Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/x_PHy1ZCSKQDpqGfTP49UMl4wfg.roa
File: x_PHy1ZCSKQDpqGfTP49UMl4wfg.roa (raw, json)
Hash identifier: 8nLBBSnuO2F5q1RYT/JnfgfBuhhTUL2asyIhBYhQrrY=
Subject key identifier: C7:F3:C7:CB:56:42:48:A4:03:A6:A1:9F:4C:FE:3D:50:C9:78:C1:F8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0193E3A68132797BC57A6B9A99701A172ED5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/x_PHy1ZCSKQDpqGfTP49UMl4wfg.roa
Signing time: Fri 20 Dec 2024 10:39:20 +0000
ROA not before: Fri 20 Dec 2024 10:39:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137235
IP address blocks: 151.243.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e3:a6:81:32:79:7b:c5:7a:6b:9a:99:70:1a:17:2e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 20 10:39:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7f3c7cb564248a403a6a19f4cfe3d50c978c1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:aa:87:ec:73:d7:09:52:a1:c9:fc:20:3a:
35:c5:a3:3d:a6:c3:55:6b:4c:88:be:ed:bf:f6:13:
42:32:f0:70:4d:7e:44:03:66:f3:c0:c8:3b:bb:b9:
6e:b3:cd:9d:32:e3:94:92:36:df:1c:33:5a:c0:fc:
a8:4d:70:2d:f1:c1:d7:d6:c3:c6:7f:dc:4f:20:4a:
5a:a7:93:34:80:26:17:1e:e5:9c:1f:37:45:44:19:
11:8c:3e:0c:e4:a1:19:db:cc:77:66:2d:b8:e9:e0:
70:7f:96:0a:88:01:e5:5a:ed:ea:c8:1a:2c:25:52:
f6:f5:62:99:25:16:06:86:be:6f:a7:4c:ff:6f:2e:
4b:a8:31:4c:5c:d7:d6:23:d6:c9:e4:ce:bc:1e:e1:
fe:d7:7c:8b:a5:b2:54:02:fb:b9:b2:fa:65:f9:9b:
7e:24:96:2c:3c:15:07:e3:66:61:fb:0e:25:c2:d8:
7e:2e:3e:34:ce:04:dc:8f:9a:cd:02:8a:74:47:0c:
c5:34:b4:9b:72:9b:da:eb:66:6f:05:12:b0:d8:3c:
da:41:b3:6d:fa:e6:d3:c0:ba:87:a8:50:9d:f8:24:
b8:80:ad:81:09:68:19:fb:83:0f:94:03:2e:e8:88:
ba:23:5e:da:bf:01:04:06:a8:aa:bb:26:1e:7f:76:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F3:C7:CB:56:42:48:A4:03:A6:A1:9F:4C:FE:3D:50:C9:78:C1:F8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/x_PHy1ZCSKQDpqGfTP49UMl4wfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.255.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c6:2c:29:92:37:a2:af:c6:cb:a2:0d:f0:81:85:22:b2:97:
0f:58:84:b1:d4:d9:56:f4:6b:8f:ab:29:2b:64:9f:37:b2:ea:
38:4c:ac:74:36:60:98:b6:2c:e7:86:c4:8a:85:b7:37:5f:b2:
b4:48:b4:18:b5:eb:7b:67:8d:f4:1c:1a:bc:05:f9:2b:0b:df:
dd:25:07:3c:bd:9e:41:d2:c7:a8:72:33:d6:3b:7f:eb:8c:ee:
55:ee:64:ea:3e:a2:5e:49:c4:09:52:ac:a7:ce:c7:09:68:92:
e1:1d:8c:d7:38:c4:09:ff:06:f4:95:a9:d2:95:04:0c:31:42:
f0:bb:87:e1:f6:e1:e1:41:ea:12:70:4d:17:23:87:c4:de:91:
2c:0f:07:c8:bb:bf:da:a4:52:06:16:e3:2d:a2:98:a7:42:4b:
2a:d9:18:06:56:97:ae:61:d1:53:36:3f:02:d5:82:83:00:e7:
d6:43:8b:11:1e:38:61:a2:d5:6a:c8:18:82:8e:46:98:5a:90:
3e:7a:8a:c7:e2:71:54:91:88:87:da:98:04:1b:fc:ea:aa:6d:
73:61:c0:db:f8:1f:94:b4:7c:3e:1e:dd:da:5c:0b:86:da:5e:
40:5e:fd:49:fb:d0:8e:4a:c8:cc:95:a5:b7:2b:9d:67:ba:fd:
6b:0a:31:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:09 2025 by rpki-client