Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tsVhjmpLj2LNNDpOV8Hxetob6kc.roa
File: tsVhjmpLj2LNNDpOV8Hxetob6kc.roa (raw, json)
Hash identifier: 3foI8AkBazh6TDkgYEi/ZoMNCQP450vqjolqRtT8cqM=
Subject key identifier: B6:C5:61:8E:6A:4B:8F:62:CD:34:3A:4E:57:C1:F1:7A:DA:1B:EA:47
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01957FA34305EC56C750B5C397087A11CBFE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tsVhjmpLj2LNNDpOV8Hxetob6kc.roa
Signing time: Mon 10 Mar 2025 10:39:20 +0000
ROA not before: Mon 10 Mar 2025 10:39:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395839
IP address blocks: 151.242.51.0/24 maxlen: 24
151.243.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 11:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:a3:43:05:ec:56:c7:50:b5:c3:97:08:7a:11:cb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 10 10:39:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6c5618e6a4b8f62cd343a4e57c1f17ada1bea47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:d5:21:5d:14:a6:87:9b:2f:0e:4e:26:ff:
f2:ab:e8:2a:47:6b:6a:06:32:00:f2:9f:29:25:cf:
c4:ec:7b:35:a5:ba:e9:d7:42:d0:bb:e6:99:ae:4d:
5c:0b:e7:de:04:9a:6c:13:87:dd:af:f7:72:b0:2f:
46:4a:f4:f2:0a:bc:6b:26:fa:e3:62:f9:15:b5:b5:
90:05:21:17:fe:b7:c1:2d:ce:d5:a8:61:37:15:ec:
cd:48:d6:a3:56:c6:e7:04:46:2c:43:c3:58:37:29:
0e:58:83:78:be:8b:f6:02:a5:f9:f8:ef:2c:2d:c8:
a3:74:a7:df:91:8f:38:5f:f2:45:15:7c:a2:ef:92:
af:fd:f4:d1:a4:ee:e9:80:fd:45:fe:45:c3:55:7a:
27:fc:ea:d4:e4:3f:34:44:bc:cd:02:5d:26:23:02:
6b:02:05:be:3b:a2:f1:07:fd:80:49:e5:1b:a4:54:
b0:36:e0:b7:df:07:da:a7:e6:c9:ce:42:d2:f0:98:
c2:02:2f:cc:bb:26:0e:d5:84:91:25:9d:53:5e:03:
48:93:e7:04:90:2a:0a:9f:32:e4:7b:32:50:54:5e:
28:e9:ca:a8:80:1f:f8:5d:8d:ca:94:ab:89:68:4b:
6b:80:a2:31:d2:11:df:e7:4d:52:2f:79:e9:0a:a0:
78:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C5:61:8E:6A:4B:8F:62:CD:34:3A:4E:57:C1:F1:7A:DA:1B:EA:47
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tsVhjmpLj2LNNDpOV8Hxetob6kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.51.0/24
151.243.12.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:50:92:bd:92:36:96:eb:6b:e0:30:82:5a:54:88:47:77:3c:
7a:f0:c3:da:80:f5:a5:55:0a:6f:53:5c:7b:bc:e1:c1:8e:37:
31:e4:f8:e2:99:aa:7d:84:24:78:e5:46:1f:1a:f9:10:01:20:
88:21:5b:d7:d9:64:b9:f6:00:28:9e:1a:e7:6b:59:1e:e2:55:
28:0b:46:72:33:c4:18:f6:28:72:0c:72:1e:51:42:7e:32:8a:
8a:5a:7b:1f:59:0e:a9:c6:fd:37:22:5a:47:e6:8b:1b:f1:17:
cf:90:08:7e:58:15:4e:2d:6a:37:21:42:56:75:af:74:40:e7:
31:2c:7a:27:bd:44:dd:d6:e1:a1:c5:eb:14:47:99:0b:e6:08:
19:94:9d:66:5c:e5:a2:cd:f6:0d:87:4e:79:27:3a:ff:c5:6c:
16:16:ad:42:0f:81:5c:75:e4:73:bf:1f:91:f1:59:ab:03:ee:
af:a4:49:b3:eb:6a:01:e1:ac:d3:0e:2e:2d:c0:e6:c9:d9:3b:
3e:76:c0:d6:14:d3:fb:a5:f0:3b:f0:d7:c8:d2:d3:a4:dc:bd:
83:85:80:4a:12:da:ff:98:fc:77:57:99:1e:89:3c:e3:85:28:
2c:7b:3f:93:ef:eb:a2:de:b6:a4:e2:b9:07:e6:14:d3:1a:ea:
33:cc:11:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:18:08 2025 by rpki-client