Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7rCQl7_a17K6wjR97s4-S42p-lY.roa
File: 7rCQl7_a17K6wjR97s4-S42p-lY.roa (raw, json)
Hash identifier: C9M0GL4FjokQewhkpKs3Br3ZAIDUa0xND9wNnMzUO4s=
Subject key identifier: EE:B0:90:97:BF:DA:D7:B2:BA:C2:34:7D:EE:CE:3E:4B:8D:A9:FA:56
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019786EF0FE5DDBD3472244D7D56050974CC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7rCQl7_a17K6wjR97s4-S42p-lY.roa
Signing time: Thu 19 Jun 2025 06:45:03 +0000
ROA not before: Thu 19 Jun 2025 06:45:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 151.244.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jun 2025 07:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:ef:0f:e5:dd:bd:34:72:24:4d:7d:56:05:09:74:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 19 06:45:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeb09097bfdad7b2bac2347deece3e4b8da9fa56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:ef:d1:db:3f:94:43:35:2b:00:a1:fd:32:
91:ff:e9:8f:12:15:41:b4:7a:3b:f4:a6:69:bd:09:
45:00:d6:c3:99:4f:25:ce:2b:6e:a3:e0:c8:99:0f:
5c:c5:98:45:2e:14:8b:59:a7:87:4a:a2:ee:14:88:
42:32:95:1c:eb:21:79:24:81:0e:ae:6c:fe:72:64:
70:d9:9b:96:bb:a2:65:b3:c2:0d:18:f2:04:b8:1c:
fc:3d:c8:c2:f3:23:7b:d5:3c:0f:e8:af:b2:14:22:
b4:49:53:f9:2b:b4:dc:b3:20:ac:19:68:70:97:eb:
7d:1c:c7:0e:a8:14:f1:55:33:b0:c8:d0:22:fb:99:
f9:a8:05:c7:6b:83:a0:0d:f1:74:2c:2a:a5:91:0e:
cb:3d:b4:26:0f:6e:49:a3:ae:58:f8:40:6d:e0:cd:
3f:1c:a0:62:24:77:ac:c2:87:a2:38:34:67:b1:91:
46:64:1d:dd:51:86:f7:79:f3:08:a7:e1:18:8e:30:
fa:62:20:e0:51:75:2c:d7:0f:ed:a8:a5:c9:5f:ea:
38:d7:4c:57:00:9d:92:0d:40:ae:5f:33:68:da:9e:
0e:48:77:3f:6f:f2:d6:4e:54:75:8c:2c:26:62:91:
e5:c0:f2:25:03:da:12:14:4d:2c:06:a7:74:10:3d:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B0:90:97:BF:DA:D7:B2:BA:C2:34:7D:EE:CE:3E:4B:8D:A9:FA:56
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7rCQl7_a17K6wjR97s4-S42p-lY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.85.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:70:ea:d3:60:00:41:1b:03:e8:51:cc:b4:c2:75:5e:a4:06:
8d:95:87:3a:64:14:7a:9c:e6:70:e7:ce:25:9c:e5:62:58:5b:
b8:43:68:c7:e1:e4:b7:a2:f6:2e:44:21:6d:23:02:b8:78:ba:
04:c7:5a:0c:48:c9:22:ac:15:26:de:ff:d2:3f:13:52:09:de:
00:21:3c:09:02:ac:ab:da:6c:f2:2d:a8:6d:d6:c3:81:b0:b3:
40:72:be:b4:18:0e:31:6e:03:8a:3d:0a:cd:25:4f:51:f9:c9:
2a:25:13:ce:7e:07:f1:91:8d:bf:c9:99:8a:16:06:97:e4:f0:
68:19:d9:5c:b8:50:b0:91:26:d7:c5:96:5a:55:69:ad:3d:d3:
71:74:0d:ae:ca:12:69:a3:7f:03:14:05:50:ce:39:5c:0d:48:
e6:3f:79:08:44:95:e8:00:b9:d3:48:6d:ea:e8:e9:c6:24:74:
1f:0a:74:6b:d5:78:61:70:30:6e:31:c9:4a:e4:1a:07:7e:d9:
66:ed:f2:bc:4d:9d:7d:e6:a5:3a:1a:91:3c:11:c7:f1:7b:be:
6d:3f:17:50:51:c5:da:aa:4e:ee:7a:34:ed:52:e2:ba:c6:83:
cd:a4:17:93:ce:20:e5:02:0c:5f:97:fd:b4:a3:cf:b2:d4:c9:
14:26:d4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:10:33 2025 by rpki-client