47
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194CA807FFA7B3F6DA10670A164C241AD1F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eHDWKGHpOMiip6E1StJ7yyvUe0c.roa
Signing time: Mon 03 Feb 2025 06:30:06 +0000
ROA not before: Mon 03 Feb 2025 06:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 151.243.176.0/21 maxlen: 24
151.243.188.0/22 maxlen: 24
151.243.192.0/21 maxlen: 24
151.243.215.0/24 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.221.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.243.225.0/24 maxlen: 24
151.243.227.0/24 maxlen: 24
151.243.229.0/24 maxlen: 24
151.243.235.0/24 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.241.0/24 maxlen: 24
151.243.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Mar 2025 06:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:80:7f:fa:7b:3f:6d:a1:06:70:a1:64:c2:41:ad:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 3 06:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7870d62861e938c8a2a7a1354ad27bcb2bd47b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e3:6c:10:49:5d:88:c6:d8:cf:49:71:b9:36:
79:af:53:29:1a:49:58:71:ce:60:c8:24:c5:0f:75:
ad:43:ef:4a:6d:4d:1b:86:df:7e:6d:52:7b:39:f3:
8f:78:c2:32:7a:82:0e:56:0e:30:26:5c:4a:56:9a:
c9:8a:8a:b9:70:0f:07:b2:5f:9a:4f:3e:59:14:3c:
9b:c5:48:1f:57:3a:60:d0:2c:c3:ba:f1:3f:95:6a:
4f:6e:5c:0a:8c:c7:eb:af:af:9f:03:62:00:d8:50:
e2:f3:ec:90:86:95:9b:4e:6b:91:b6:13:73:85:a2:
40:8b:a7:c3:fe:18:07:47:a3:e4:6d:98:df:d0:34:
4a:9b:ce:49:46:f5:e5:fb:fd:7f:0f:e0:c3:9c:7e:
a8:98:75:69:33:57:67:6a:35:96:3e:2f:93:7a:66:
35:fe:c0:8c:44:7f:09:52:05:8f:62:d4:2e:52:aa:
4e:ea:6d:14:24:24:e0:2b:f5:7e:b5:a1:00:5a:c1:
27:d9:32:41:c8:12:a9:85:8e:eb:7a:17:3d:bc:fa:
23:c1:06:ff:fa:4d:a5:80:96:8f:f9:ef:ab:5e:39:
8f:31:7f:07:03:6b:3c:7f:c4:d1:68:b9:6a:be:5c:
c9:d7:ee:67:1e:02:ac:f9:1e:4d:f6:e3:17:bc:2b:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:70:D6:28:61:E9:38:C8:A2:A7:A1:35:4A:D2:7B:CB:2B:D4:7B:47
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eHDWKGHpOMiip6E1StJ7yyvUe0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.176.0/21
151.243.188.0-151.243.199.255
151.243.215.0/24
151.243.217.0/24
151.243.221.0/24
151.243.223.0/24
151.243.225.0/24
151.243.227.0/24
151.243.229.0/24
151.243.235.0/24
151.243.237.0/24
151.243.239.0/24
151.243.241.0/24
151.243.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:1a:26:e9:06:c7:3c:b3:6f:5f:2f:e0:94:a4:22:0f:54:55:
9b:21:43:5e:fd:c3:4f:21:8a:6c:d9:ea:62:69:9a:e5:a4:0a:
73:d8:1f:f4:e3:51:8b:cb:b8:f0:02:f3:43:74:9c:ec:e1:f3:
66:65:68:ab:53:86:71:20:a2:eb:80:9d:d5:e3:2c:67:a4:84:
0b:b9:fa:4a:dd:ad:c2:68:de:8c:32:2c:7e:f3:e4:0b:8c:ae:
0e:f2:8d:e0:29:c1:ac:0d:35:a9:02:3e:5f:a5:c1:2b:c3:f6:
05:69:1f:9e:81:02:48:da:73:7a:69:9b:fe:74:92:8b:2a:29:
c1:a0:4a:6c:45:a4:f2:28:c8:3b:5e:05:51:ee:82:6f:71:e3:
cc:79:19:10:56:d4:ee:41:3f:5a:b2:e0:77:32:f0:37:04:5c:
2b:9a:46:dc:0f:0d:39:73:51:db:72:86:8a:23:7a:7c:c9:67:
89:49:c4:0d:55:c4:43:a6:84:37:34:e8:6d:82:e6:82:71:74:
6b:3c:4d:32:d3:9f:f3:33:98:59:14:f3:ed:c5:74:32:d2:0b:
60:04:b3:da:39:7d:a5:38:e0:1a:41:29:f2:15:58:44:46:e6:
2d:c6:f1:15:fb:20:d8:1b:e0:e3:30:c6:d5:6f:3f:8b:c2:6e:
95:e6:76:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:34:13 2025 by rpki-client