Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DepPPyIyjpf3FrCRYA_rthZo2hA.roa
File: DepPPyIyjpf3FrCRYA_rthZo2hA.roa (raw, json)
Hash identifier: aEamuesKy4Z49JZwWEZxFbqtpAneGZsdEd+vMlQnsAE=
Subject key identifier: 0D:EA:4F:3F:22:32:8E:97:F7:16:B0:91:60:0F:EB:B6:16:68:DA:10
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019791A07D841DEB4D3A81A6C1D098266BD5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DepPPyIyjpf3FrCRYA_rthZo2hA.roa
Signing time: Sat 21 Jun 2025 08:35:03 +0000
ROA not before: Sat 21 Jun 2025 08:35:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213690
IP address blocks: 151.245.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Jun 2025 15:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:a0:7d:84:1d:eb:4d:3a:81:a6:c1:d0:98:26:6b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 21 08:35:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dea4f3f22328e97f716b091600febb61668da10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:e4:b8:f1:7b:66:ac:bc:c8:c0:8f:57:2a:
5a:8d:97:c5:6d:03:13:cf:f0:ce:bb:60:70:d1:ce:
d2:e4:43:d2:66:74:a8:4a:1c:a4:9e:cb:81:82:aa:
77:4f:12:79:64:5e:52:0f:6a:00:a3:1d:2c:40:4f:
f3:f8:bd:a1:9e:fa:03:31:84:3f:26:17:48:4b:39:
66:26:00:58:5e:62:9d:f9:f5:d6:1b:2b:28:dd:9c:
9e:a8:d2:7d:df:d2:9d:ae:fd:b0:54:d4:72:35:33:
bf:27:ea:a3:b7:31:c6:16:60:8b:25:e0:43:7d:6d:
d8:87:49:57:13:38:67:44:d5:04:13:d9:c9:40:4d:
f2:d7:14:b7:43:fe:b0:33:ce:21:3a:2a:46:39:8a:
79:a1:83:18:ac:91:6d:83:a7:91:0c:df:af:4f:3c:
80:d9:6c:b9:8e:11:a6:e0:9d:68:80:2b:3a:0b:a5:
62:16:dd:8c:68:9b:6d:3f:ab:65:d3:d8:9d:96:9e:
e9:1a:70:da:68:d9:4c:80:be:8e:ac:c1:2e:42:6a:
e1:09:a7:70:13:b4:67:21:87:1c:58:58:31:58:22:
a4:13:82:c8:54:20:3d:d7:9b:51:5e:f4:3f:80:f7:
e0:3f:bc:6b:4b:39:1c:5a:15:2e:f6:79:23:eb:6e:
54:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EA:4F:3F:22:32:8E:97:F7:16:B0:91:60:0F:EB:B6:16:68:DA:10
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DepPPyIyjpf3FrCRYA_rthZo2hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.113.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:1f:06:2f:4e:07:d6:34:30:19:a6:5a:4b:34:ea:ab:fe:c4:
35:e1:e9:21:3a:6a:62:89:09:13:14:c7:3b:98:3f:cb:73:9c:
84:8b:82:52:72:86:78:95:6c:10:a3:e2:00:54:99:3f:58:05:
06:e2:7a:72:bf:09:71:72:12:87:48:74:0f:90:90:38:75:0c:
72:fa:be:64:dd:45:46:b6:84:86:a4:fe:1d:c0:38:96:cd:4c:
49:9f:fa:98:a7:73:31:ac:6a:1f:19:80:11:dd:0b:50:b3:5f:
f0:36:a1:48:c6:45:e6:f3:7b:52:f2:34:56:58:eb:0a:92:8b:
34:ad:3c:ec:38:78:9e:39:49:ef:93:64:00:72:11:34:a6:6c:
b2:d7:c8:40:0b:48:b9:eb:a0:a3:24:8f:1d:08:f4:46:c3:83:
b4:9e:c7:a6:7d:bb:ed:bc:c6:a4:7f:dd:8f:2c:22:ec:9b:b4:
03:30:12:56:42:44:06:b9:05:54:8e:2c:15:6f:7d:91:8d:cd:
28:bb:c8:90:9e:2f:a1:a6:f9:d0:61:10:9f:59:23:98:fd:4f:
66:1e:5b:f9:bc:fb:d9:9f:c1:f5:98:68:7f:10:23:5f:e4:42:
1f:71:74:31:44:d8:2d:b4:5e:40:4e:5e:d6:13:1e:31:46:e7:
a0:0f:f4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:29:26 2025 by rpki-client