Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rvi5kRFUtcmiQMxUuAnNfvlEhXg.roa
File: rvi5kRFUtcmiQMxUuAnNfvlEhXg.roa (raw, json)
Hash identifier: j4v7E5MoX3ZrtRd3HIuEIhBCYI/fg8B6oLyYGsuEWmc=
Subject key identifier: AE:F8:B9:91:11:54:B5:C9:A2:40:CC:54:B8:09:CD:7E:F9:44:85:78
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194D50F24B4E2087E63090A61224AB1926D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rvi5kRFUtcmiQMxUuAnNfvlEhXg.roa
Signing time: Wed 05 Feb 2025 07:42:06 +0000
ROA not before: Wed 05 Feb 2025 07:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.34.0/24 maxlen: 24
151.242.44.0/24 maxlen: 24
151.242.56.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.243.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Feb 2025 13:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:0f:24:b4:e2:08:7e:63:09:0a:61:22:4a:b1:92:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 5 07:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aef8b9911154b5c9a240cc54b809cd7ef9448578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:02:f4:6a:c3:83:8a:9c:1c:36:eb:a9:c7:f3:
e8:99:ba:46:5f:75:f3:75:0d:ba:e1:14:aa:c9:6b:
af:16:eb:e6:06:3b:fd:f9:b2:48:1d:1b:19:1d:af:
53:e1:cc:8b:8a:30:5b:7e:79:d9:af:4b:cf:3a:15:
70:46:5c:29:00:92:a7:1f:da:64:cc:10:80:a5:59:
ff:fc:48:52:6e:c2:f1:1a:2a:29:80:81:e4:d2:99:
e7:c3:72:0f:f2:dc:6a:86:c7:c1:2c:b6:54:c4:41:
ca:77:94:c4:9b:7a:23:19:c1:bc:3a:6e:5f:cf:5b:
3b:4b:87:da:71:07:a2:ca:4c:b6:75:e1:a6:12:63:
7e:bc:9a:08:c0:9c:2a:41:b6:ba:78:66:df:cd:40:
1c:45:20:f7:6e:b5:59:b3:e2:02:d4:2a:bf:93:09:
7a:29:69:09:25:58:e0:92:5f:7d:0a:35:d4:32:3a:
71:ad:6d:4b:30:96:48:19:73:3e:16:df:d0:60:00:
ae:59:f0:cc:ec:fb:63:59:c2:26:23:00:b1:52:26:
84:f5:01:c3:bd:6d:62:00:fc:3c:c5:09:3e:a5:46:
ac:49:28:f9:89:7a:78:0c:74:c7:ee:91:aa:92:80:
3f:2c:54:1b:31:79:d9:f1:8e:31:68:fe:89:52:56:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F8:B9:91:11:54:B5:C9:A2:40:CC:54:B8:09:CD:7E:F9:44:85:78
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rvi5kRFUtcmiQMxUuAnNfvlEhXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.34.0/24
151.242.44.0/24
151.242.56.0/24
151.242.64.0/24
151.243.234.0/24
Signature Algorithm: sha256WithRSAEncryption
10:23:ca:72:8b:bd:96:9a:0c:03:ee:d5:96:c5:8e:96:40:22:
bb:f7:0e:c5:79:96:c7:05:df:f5:dd:62:c0:52:3e:ed:ca:80:
6e:ce:64:ad:7c:44:ed:bd:1a:d0:ef:cf:e7:60:1b:10:54:80:
a3:0c:d0:78:3a:12:57:7b:83:cf:66:a7:04:cc:24:3b:3b:55:
1e:ad:01:6b:4b:63:47:44:fc:be:55:15:ad:e5:b9:e3:2a:06:
51:fe:8f:3c:cb:1c:62:5d:69:66:11:3e:cf:d9:7c:79:88:6d:
f7:50:7e:52:1f:75:fc:15:65:1a:66:b3:10:54:e8:c5:3d:e8:
8d:98:b4:6c:75:4d:11:bb:92:e6:e7:2e:c4:de:d8:a4:7a:c8:
40:bf:67:b5:e4:66:4c:04:be:c4:b9:a3:74:58:f3:ce:47:13:
45:20:5a:49:40:5a:01:3b:37:c7:a3:20:27:a6:54:77:19:f9:
77:98:2a:7f:48:44:ee:0c:e1:8a:fe:55:45:ed:92:27:d1:6b:
70:c1:88:9c:74:31:3a:7d:73:f4:30:24:ac:33:48:d9:67:27:
09:5f:f6:7e:32:9b:b4:94:98:0e:a6:00:2e:cc:80:81:c7:6e:
39:46:12:b9:13:8a:6a:82:f4:0a:82:37:0e:66:de:18:4d:12:
d5:72:60:86
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZTVDyS04gh+YwkKYSJKsZJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMjA1MDc0MjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWY4Yjk5MTExNTRiNWM5YTI0MGNjNTRiODA5Y2Q3ZWY5NDQ4NTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wL0asODipwcNuupx/PombpGX3Xz
dQ264RSqyWuvFuvmBjv9+bJIHRsZHa9T4cyLijBbfnnZr0vPOhVwRlwpAJKnH9pk
zBCApVn//EhSbsLxGiopgIHk0pnnw3IP8txqhsfBLLZUxEHKd5TEm3ojGcG8Om5f
z1s7S4facQeiyky2deGmEmN+vJoIwJwqQba6eGbfzUAcRSD3brVZs+IC1Cq/kwl6
KWkJJVjgkl99CjXUMjpxrW1LMJZIGXM+Ft/QYACuWfDM7PtjWcImIwCxUiaE9QHD
vW1iAPw8xQk+pUasSSj5iXp4DHTH7pGqkoA/LFQbMXnZ8Y4xaP6JUlayZwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFK74uZERVLXJokDMVLgJzX75RIV4MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvcnZpNWtSRlV0Y21pUU14VXVBbk5mdmxFaFhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/IiAwQA
l/IsAwQAl/I4AwQAl/JAAwQAl/PqMA0GCSqGSIb3DQEBCwUAA4IBAQAQI8pyi72W
mgwD7tWWxY6WQCK79w7FeZbHBd/13WLAUj7tyoBuzmStfETtvRrQ78/nYBsQVICj
DNB4OhJXe4PPZqcEzCQ7O1UerQFrS2NHRPy+VRWt5bnjKgZR/o88yxxiXWlmET7P
2Xx5iG33UH5SH3X8FWUaZrMQVOjFPeiNmLRsdU0Ru5Lm5y7E3tikeshAv2e15GZM
BL7EuaN0WPPORxNFIFpJQFoBOzfHoyAnplR3Gfl3mCp/SETuDOGK/lVF7ZIn0Wtw
wYicdDE6fXP0MCSsM0jZZycJX/Z+Mpu0lJgOpgAuzICBx245RhK5E4pqgvQKgjcO
Zt4YTRLVcmCG
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:17:05 2025 by rpki-client