Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k0hshiaMV7bv0O7I_h-mxSWiXxo.roa
File: k0hshiaMV7bv0O7I_h-mxSWiXxo.roa (raw, json)
Hash identifier: Znz7RWQdSAL5a94x2WZyLVFAK56dXwq6IE0uIvEXzQc=
Subject key identifier: 93:48:6C:86:26:8C:57:B6:EF:D0:EE:C8:FE:1F:A6:C5:25:A2:5F:1A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01951E5ACFE960CCD74E588170077C71CF87
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k0hshiaMV7bv0O7I_h-mxSWiXxo.roa
Signing time: Wed 19 Feb 2025 13:17:02 +0000
ROA not before: Wed 19 Feb 2025 13:17:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.243.44.0/22 maxlen: 22
151.243.105.0/24 maxlen: 24
151.243.184.0/22 maxlen: 22
151.243.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 03 Mar 2025 08:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1e:5a:cf:e9:60:cc:d7:4e:58:81:70:07:7c:71:cf:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 19 13:17:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93486c86268c57b6efd0eec8fe1fa6c525a25f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:a0:a6:5f:a1:c6:b7:4d:a1:bc:60:f9:db:
c8:35:a1:6a:f5:45:fc:de:76:0d:e9:64:7c:7e:80:
cd:ce:b7:93:ac:cf:70:0a:c5:43:49:73:ce:54:c8:
d1:67:d4:2b:7d:21:a4:fe:98:b0:d0:fd:12:6c:83:
69:ab:49:62:c8:8b:68:65:4a:9e:1b:c8:82:af:59:
5e:01:87:d4:53:a8:2f:51:b4:f5:69:7a:ac:fd:b4:
7b:72:ca:79:cc:c1:ba:aa:ca:8f:7a:4c:e1:48:4e:
bf:dc:c8:64:23:32:79:37:e6:d8:a2:58:59:7f:af:
aa:f8:bc:c4:03:57:58:92:22:dc:ca:4e:fa:0f:ab:
18:73:42:4e:58:9f:04:0f:a4:00:57:07:52:a8:f3:
62:e0:b1:3f:09:a9:c2:39:84:c4:0a:6b:ca:2e:1c:
b9:1b:cd:3a:ee:67:fe:4d:93:f8:8a:30:d1:c3:60:
61:1c:cd:d2:5a:f7:4a:aa:59:20:64:15:c7:98:44:
6d:ec:91:54:ec:1d:df:87:0e:ee:36:e0:5a:13:36:
0d:d8:fe:98:bd:2d:cf:70:26:79:10:b9:b1:b9:a7:
5f:8a:80:79:f1:ea:e3:76:92:e4:f4:ee:13:0f:bc:
b2:01:09:65:32:1a:35:7c:6f:7a:2e:ca:59:91:47:
e4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:48:6C:86:26:8C:57:B6:EF:D0:EE:C8:FE:1F:A6:C5:25:A2:5F:1A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k0hshiaMV7bv0O7I_h-mxSWiXxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.44.0/22
151.243.105.0/24
151.243.184.0/22
151.243.204.0/22
Signature Algorithm: sha256WithRSAEncryption
39:43:53:ed:db:fe:40:45:cc:16:b9:28:36:54:07:e0:76:c1:
0a:b2:a4:33:c0:11:56:86:d9:6a:b7:37:11:fb:e1:82:c1:9a:
af:e9:5a:d8:a8:11:48:42:c9:fd:c6:46:8c:50:7c:8f:04:8b:
f2:de:95:3d:34:8f:68:c7:4e:9d:89:e7:ab:e3:69:d8:17:1d:
62:01:ee:63:c2:c5:46:2b:bf:3e:ee:2f:d1:9d:2e:62:f6:7c:
52:ff:cb:fa:dc:2a:47:b4:4a:2a:66:01:0f:93:0c:bc:f0:6d:
35:90:26:38:2a:1f:f7:e9:58:4e:47:62:66:17:03:3a:fc:f3:
3f:e2:c7:c9:c4:87:be:75:9f:18:84:1f:8e:be:e5:ea:cb:24:
72:ea:e8:40:ef:ac:3b:0a:cc:4c:bb:27:94:88:01:61:44:0e:
ed:f1:71:e5:f2:10:23:c8:86:fe:f8:aa:f4:9c:93:ea:dc:eb:
37:52:e0:22:c8:a3:98:58:1f:f9:56:22:d1:96:1a:dd:58:0e:
91:53:31:4f:e9:01:6e:48:a5:b9:fa:b5:e3:6c:47:d7:c7:5d:
43:70:a8:d6:87:f7:6a:74:1b:ba:5f:cd:88:2d:8c:8f:8f:38:
f0:5f:80:df:fd:0a:dd:3a:21:27:fd:a8:09:9b:61:10:0f:70:
e6:90:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:33 2025 by rpki-client