Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qhFnkWQhjV9D6ymT_VhyH2RYOY8.roa
File: qhFnkWQhjV9D6ymT_VhyH2RYOY8.roa (raw, json)
Hash identifier: wAjYDjE9XpvOoXv+GtLWHFUvQxLD1tZ5yiIZ0XYw8DY=
Subject key identifier: AA:11:67:91:64:21:8D:5F:43:EB:29:93:FD:58:72:1F:64:58:39:8F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01945FB25A31745357488B7D7CFBB06DA68A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qhFnkWQhjV9D6ymT_VhyH2RYOY8.roa
Signing time: Mon 13 Jan 2025 12:45:11 +0000
ROA not before: Mon 13 Jan 2025 12:45:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 151.243.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 04:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5f:b2:5a:31:74:53:57:48:8b:7d:7c:fb:b0:6d:a6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 13 12:45:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa11679164218d5f43eb2993fd58721f6458398f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:fd:97:b3:48:a8:00:14:7a:c6:c1:74:0a:
a2:77:8c:45:11:dc:d6:c0:bf:79:13:6a:12:5f:20:
b4:59:58:11:2f:fb:b1:3a:ee:d2:10:05:1f:17:de:
2b:c1:93:a2:31:32:a7:41:c0:6d:d1:46:3b:7b:1c:
20:43:6d:e7:b3:6b:e0:d1:3d:39:9b:4b:16:f4:81:
ba:ad:19:91:ed:c7:87:13:90:7a:a9:e9:45:d4:bf:
01:20:4c:54:5e:37:70:a2:bb:b9:07:2b:41:38:a3:
67:8b:f4:6a:b9:7b:cf:61:e4:b2:2f:d6:90:f3:8f:
5e:54:e4:49:98:97:20:28:c2:9b:3b:81:0e:e7:2b:
27:af:7e:45:ce:3e:c7:db:40:50:58:de:58:53:2e:
2c:91:12:b7:cd:cb:72:f8:30:60:3b:20:4c:cb:d0:
36:e5:56:48:f6:24:6b:cf:fd:09:86:cb:42:c0:18:
aa:c2:b4:5b:dd:d4:e9:fc:7c:8c:39:42:db:57:bd:
a0:6e:7b:53:6f:4a:1e:85:7c:4b:5b:8a:c9:5f:0d:
66:24:92:38:2b:42:90:fe:20:9e:58:b5:e8:a3:18:
75:82:e3:d9:cf:29:79:ce:01:1f:12:81:73:11:1d:
e5:74:be:4d:56:80:44:b9:0e:d4:f3:15:dd:73:ee:
1e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:11:67:91:64:21:8D:5F:43:EB:29:93:FD:58:72:1F:64:58:39:8F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qhFnkWQhjV9D6ymT_VhyH2RYOY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.188.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:97:af:20:59:28:6d:00:c1:3d:61:17:0a:39:8b:e3:f5:81:
c2:76:9c:5a:05:64:d3:d7:a0:e5:a7:2d:6d:fb:b3:b1:84:95:
43:f4:49:00:33:a8:15:c9:8d:40:57:9f:3e:39:67:c4:d3:02:
89:c0:e1:c5:3f:1a:a3:81:7f:2f:14:66:f5:87:e1:ba:3b:30:
b8:60:46:34:c4:8c:43:2c:45:07:a8:96:f8:87:f6:5c:b7:88:
98:26:9f:13:f0:ab:e1:f6:4c:65:93:c1:92:9b:09:98:d6:76:
a1:0f:a0:61:9d:f5:c4:1a:99:61:ac:41:13:b7:3f:62:eb:89:
7b:30:9e:eb:93:f5:ff:4c:0e:49:dd:80:8f:32:9c:ed:47:28:
59:fc:8b:1e:ae:75:95:75:9c:70:5d:29:4b:85:d7:98:b4:4d:
8a:27:0a:44:84:da:f1:f0:da:09:09:98:39:04:6d:02:bf:3b:
00:f8:6c:a3:66:54:96:e2:46:5e:b8:03:d0:03:07:8f:8c:86:
5d:42:38:b2:e7:c8:27:27:0e:4a:68:b1:8e:e2:89:74:09:fd:
e9:2f:d5:64:c9:11:72:26:93:3c:6f:5d:d4:56:a6:ba:42:f5:
75:30:df:6a:b0:b3:56:c8:46:63:f6:f3:fd:15:1f:21:4c:da:
c3:0d:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:47:52 2025 by rpki-client