Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xcr-0xjl59OPw8EnWZxPn6xqCrU.roa
File: xcr-0xjl59OPw8EnWZxPn6xqCrU.roa (raw, json)
Hash identifier: seHgREmosOX1o1JvMy15ut7FH0/y+DKwNd1N9LzgnZA=
Subject key identifier: C5:CA:FE:D3:18:E5:E7:D3:8F:C3:C1:27:59:9C:4F:9F:AC:6A:0A:B5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01955B1C0F0E1F8713B262107D2F5444A846
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xcr-0xjl59OPw8EnWZxPn6xqCrU.roa
Signing time: Mon 03 Mar 2025 08:25:20 +0000
ROA not before: Mon 03 Mar 2025 08:25:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.242.57.0/24 maxlen: 24
151.243.44.0/22 maxlen: 22
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
151.243.184.0/22 maxlen: 22
151.243.204.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 05 Mar 2025 07:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:1c:0f:0e:1f:87:13:b2:62:10:7d:2f:54:44:a8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 3 08:25:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5cafed318e5e7d38fc3c127599c4f9fac6a0ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fe:a8:17:30:00:b7:58:e9:24:90:e0:1b:8b:
c6:af:71:f2:c5:74:16:70:f7:6d:58:e1:e5:13:fb:
c6:a9:24:db:be:75:28:d3:16:dc:d2:f2:a5:88:6e:
58:91:8f:4a:91:1e:71:90:9a:ce:1e:8c:9f:08:9d:
84:0e:53:e9:16:b6:ab:c7:75:66:9f:30:19:96:7e:
e0:58:17:2d:95:dc:01:78:65:5f:af:49:37:ca:5f:
f8:24:09:7d:59:cd:87:25:58:be:00:26:e8:a3:f0:
ba:6f:f8:00:64:86:cc:b4:98:a3:34:73:37:e3:40:
e9:9a:31:5a:41:1a:35:33:43:a8:e8:e0:4b:c6:eb:
f6:15:e6:08:ea:a2:7f:53:37:fc:e0:87:69:fa:f2:
d0:30:f3:9f:f8:7a:22:78:a4:20:f8:95:46:51:02:
0c:ee:ea:6c:b1:22:f8:9d:16:69:fc:32:b8:f7:8a:
72:61:1c:c4:59:2f:aa:54:60:bd:f7:c3:78:0b:cf:
f7:bc:51:e8:eb:a3:47:cc:e6:65:9f:7d:8f:5a:2b:
65:c8:a9:34:a1:7d:4f:cc:6f:a6:42:a7:e8:e6:b3:
e3:8f:91:98:54:24:40:05:fd:ee:c1:81:30:5a:3b:
8c:05:95:12:f3:4d:00:1a:d3:18:4d:80:42:0f:da:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CA:FE:D3:18:E5:E7:D3:8F:C3:C1:27:59:9C:4F:9F:AC:6A:0A:B5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xcr-0xjl59OPw8EnWZxPn6xqCrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.57.0/24
151.243.44.0/22
151.243.105.0/24
151.243.159.0/24
151.243.184.0/22
151.243.204.0/22
Signature Algorithm: sha256WithRSAEncryption
91:29:b1:70:80:60:95:f8:ae:e4:a5:9d:91:2a:b6:5d:3e:10:
6d:33:06:ed:e3:c4:3f:72:e1:43:0c:46:5f:b4:87:42:17:51:
dd:b5:12:64:a1:9b:1c:c9:ff:1e:4e:82:53:94:af:80:0c:6b:
d8:7a:65:ac:50:6a:86:b3:40:ee:6c:c1:53:aa:80:6c:38:49:
95:c6:2b:6c:d2:72:21:24:0d:73:ee:f8:a3:92:24:39:b6:1f:
10:7f:6b:9b:c8:28:8f:85:a3:68:af:40:a7:f0:9e:3c:0b:b0:
18:c4:b5:a1:d7:d3:05:52:14:30:4f:42:00:de:a9:df:ff:fa:
2f:13:e8:a0:13:bb:0f:9c:9a:99:ba:b7:97:7f:d4:b1:4e:87:
b9:ea:99:c3:36:5a:e6:6c:38:86:06:0e:4f:6f:4e:1c:a0:22:
27:1c:80:a0:63:c5:ea:04:5d:65:5a:38:ee:ab:2b:03:ad:5a:
22:50:3a:e0:62:9c:11:32:18:8d:55:32:ec:85:e0:0f:d0:b1:
c4:4a:ca:f0:0d:3b:03:c2:5b:69:77:18:42:9d:b8:7a:2d:54:
ad:3e:cd:e2:19:d9:b5:89:94:e6:af:97:33:2a:84:00:a2:6a:
f5:d3:bb:58:33:be:3c:2a:26:75:b9:7c:06:b9:c8:b5:df:74:
0d:db:4d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:52:53 2025 by rpki-client