Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pXh-BButgi-_3e-83okfkW5axpA.roa
File: pXh-BButgi-_3e-83okfkW5axpA.roa (raw, json)
Hash identifier: gSntr8ky/TWXa9dm+ius0i3lwwJsDvOJfmWY7w6N8X0=
Subject key identifier: A5:78:7E:04:1B:AD:82:2F:BF:DD:EF:BC:DE:89:1F:91:6E:5A:C6:90
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01963D030896A4A47BFE45E892DF5DC95593
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pXh-BButgi-_3e-83okfkW5axpA.roa
Signing time: Wed 16 Apr 2025 05:12:11 +0000
ROA not before: Wed 16 Apr 2025 05:12:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56594
IP address blocks: 151.242.43.0/24 maxlen: 24
151.242.69.0/24 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Apr 2025 13:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:03:08:96:a4:a4:7b:fe:45:e8:92:df:5d:c9:55:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 16 05:12:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5787e041bad822fbfddefbcde891f916e5ac690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:ea:64:18:4e:c4:b2:fc:06:c6:8b:d5:a6:
26:02:80:71:5b:8a:2f:dc:6d:3d:92:c0:17:37:4f:
c1:ff:9d:e5:ac:28:ce:0e:d9:28:89:c9:e0:91:cf:
b6:05:15:14:fa:04:59:c8:4e:2e:9b:56:1a:2b:d9:
42:9f:a1:7f:5e:5a:b8:69:3b:18:7f:01:dd:6d:89:
f6:9e:4e:e7:4b:75:6d:2f:44:33:c4:99:85:34:ef:
61:53:58:96:e8:97:f1:64:31:94:5c:ec:2f:4c:10:
59:f5:3f:44:5c:41:1c:1d:a4:ed:5a:c6:4e:6b:2a:
e8:54:19:c2:a1:c4:80:3b:68:c5:75:5e:7c:c3:0b:
82:f1:e3:7c:ab:ae:66:48:bb:e6:e5:63:99:56:6e:
4e:a4:fe:a1:a7:0f:c3:9b:7b:71:52:b7:b2:e4:7c:
4f:cc:13:23:61:d7:9d:5b:9a:2d:d7:58:99:a0:0a:
2e:8c:3b:03:d4:20:5b:bd:c7:ac:9b:80:3b:45:44:
5b:fa:a8:ca:a8:4b:0a:e3:43:47:60:38:4f:31:eb:
43:e4:ee:c1:fb:ff:27:d0:0b:48:9a:37:55:23:5d:
e2:e5:90:f5:a6:94:de:a5:2a:f8:22:6c:37:d0:48:
24:86:ba:ec:0c:b3:1e:c5:70:6c:9b:39:2f:dd:ce:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:78:7E:04:1B:AD:82:2F:BF:DD:EF:BC:DE:89:1F:91:6E:5A:C6:90
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pXh-BButgi-_3e-83okfkW5axpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.43.0/24
151.242.69.0/24
151.243.44.0/24
151.243.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:a1:dc:af:e7:c0:aa:88:09:15:b9:c6:0b:89:20:95:87:0e:
2a:54:16:55:41:3b:bd:70:3e:01:03:9c:8f:df:48:8f:34:c7:
fb:a4:8d:1d:47:b4:cc:2c:d9:f6:02:c4:6f:ac:99:cf:10:3e:
4f:bc:1d:a4:00:db:fd:22:6e:4c:4a:5d:cc:24:ae:18:d3:98:
89:b1:bb:85:45:28:e4:29:4b:84:77:9c:b1:a3:c5:0f:e9:54:
a5:30:f7:85:fe:83:ec:c2:dc:13:1a:27:75:42:1b:a0:02:43:
f5:d9:45:47:24:2a:17:38:00:be:81:4b:c9:42:1e:fd:ba:68:
bb:8b:10:03:85:53:1e:7f:55:2f:79:d8:bf:1e:b3:e3:75:75:
e6:4b:2e:83:f8:db:94:fe:71:cb:eb:f3:6f:07:ca:5f:76:b3:
19:17:09:17:1b:88:8f:98:99:9d:e7:e5:35:9f:aa:75:10:1e:
e0:4a:6a:d9:09:cb:6c:8b:2d:d1:87:cf:99:ad:b9:64:4f:b2:
4c:e0:11:97:80:df:ff:aa:05:83:a4:42:c3:64:e4:95:0a:2e:
b0:dc:a3:2d:60:7d:a7:c5:40:84:21:d0:f5:ff:eb:da:99:86:
64:b5:c2:db:01:6a:3d:5c:2c:e1:f0:9b:e7:48:53:96:79:68:
10:fd:40:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:29:50 2025 by rpki-client