Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SD7KhzE9UU7oLM4vcPDE9yjYHwM.roa
File: SD7KhzE9UU7oLM4vcPDE9yjYHwM.roa (raw, json)
Hash identifier: lTWMFfc7Xv3zSCrj6G+gAhu0f5hMLQwRXOYdoxwQ8EY=
Subject key identifier: 48:3E:CA:87:31:3D:51:4E:E8:2C:CE:2F:70:F0:C4:F7:28:D8:1F:03
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019423D7FE48FBA0B5FDEBF75BF08A1E245C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SD7KhzE9UU7oLM4vcPDE9yjYHwM.roa
Signing time: Wed 01 Jan 2025 21:49:05 +0000
ROA not before: Wed 01 Jan 2025 21:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210644
IP address blocks: 150.241.64.0/24 maxlen: 24
150.241.65.0/24 maxlen: 24
150.241.66.0/24 maxlen: 24
150.241.67.0/24 maxlen: 24
150.241.68.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
150.241.70.0/24 maxlen: 24
150.241.71.0/24 maxlen: 24
150.241.72.0/24 maxlen: 24
150.241.73.0/24 maxlen: 24
150.241.74.0/24 maxlen: 24
150.241.75.0/24 maxlen: 24
150.241.76.0/24 maxlen: 24
150.241.77.0/24 maxlen: 24
150.241.78.0/24 maxlen: 24
150.241.79.0/24 maxlen: 24
150.241.80.0/24 maxlen: 24
150.241.81.0/24 maxlen: 24
150.241.82.0/24 maxlen: 24
150.241.83.0/24 maxlen: 24
150.241.84.0/24 maxlen: 24
150.241.85.0/24 maxlen: 24
150.241.86.0/24 maxlen: 24
150.241.87.0/24 maxlen: 24
150.241.88.0/24 maxlen: 24
150.241.89.0/24 maxlen: 24
150.241.90.0/24 maxlen: 24
150.241.91.0/24 maxlen: 24
150.241.92.0/24 maxlen: 24
150.241.93.0/24 maxlen: 24
150.241.94.0/24 maxlen: 24
150.241.95.0/24 maxlen: 24
150.241.96.0/24 maxlen: 24
150.241.97.0/24 maxlen: 24
150.241.98.0/24 maxlen: 24
150.241.99.0/24 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 03:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fe:48:fb:a0:b5:fd:eb:f7:5b:f0:8a:1e:24:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 1 21:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=483eca87313d514ee82cce2f70f0c4f728d81f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:22:b1:20:41:0c:06:86:a5:89:f8:86:7f:
d7:c4:ae:3c:83:18:da:9b:8d:ea:9c:6e:63:ee:b8:
ad:80:36:15:b0:46:5a:43:8a:54:3c:81:8e:3e:97:
c4:47:57:89:d0:36:73:b8:b9:0d:54:cc:05:a5:c3:
64:3c:bc:73:7e:31:f1:95:d0:09:4c:cb:cb:87:49:
7a:30:25:28:83:b4:f9:6d:b4:e5:03:f3:3a:51:be:
75:b2:14:e9:f9:d9:86:09:5f:64:3a:c6:d4:b1:46:
2b:7c:17:70:5d:b0:4a:78:1b:45:99:91:34:5f:b4:
80:06:44:ed:f1:4b:fa:7b:20:83:57:d2:36:4d:a1:
16:a1:55:14:c4:79:53:88:2b:1e:a2:81:f4:69:62:
d4:44:a2:b7:b6:c0:2a:59:a4:ca:4f:b5:ad:a2:50:
d0:61:ef:77:4e:97:25:ab:ad:c0:6a:d5:ed:b8:32:
1f:18:6b:56:90:8e:e2:23:6a:d4:be:5f:04:79:7d:
3e:24:a5:0e:df:04:e5:1f:4b:fe:7b:99:26:2a:f8:
f5:92:e1:39:b5:07:d1:ec:a3:e8:b2:16:b4:e8:d6:
34:5f:18:4b:76:34:f4:27:92:88:96:81:e9:7a:75:
2f:5e:95:d0:0a:2c:3d:77:3a:6d:6a:eb:08:d2:d4:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:3E:CA:87:31:3D:51:4E:E8:2C:CE:2F:70:F0:C4:F7:28:D8:1F:03
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SD7KhzE9UU7oLM4vcPDE9yjYHwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.64.0-150.241.103.255
Signature Algorithm: sha256WithRSAEncryption
0e:f4:dd:c0:c2:b3:4d:f9:c4:2f:c9:e7:c4:11:13:ba:6c:23:
e9:4d:d7:d8:46:66:07:b3:d5:5e:a3:1f:e8:49:c1:3f:46:19:
67:22:9f:f8:b9:f1:37:27:27:6b:99:da:af:62:97:2d:40:8b:
4c:b8:fa:12:7b:c8:22:7f:81:50:35:3a:52:15:1d:d5:41:88:
ab:a0:a2:a4:05:b1:7a:2d:d0:d2:f1:06:86:86:b1:3b:22:a3:
d0:9e:8e:ad:24:80:5a:68:30:30:f1:75:91:3a:30:1a:96:74:
c2:08:e6:a2:64:2f:cc:89:8f:fc:f1:fb:ef:77:40:70:47:3e:
db:59:eb:18:6e:e6:db:53:3a:6b:0b:5c:94:1f:99:1e:0b:da:
5f:fd:0c:3a:54:55:d1:d3:93:7f:d5:d2:ab:a7:ec:fc:25:79:
97:1e:06:de:79:b1:52:52:74:84:aa:59:b6:38:4f:25:82:b6:
4a:eb:9a:9b:30:c0:f5:88:e6:7a:37:59:a7:b3:ee:db:82:21:
0c:57:b3:09:39:fb:bd:d7:bd:9f:85:08:e7:51:1b:b6:d1:70:
81:c7:ac:13:c1:1d:a7:34:d2:fa:98:98:c4:07:d3:1f:ef:9b:
37:79:45:b8:76:02:12:0b:8b:10:e9:cb:04:9c:a6:96:14:54:
6d:e0:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:02 2025 by rpki-client