Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KQB8hEBhThUrrLn4wrUc9_ENOlA.roa
File: KQB8hEBhThUrrLn4wrUc9_ENOlA.roa (raw, json)
Hash identifier: jOm8ToHx2LaSOLBUdwUMTUqVdToFap7m0TRir8+NBDs=
Subject key identifier: 29:00:7C:84:40:61:4E:15:2B:AC:B9:F8:C2:B5:1C:F7:F1:0D:3A:50
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019468069DD8482BBB7BCD439D5059C59ADC
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KQB8hEBhThUrrLn4wrUc9_ENOlA.roa
Signing time: Wed 15 Jan 2025 03:34:11 +0000
ROA not before: Wed 15 Jan 2025 03:34:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 150.241.64.0/24 maxlen: 24
150.241.65.0/24 maxlen: 24
150.241.66.0/24 maxlen: 24
150.241.67.0/24 maxlen: 24
150.241.68.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
150.241.70.0/24 maxlen: 24
150.241.71.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.76.0/24 maxlen: 24
150.241.77.0/24 maxlen: 24
150.241.78.0/24 maxlen: 24
150.241.79.0/24 maxlen: 24
150.241.80.0/24 maxlen: 24
150.241.81.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.84.0/24 maxlen: 24
150.241.85.0/24 maxlen: 24
150.241.86.0/24 maxlen: 24
150.241.87.0/24 maxlen: 24
150.241.88.0/24 maxlen: 24
150.241.89.0/24 maxlen: 24
150.241.90.0/24 maxlen: 24
150.241.91.0/24 maxlen: 24
150.241.92.0/24 maxlen: 24
150.241.93.0/24 maxlen: 24
150.241.94.0/24 maxlen: 24
150.241.95.0/24 maxlen: 24
150.241.96.0/24 maxlen: 24
150.241.97.0/24 maxlen: 24
150.241.98.0/24 maxlen: 24
150.241.99.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.193.0/24 maxlen: 24
193.23.194.0/24 maxlen: 24
193.23.195.0/24 maxlen: 24
193.23.196.0/24 maxlen: 24
193.23.197.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.199.0/24 maxlen: 24
193.23.200.0/24 maxlen: 24
193.23.201.0/24 maxlen: 24
193.23.202.0/24 maxlen: 24
193.23.203.0/24 maxlen: 24
193.23.204.0/24 maxlen: 24
193.23.205.0/24 maxlen: 24
193.23.206.0/24 maxlen: 24
193.23.207.0/24 maxlen: 24
193.23.208.0/24 maxlen: 24
193.23.209.0/24 maxlen: 24
193.23.210.0/24 maxlen: 24
193.23.211.0/24 maxlen: 24
193.23.212.0/24 maxlen: 24
193.23.213.0/24 maxlen: 24
193.23.214.0/24 maxlen: 24
193.23.215.0/24 maxlen: 24
193.23.216.0/24 maxlen: 24
193.23.217.0/24 maxlen: 24
193.23.218.0/24 maxlen: 24
193.23.219.0/24 maxlen: 24
193.23.220.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
193.23.222.0/24 maxlen: 24
193.23.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 17:44:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:68:06:9d:d8:48:2b:bb:7b:cd:43:9d:50:59:c5:9a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 15 03:34:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=29007c8440614e152bacb9f8c2b51cf7f10d3a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:b3:33:d0:86:e0:ba:a9:b4:4d:6e:66:d7:
d8:2a:87:e8:55:ea:2b:67:66:7d:ad:4c:6d:7e:a4:
95:4e:74:9a:fa:bd:c6:99:b9:9b:ed:9b:fe:f1:db:
bc:f8:04:25:a1:32:0a:99:e7:42:ad:92:a8:e0:5b:
07:81:09:cf:c6:49:88:1d:89:21:04:4d:f1:c1:0c:
70:4d:24:10:48:50:d5:9f:b0:79:b9:84:e3:a3:e2:
fc:58:a4:0c:b1:4d:7c:f6:ee:c1:6e:11:95:ac:73:
63:47:44:96:70:bb:81:6d:b5:9b:6c:78:d0:10:e8:
e6:11:c2:f9:dc:4a:8c:2d:ec:29:38:c9:d5:d8:d8:
44:c0:76:19:47:02:43:a3:6a:0a:30:e0:5d:97:0d:
b7:c0:22:25:74:0d:87:89:6b:a4:50:62:e0:d7:ad:
7c:ab:ab:a3:1d:b2:c0:bf:ee:fa:90:68:4a:79:3d:
4a:f8:26:e6:ae:75:c9:67:86:07:41:62:c2:57:2a:
a6:ac:ba:f8:70:13:0e:a5:ce:c9:78:fa:d4:5a:c6:
12:e6:a9:07:88:10:2a:3c:0e:36:6c:3f:95:13:af:
e0:03:91:3b:d5:0f:cf:83:aa:0a:ba:17:a9:99:e2:
49:88:f9:c7:ab:79:30:d2:c2:c1:db:55:7c:31:e6:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:00:7C:84:40:61:4E:15:2B:AC:B9:F8:C2:B5:1C:F7:F1:0D:3A:50
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KQB8hEBhThUrrLn4wrUc9_ENOlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.64.0-150.241.103.255
193.23.192.0/19
Signature Algorithm: sha256WithRSAEncryption
36:31:3d:9d:23:bb:77:c0:2a:b5:ff:44:4d:66:5a:17:48:e5:
96:c4:d5:70:12:f8:52:22:92:dc:7e:56:cb:94:b6:29:86:8b:
26:23:d1:5d:52:fb:76:97:3d:08:24:ec:6c:a2:d3:04:31:99:
3e:95:f8:c6:e5:8e:af:4a:d4:d4:45:5f:81:64:42:20:87:08:
6c:cb:27:c6:e7:0f:69:d9:f2:0b:2f:e8:21:e2:79:50:fe:1f:
be:c1:3d:f5:4e:aa:8f:4e:36:22:a7:55:cc:f4:df:b4:8b:9b:
df:c2:7c:19:bd:82:c0:37:a3:0d:f0:3b:2f:ac:d8:f2:02:b6:
7f:94:da:2f:3a:a8:55:ad:1b:6d:2b:65:30:08:a6:42:bf:a2:
c1:99:08:40:d1:20:8f:40:72:07:0f:83:49:47:85:d6:b2:09:
eb:4e:1a:e4:f1:85:68:bc:26:95:5d:e9:34:80:54:11:fd:8c:
36:01:36:c2:69:21:c0:39:e0:d8:63:3f:fb:f7:2f:05:1d:3f:
53:50:d5:2a:cf:d8:cc:6c:02:11:21:2d:29:b2:d7:01:20:7c:
33:39:24:99:63:c5:87:3b:7d:05:33:20:52:27:d0:0e:9a:d7:
0a:c7:fe:8f:37:49:42:80:ba:12:0b:67:a9:42:e4:0e:e9:24:
cb:c0:a5:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:09 2025 by rpki-client