Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kqL4MVV5QyRysiSN5oGJY3wY_wc.roa
File: kqL4MVV5QyRysiSN5oGJY3wY_wc.roa (raw, json)
Hash identifier: Dvwc9zSscdcGZxTzDn1tfgxlHc2jLPaGiszRLP9xRdg=
Subject key identifier: 92:A2:F8:31:55:79:43:24:72:B2:24:8D:E6:81:89:63:7C:18:FF:07
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196D991265815C7421864A7E8F42AE03340
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kqL4MVV5QyRysiSN5oGJY3wY_wc.roa
Signing time: Fri 16 May 2025 14:48:10 +0000
ROA not before: Fri 16 May 2025 14:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 151.243.176.0/21 maxlen: 24
151.243.192.0/21 maxlen: 24
151.243.225.0/24 maxlen: 24
151.243.227.0/24 maxlen: 24
151.243.235.0/24 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 May 2025 14:49:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:91:26:58:15:c7:42:18:64:a7:e8:f4:2a:e0:33:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 16 14:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92a2f8315579432472b2248de68189637c18ff07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:bc:8f:40:95:c7:a2:71:62:22:51:2d:72:
59:92:a8:df:97:fd:e4:c0:57:27:78:64:67:1a:f8:
3c:fd:2c:91:c8:4b:49:70:50:b6:fe:86:a7:25:e4:
76:7f:e9:d6:23:f6:ab:3b:4d:a9:09:79:3d:7b:e5:
53:59:e6:ce:93:d9:43:a3:9b:a3:9c:b4:fc:46:37:
7d:70:c0:e3:e5:11:15:41:3f:0d:de:f3:90:4f:f0:
9b:cf:1a:71:c8:4a:ca:84:09:e9:9f:17:54:bd:ea:
bc:99:8e:91:18:04:82:e3:a5:03:3d:c4:8c:5c:74:
d6:16:9a:4a:22:d4:8d:93:4b:78:8d:9f:89:ab:ed:
6c:08:af:e5:fe:0e:39:32:bb:dd:9f:db:ee:98:a5:
2a:70:93:c8:0b:e9:df:db:d3:ef:b7:40:be:59:bd:
a0:24:ff:e9:bf:d6:49:82:1e:53:23:9e:74:c2:50:
c6:16:d7:0e:37:cb:94:f6:7e:05:86:58:fe:b2:79:
a5:31:cf:c7:f3:6f:57:6a:34:6a:77:12:b9:5b:95:
83:c4:6d:3b:63:bd:b2:8b:09:6d:07:46:27:9e:51:
a7:eb:4c:af:6f:e6:91:26:1f:08:46:65:d4:c8:c6:
2b:02:a2:65:5a:a6:eb:ef:3e:55:83:12:d0:53:23:
19:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A2:F8:31:55:79:43:24:72:B2:24:8D:E6:81:89:63:7C:18:FF:07
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kqL4MVV5QyRysiSN5oGJY3wY_wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.176.0/21
151.243.192.0/21
151.243.225.0/24
151.243.227.0/24
151.243.235.0/24
151.243.237.0/24
151.243.239.0/24
151.243.241.0/24
Signature Algorithm: sha256WithRSAEncryption
70:eb:e4:43:0c:bc:4a:94:0a:29:a6:f3:b5:d0:13:cb:89:04:
26:8c:af:8e:8a:e9:67:68:a0:ce:c8:56:62:27:94:57:84:6e:
d4:f2:0c:7c:e4:7d:d2:97:fb:01:45:1d:71:13:34:c1:51:91:
7f:69:aa:a2:46:8d:7e:05:6f:f0:f6:f7:71:c0:8e:fa:b6:d0:
0b:6f:bb:af:fd:93:17:14:4f:85:dd:c1:39:b0:6d:c8:c4:4b:
64:14:89:0b:85:13:84:7d:94:8c:c3:0b:6c:61:b5:8e:b9:69:
f4:bf:66:4e:33:51:dc:f7:f9:91:c5:6d:c7:5c:d1:e1:06:b2:
aa:51:85:6e:22:2c:e8:eb:f4:9b:6b:48:10:95:10:3b:c0:fd:
5e:57:f6:94:7f:9c:51:1b:cb:cf:45:55:cd:7a:f6:14:5b:d3:
f0:3a:fe:05:95:6c:ff:5d:67:f4:d3:6b:2f:6a:55:1d:f8:34:
32:38:df:61:88:07:4d:6a:c8:1c:3a:3c:b5:dc:e7:10:a8:f1:
57:f9:cc:4f:27:0d:d6:02:84:64:c8:84:61:0f:fc:df:9d:e1:
4c:b5:4e:32:56:97:4a:40:04:e9:5e:31:5a:8b:72:c4:8d:7e:
1c:24:30:5b:94:9a:a0:17:90:40:01:ee:63:f5:f9:b6:01:d3:
7d:da:1d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:39:16 2025 by rpki-client