Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nOo-m40NzFe_jKhvAo5qLpcRkEk.roa
File: nOo-m40NzFe_jKhvAo5qLpcRkEk.roa (raw, json)
Hash identifier: s3n60o7fZpM58fC2FBd1BOU+0E+Z4oRqL+U9ByG6skw=
Subject key identifier: 9C:EA:3E:9B:8D:0D:CC:57:BF:8C:A8:6F:02:8E:6A:2E:97:11:90:49
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01946975AC989A7311ADE3D2CA5709472C63
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nOo-m40NzFe_jKhvAo5qLpcRkEk.roa
Signing time: Wed 15 Jan 2025 10:15:07 +0000
ROA not before: Wed 15 Jan 2025 10:15:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 169218
IP address blocks: 151.243.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 19:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:75:ac:98:9a:73:11:ad:e3:d2:ca:57:09:47:2c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 15 10:15:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cea3e9b8d0dcc57bf8ca86f028e6a2e97119049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7f:b3:22:cc:08:13:da:6d:e3:ce:69:d1:c8:
54:2a:ed:25:08:50:6c:33:39:e6:0d:55:b4:df:31:
d2:68:dc:18:45:e1:c6:84:56:8b:a9:8e:bb:42:8a:
37:f0:da:49:cb:f1:62:fc:83:90:2c:d0:5a:1d:fe:
f7:ab:6d:fd:eb:bc:ed:3c:8b:ca:c5:02:2a:85:10:
f8:e1:e7:e9:1d:cf:80:8c:ed:21:fd:95:c4:14:7f:
40:86:c2:6a:92:dd:8e:5a:4c:cb:65:56:8a:20:b0:
89:5e:7e:cd:ad:07:28:91:3c:fb:be:c3:81:a0:10:
63:74:28:a2:87:a1:ab:22:fb:98:c4:51:0f:91:8f:
2b:c2:2f:b0:41:77:c8:b0:62:a1:26:fa:7b:ba:9e:
0c:84:52:04:2c:67:cf:aa:9d:00:a4:b4:b7:9b:c2:
a4:1b:84:12:81:e3:13:74:6a:9f:20:56:db:1b:09:
56:61:5a:8e:2f:8c:25:ba:5d:58:d7:da:2d:de:6f:
c4:d1:62:79:20:67:81:77:dd:79:0e:38:7d:fd:56:
7f:68:e5:29:72:ca:49:97:84:05:39:91:f7:3a:69:
85:3f:08:7d:03:c0:3e:be:66:22:34:2c:5c:a8:a8:
7b:19:14:8b:63:9d:c0:7b:96:4d:f2:62:8d:46:48:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EA:3E:9B:8D:0D:CC:57:BF:8C:A8:6F:02:8E:6A:2E:97:11:90:49
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nOo-m40NzFe_jKhvAo5qLpcRkEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.141.0/24
Signature Algorithm: sha256WithRSAEncryption
82:43:a1:39:00:5c:7e:54:35:b1:eb:14:9b:fb:68:d7:4e:a4:
e8:fc:a3:89:af:fd:11:81:b2:08:cd:ce:fd:50:40:d6:7d:6d:
4c:ce:77:93:8d:26:0e:b4:f3:ab:d8:18:bb:11:e7:bc:48:04:
82:9e:fb:9b:75:9a:da:c4:7c:dd:c9:4e:53:e2:fb:af:d1:35:
a6:55:79:bb:f1:a6:73:dd:bd:02:6e:d0:f2:ca:2b:ed:cc:fa:
65:e7:14:b2:a1:dd:ed:e8:9d:ab:8c:b4:ef:a7:38:76:be:65:
35:4b:0d:7d:4e:c1:3a:b2:9e:47:ca:96:c7:b8:7c:67:7f:78:
a8:0c:db:21:b0:59:57:17:12:0e:6b:f3:72:aa:42:97:95:37:
bc:64:15:08:c7:3c:e9:7d:0e:09:74:4e:48:1e:5c:a5:1b:40:
a4:e3:42:e7:49:a9:85:38:30:57:b2:f1:fe:ef:29:6b:78:fb:
cc:de:2d:50:4f:fa:14:f7:20:ac:d0:3b:4d:2e:0c:c1:8e:db:
59:38:e5:77:f3:3f:03:b2:21:b3:f6:6f:7a:71:b7:85:ef:0f:
a4:b7:b3:66:92:8e:47:ba:10:34:a4:6c:17:ce:84:a9:e0:43:
46:76:d6:65:06:30:45:bc:47:eb:8f:d7:79:63:15:67:b0:8b:
17:0f:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:22:59 2025 by rpki-client