Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/As9M5lmUz9_c_paMMlPHWCpbZK4.roa
File: As9M5lmUz9_c_paMMlPHWCpbZK4.roa (raw, json)
Hash identifier: k59R0AENwWOWCFhNt++STxyshpxIv/MV06Sv5pQq0eY=
Subject key identifier: 02:CF:4C:E6:59:94:CF:DF:DC:FE:96:8C:32:53:C7:58:2A:5B:64:AE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D9547FA6C7EAC2D3971B3B4EFEAE43BC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/As9M5lmUz9_c_paMMlPHWCpbZK4.roa
Signing time: Sat 05 Jul 2025 06:44:42 +0000
ROA not before: Sat 05 Jul 2025 06:44:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 151.243.215.0/24 maxlen: 24
151.244.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Jul 2025 04:43:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:54:7f:a6:c7:ea:c2:d3:97:1b:3b:4e:fe:ae:43:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 5 06:44:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02cf4ce65994cfdfdcfe968c3253c7582a5b64ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:bf:6a:01:77:61:88:f7:75:ff:e2:ce:38:
a7:50:b9:5b:f8:82:28:f2:08:b7:22:3c:70:b1:54:
91:b7:06:64:e5:36:b2:3f:c2:41:9e:c0:0b:38:b0:
3c:32:54:7c:06:89:31:8c:f4:7a:35:0b:5f:62:4f:
ee:67:bc:d0:2c:31:be:c5:d3:57:fd:86:3d:7e:8a:
39:e5:37:ff:59:2c:e0:bd:42:9c:1d:fe:d2:cd:2d:
b2:c6:06:9f:f9:c0:5f:b8:1f:da:11:7c:46:fa:b7:
b7:4d:8f:2c:5c:f7:ce:19:d0:93:37:23:b2:85:4a:
e9:b9:73:a6:ea:12:03:f7:09:ab:d2:64:29:e2:de:
93:e5:3b:7d:7b:88:79:7f:45:6b:d1:18:28:9d:d1:
99:5f:90:f9:e4:5b:47:a7:8e:e2:b9:13:57:0d:85:
f9:a2:d8:a6:ba:85:c6:54:43:9b:07:60:3b:35:0d:
83:84:ae:b3:0e:c0:7d:e4:70:a9:c0:5a:5c:b5:ae:
ad:74:0b:13:91:9a:e1:f4:37:39:40:1c:a5:0f:f1:
a4:bc:bd:0e:b8:7d:fd:ba:d1:1a:eb:d6:04:b6:12:
cb:58:6c:55:f3:ac:42:ce:a9:d6:e4:c7:f2:8b:9f:
33:ca:39:89:a7:5b:5a:da:4b:aa:02:c6:b3:28:37:
46:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:4C:E6:59:94:CF:DF:DC:FE:96:8C:32:53:C7:58:2A:5B:64:AE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/As9M5lmUz9_c_paMMlPHWCpbZK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.215.0/24
151.244.231.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e5:32:a0:d3:1b:35:c4:ad:72:68:b3:47:b9:60:63:61:b1:
79:89:6c:0d:dc:4b:f8:a2:2f:00:5e:e2:fd:ca:50:51:8d:fe:
cd:89:13:2b:d1:7c:2c:2b:47:3a:81:9e:79:84:86:0d:23:34:
c0:a2:e5:6d:4e:36:a3:59:93:f0:a3:a5:66:c9:96:31:11:22:
30:d0:17:a5:9e:05:b8:c8:97:7d:34:ba:16:89:19:a2:84:9d:
92:4f:af:a2:c7:0f:e9:92:9f:da:a6:bd:99:64:19:67:75:29:
6a:a8:96:9f:96:ca:bb:ac:86:75:e3:e3:b1:a0:1c:22:14:c2:
d2:8a:f5:66:42:e4:cc:45:34:c9:3e:02:2a:ca:d0:ae:d9:b3:
c9:e1:4c:8e:20:29:a9:94:a0:e4:8f:41:69:ba:4a:23:ab:9d:
c2:37:44:62:c0:dc:e3:e4:47:ca:b1:fd:2f:dc:18:f3:93:5c:
20:91:08:ee:b2:a7:04:73:c7:31:c5:84:4b:46:e8:a5:6b:44:
c6:76:47:7b:26:0f:ef:a8:d3:55:03:3d:f6:b9:8c:37:f0:13:
db:9e:db:70:ed:2e:14:24:4d:fc:b4:10:91:90:3e:28:93:db:
a3:c5:cd:c1:70:6c:6a:6a:14:4e:f5:1b:a7:66:21:67:ed:c5:
03:01:b6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:41:18 2025 by rpki-client