Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iaA_AlN05nMslGsYw48GXSeNyv4.roa
File: iaA_AlN05nMslGsYw48GXSeNyv4.roa (raw, json)
Hash identifier: 0sft+50eGyn3aUdimuM7hoArvvHIPqNwNc1G/fKKdqQ=
Subject key identifier: 89:A0:3F:02:53:74:E6:73:2C:94:6B:18:C3:8F:06:5D:27:8D:CA:FE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01948DAE207CBE13F34EBD602417CBE7050A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iaA_AlN05nMslGsYw48GXSeNyv4.roa
Signing time: Wed 22 Jan 2025 11:03:06 +0000
ROA not before: Wed 22 Jan 2025 11:03:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215224
IP address blocks: 151.243.230.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 18:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:ae:20:7c:be:13:f3:4e:bd:60:24:17:cb:e7:05:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 22 11:03:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89a03f025374e6732c946b18c38f065d278dcafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:c9:bd:63:4a:7e:3f:09:4b:06:55:36:e9:
1f:fc:45:b9:6d:66:eb:fd:54:1b:ea:a3:a2:97:fc:
ce:24:b3:53:4f:44:02:9f:26:80:32:83:33:1d:10:
58:1a:b6:32:7c:75:d0:57:af:1a:51:05:60:c6:e4:
9a:77:99:a4:c9:22:ec:68:52:f8:37:58:a8:9a:be:
e5:29:2f:79:82:e7:35:ad:96:69:d9:51:79:cd:54:
f8:50:80:b6:48:85:11:c1:d3:a4:6b:ef:c3:d0:e5:
ef:cc:c6:60:2e:d5:0c:92:07:24:4d:b9:f3:21:eb:
91:56:97:fe:76:47:f2:c6:aa:c0:4a:2b:0e:cd:08:
8e:70:5f:6a:dc:3a:b3:49:52:71:dd:60:ee:ee:6f:
b9:af:fc:e9:ec:21:17:5f:42:bc:38:aa:2d:a2:48:
2b:d3:35:df:46:61:7c:9d:b0:07:31:f9:3e:28:d5:
d0:d9:44:09:7c:2d:6f:18:e1:09:c7:04:77:42:0c:
45:6c:88:cb:a7:3e:34:e9:2b:c0:07:07:ba:d6:75:
d2:ef:e3:a3:62:69:e9:37:06:5b:1d:1b:07:b1:02:
b2:a7:4f:82:c9:67:d4:4b:b4:e7:19:f5:ba:bc:ee:
de:8c:df:67:49:97:51:70:60:92:35:e4:85:e9:c7:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:3F:02:53:74:E6:73:2C:94:6B:18:C3:8F:06:5D:27:8D:CA:FE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iaA_AlN05nMslGsYw48GXSeNyv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.230.0/23
Signature Algorithm: sha256WithRSAEncryption
93:c7:94:10:28:0e:1d:43:ad:75:c0:54:3e:3b:51:e0:b9:2d:
65:2b:51:e5:fa:82:e0:5a:cc:74:c2:de:ea:87:e9:93:a4:47:
ea:05:1f:62:4a:2a:f6:8f:eb:f5:26:21:2d:48:22:0f:06:ae:
d2:d8:97:5a:1e:90:d2:4e:cd:c6:94:95:c0:90:cb:fb:2a:96:
65:e5:66:09:31:2f:62:bb:f1:df:99:a9:e9:00:4f:f8:78:05:
46:39:2d:d0:28:7a:b6:f1:24:f7:fb:3f:6e:9f:57:2b:cd:91:
bf:d8:6d:10:b5:92:a7:fd:a4:e0:5f:8a:c5:a4:2e:14:10:40:
d5:cb:c9:04:4b:6c:5c:69:4d:8c:a0:78:cd:4b:41:13:61:67:
7a:ec:0f:5d:1d:d7:72:1d:db:a7:83:77:ad:39:08:0d:15:a2:
cb:ca:b4:5a:26:8b:72:de:41:cc:58:03:0d:b9:7d:3c:a8:06:
83:84:17:07:47:09:26:ec:53:dc:bb:97:b4:1a:6d:85:56:1a:
e6:d2:99:19:ba:c0:1e:99:c3:8b:cc:a5:12:7f:75:c7:9b:1e:
dc:a3:98:57:c8:90:f8:38:34:91:f0:98:44:d9:27:5b:a9:ca:
14:19:a9:12:18:f0:84:90:b9:20:da:aa:74:8f:ff:98:e3:dd:
04:76:82:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSNriB8vhPzTr1gJBfL5wUKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTIyMTEwMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWEwM2YwMjUzNzRlNjczMmM5NDZiMThjMzhmMDY1ZDI3OGRjYWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0rJvWNKfj8JSwZVNukf/EW5bWbr
/VQb6qOil/zOJLNTT0QCnyaAMoMzHRBYGrYyfHXQV68aUQVgxuSad5mkySLsaFL4
N1iomr7lKS95guc1rZZp2VF5zVT4UIC2SIURwdOka+/D0OXvzMZgLtUMkgckTbnz
IeuRVpf+dkfyxqrASisOzQiOcF9q3DqzSVJx3WDu7m+5r/zp7CEXX0K8OKotokgr
0zXfRmF8nbAHMfk+KNXQ2UQJfC1vGOEJxwR3QgxFbIjLpz406SvABwe61nXS7+Oj
YmnpNwZbHRsHsQKyp0+CyWfUS7TnGfW6vO7ejN9nSZdRcGCSNeSF6ceNFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFImgPwJTdOZzLJRrGMOPBl0njcr+MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvaWFBX0FsTjA1bk1zbEdzWXc0OEdYU2VOeXY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/PmMA0G
CSqGSIb3DQEBCwUAA4IBAQCTx5QQKA4dQ611wFQ+O1HguS1lK1Hl+oLgWsx0wt7q
h+mTpEfqBR9iSir2j+v1JiEtSCIPBq7S2JdaHpDSTs3GlJXAkMv7KpZl5WYJMS9i
u/HfmanpAE/4eAVGOS3QKHq28ST3+z9un1crzZG/2G0QtZKn/aTgX4rFpC4UEEDV
y8kES2xcaU2MoHjNS0ETYWd67A9dHddyHdung3etOQgNFaLLyrRaJoty3kHMWAMN
uX08qAaDhBcHRwkm7FPcu5e0Gm2FVhrm0pkZusAemcOLzKUSf3XHmx7co5hXyJD4
ODSR8JhE2SdbqcoUGakSGPCEkLkg2qp0j/+Y490EdoIL
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:40:32 2025 by rpki-client