Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/kEqd0Zl9i2RyR-XEzbsTMZKFsR0.roa
File: kEqd0Zl9i2RyR-XEzbsTMZKFsR0.roa (raw, json)
Hash identifier: j/exm4lmAL0F7X712Vs0sKaMmiRRg+KaxoVSQECDfZs=
Subject key identifier: 90:4A:9D:D1:99:7D:8B:64:72:47:E5:C4:CD:BB:13:31:92:85:B1:1D
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 0193DF928DBCE94FF1B767D64852257A766D
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/kEqd0Zl9i2RyR-XEzbsTMZKFsR0.roa
Signing time: Thu 19 Dec 2024 15:39:03 +0000
ROA not before: Thu 19 Dec 2024 15:39:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41960
IP address blocks: 151.248.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:92:8d:bc:e9:4f:f1:b7:67:d6:48:52:25:7a:76:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Dec 19 15:39:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=904a9dd1997d8b647247e5c4cdbb13319285b11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:7e:5c:68:ce:80:a1:a5:07:5b:65:3c:01:
08:04:4d:4b:f7:80:d3:06:84:05:28:7e:f4:55:b6:
5d:17:ba:8f:6a:4b:ac:55:6d:7c:e6:04:52:53:5c:
bd:cd:09:23:97:8c:14:41:0e:a5:16:88:ac:c3:24:
3a:0e:06:83:fa:34:33:bd:dd:7f:70:bb:20:0f:bb:
72:65:d5:1e:07:6d:5d:7a:fb:db:43:e7:0d:01:e5:
12:47:51:9a:5d:28:8e:4f:e6:e3:f7:6c:ff:2c:46:
cc:98:ae:c2:d1:7d:07:6c:08:e1:05:03:32:38:78:
ff:cc:05:44:88:bb:1b:81:a0:0d:97:b8:f4:cc:b9:
10:d6:8d:76:0f:e0:ce:5f:92:50:93:1f:53:6f:05:
75:4e:f9:1e:18:0f:ba:f6:b2:0a:1c:e9:05:c6:32:
5c:90:20:8e:b0:e9:31:39:a7:1f:72:8f:7f:d9:9b:
1a:47:45:ef:19:ee:6f:53:1c:de:d2:e7:3c:b8:b9:
93:ba:cc:d7:eb:74:88:b9:21:1b:63:db:7a:7f:19:
d2:22:a0:c3:9f:65:52:0a:75:0f:48:12:b5:8c:ff:
41:8e:0c:95:b0:a8:b7:d9:3b:99:bd:cf:e9:11:ce:
39:64:dc:f2:b8:02:07:33:79:bf:ff:55:73:20:44:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4A:9D:D1:99:7D:8B:64:72:47:E5:C4:CD:BB:13:31:92:85:B1:1D
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/kEqd0Zl9i2RyR-XEzbsTMZKFsR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:9f:45:03:bc:bc:83:bf:e7:a2:cd:ec:75:f3:31:25:b6:e4:
79:3d:18:cd:25:07:8c:77:6a:c2:ee:81:7d:4e:a1:70:e8:89:
3f:c6:20:4d:0a:e3:76:63:c7:85:5f:98:8d:09:f9:0b:aa:0a:
3d:46:b3:fc:b7:92:5c:ce:1d:f5:4e:a8:b5:30:e7:1b:03:cd:
5b:ab:29:e5:2f:3e:0c:14:98:58:2d:c3:4a:9d:83:03:60:99:
92:ca:d9:e4:72:4e:12:ac:c4:61:a0:45:e9:21:7f:b6:b6:b8:
84:70:1d:06:ba:3c:4d:aa:2f:dd:72:2f:06:12:15:c4:e9:5f:
ef:55:b3:e0:be:bb:a3:43:b0:6f:58:8b:dd:12:f5:73:86:1d:
2c:dd:67:45:d5:a0:36:2d:cc:14:fb:3a:9d:19:1c:00:16:af:
3c:c9:70:b6:7b:9c:71:bf:c0:ad:63:62:59:26:7b:0d:16:4e:
5f:44:6b:ec:95:b7:15:1f:4b:7e:64:ca:ae:c5:16:51:2b:0a:
13:b4:e1:1f:04:56:af:8a:31:5b:50:98:40:fe:7d:36:e2:ed:
19:8f:54:33:64:b6:6d:8b:22:1a:bc:14:8e:a0:60:c4:b7:fe:
86:d7:25:07:80:fd:b0:72:da:23:8b:ba:a8:82:a9:a0:d6:11:
46:2f:90:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:07:29 2025 by rpki-client