Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yAoDOI8mkvavA07SbeoX977sMhU.roa
File: yAoDOI8mkvavA07SbeoX977sMhU.roa (raw, json)
Hash identifier: L95L7fpv4eDoAdAOsLQys2IOwvdn1qIhndL5FrX9wGc=
Subject key identifier: C8:0A:03:38:8F:26:92:F6:AF:03:4E:D2:6D:EA:17:F7:BE:EC:32:15
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01942036F18A890F79260B1CB645B1FEC406
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yAoDOI8mkvavA07SbeoX977sMhU.roa
Signing time: Wed 01 Jan 2025 04:54:19 +0000
ROA not before: Wed 01 Jan 2025 04:54:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4637
IP address blocks: 151.242.1.0/24 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.7.0/24 maxlen: 24
151.242.10.0/24 maxlen: 24
151.242.12.0/24 maxlen: 24
151.242.15.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.23.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.242.29.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:36:f1:8a:89:0f:79:26:0b:1c:b6:45:b1:fe:c4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 04:54:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c80a03388f2692f6af034ed26dea17f7beec3215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:a1:6f:a5:fd:1d:19:a0:8f:1a:ec:0e:8c:
cc:c5:0d:e5:00:dd:6f:b3:43:d6:76:6b:14:8f:a8:
e9:35:0b:b0:5a:92:ff:6d:99:72:a8:45:55:1a:2d:
4f:a7:e4:e2:6d:df:2c:38:7c:e4:5f:f8:a4:5f:4e:
15:26:68:bd:b0:36:97:52:3c:e8:ba:81:fb:a7:76:
32:bb:7d:7c:4d:56:85:05:21:53:6b:9d:1f:07:60:
6c:f1:31:c3:b3:73:53:d2:f4:05:09:3d:01:36:6c:
c0:64:e8:75:ef:4e:24:8b:df:82:eb:7f:9a:b6:12:
35:55:a8:d3:08:54:7b:f0:85:32:80:d8:0f:75:c8:
fd:bf:af:b8:59:f1:9d:13:6d:f0:87:ed:96:4a:97:
72:bf:79:18:02:c9:be:97:ed:e9:22:17:0a:2e:a4:
29:0e:ab:96:4a:0b:3a:22:6b:a0:ee:2c:45:d6:84:
39:b8:bb:1d:ca:d4:5b:fe:27:38:b0:6d:35:09:02:
05:27:9e:47:48:f0:57:bf:f7:cc:62:a0:f6:29:83:
5e:37:71:bc:b8:12:4e:b5:45:c0:72:06:08:d0:7e:
eb:81:04:21:d2:03:62:0e:5e:24:e1:74:e0:92:a9:
f6:a8:99:79:b7:b8:46:4e:a7:4b:6b:17:2c:3e:56:
f1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0A:03:38:8F:26:92:F6:AF:03:4E:D2:6D:EA:17:F7:BE:EC:32:15
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yAoDOI8mkvavA07SbeoX977sMhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.1.0/24
151.242.4.0/24
151.242.7.0/24
151.242.10.0/24
151.242.12.0/24
151.242.15.0/24
151.242.17.0/24
151.242.20.0/24
151.242.23.0/24
151.242.26.0/24
151.242.29.0/24
151.242.32.0/24
Signature Algorithm: sha256WithRSAEncryption
72:57:2a:55:35:e4:31:c3:33:04:07:a2:74:6a:7a:81:6f:45:
b3:3e:d0:19:e3:79:dd:a4:c8:40:28:76:22:5b:d0:bf:d0:a1:
c9:e6:0d:5e:a7:52:8c:69:7f:7c:23:2f:45:66:68:df:9f:56:
88:9a:02:1d:1d:9f:c9:7e:28:da:d1:50:ce:89:19:6f:28:1f:
e3:cd:9d:80:b6:4a:1a:55:53:49:4e:26:17:71:7c:f6:e9:6a:
08:3b:38:ac:e4:ef:d9:96:2a:10:8f:10:ba:35:f5:77:fb:50:
6c:e1:98:96:21:54:5c:b4:96:35:73:f3:2c:a7:5e:c8:b7:ae:
44:cb:81:59:9d:4a:f6:39:a3:ae:be:75:e5:17:79:37:25:55:
50:aa:b4:7b:69:a0:04:33:3f:6e:86:8c:21:ef:82:41:b0:cf:
c0:2b:04:9f:50:8f:fd:2f:cd:49:34:7d:4b:59:47:47:5c:fc:
e4:df:b5:ef:d0:87:b2:c8:d6:a3:1d:5c:f5:c1:8d:87:9c:b4:
df:bf:20:1f:d9:4a:e5:57:09:92:4e:1c:11:ec:88:f0:7b:7f:
5a:e2:4b:68:55:21:0b:00:c2:6e:a2:30:0c:7d:ff:d4:3a:2a:
97:c4:0d:8d:69:7f:84:80:1f:fc:7a:c1:8d:80:67:ae:5b:c9:
20:50:b9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:09:15 2025 by rpki-client