Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G-ntpJvIBwzFsJeGpfAvGgoIVMI.roa
File: G-ntpJvIBwzFsJeGpfAvGgoIVMI.roa (raw, json)
Hash identifier: 4FMzsIESlcUStvrpaOebyHT1RclHR25/uZQJEKxlryo=
Subject key identifier: 1B:E9:ED:A4:9B:C8:07:0C:C5:B0:97:86:A5:F0:2F:1A:0A:08:54:C2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197AB7B71E0DD5C08AB4CC64659EDDB926F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G-ntpJvIBwzFsJeGpfAvGgoIVMI.roa
Signing time: Thu 26 Jun 2025 09:04:43 +0000
ROA not before: Thu 26 Jun 2025 09:04:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 151.243.35.0/24 maxlen: 24
151.243.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Jun 2025 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:7b:71:e0:dd:5c:08:ab:4c:c6:46:59:ed:db:92:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 26 09:04:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1be9eda49bc8070cc5b09786a5f02f1a0a0854c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:b9:c0:8f:3e:87:a9:4c:94:f6:64:76:d2:
2c:e7:e7:45:b7:9a:96:5e:56:ce:02:8c:f3:0b:6b:
87:fc:9c:2a:4d:3b:b1:62:35:e2:5e:ed:c1:81:5c:
77:77:99:54:ff:2f:66:c3:80:72:b6:29:cd:eb:54:
8f:cb:fe:f4:37:74:e3:a8:d2:c4:a5:fe:14:33:36:
60:65:2d:f8:28:62:77:0d:2a:01:f5:06:3d:9c:6f:
73:e5:0f:e6:2e:ec:6b:d4:8e:7a:b9:a0:53:88:c6:
04:d4:7a:22:76:22:6d:f5:32:3d:6d:5e:e9:8e:00:
e8:b8:68:49:3e:3a:7b:a2:60:7e:d4:42:83:14:3b:
99:44:08:81:3a:38:9e:47:c1:23:b0:b9:8d:a5:0c:
9e:43:0f:a2:0d:9d:3b:50:84:94:55:f2:a5:86:e7:
05:68:04:3a:3c:7f:c3:82:81:0e:45:0f:02:4c:d9:
cd:51:61:98:0b:d6:c9:dc:3f:af:bd:e0:fa:d7:aa:
0b:3e:eb:71:41:01:77:db:a7:09:3b:c2:89:e6:f6:
8e:40:d4:46:d0:a3:8b:30:b1:a6:b0:6b:d3:37:de:
04:a0:66:ca:ff:7f:ed:31:87:39:ae:e9:87:4a:72:
84:37:95:a1:58:6e:c0:5e:22:e5:9a:2a:6d:f3:6d:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E9:ED:A4:9B:C8:07:0C:C5:B0:97:86:A5:F0:2F:1A:0A:08:54:C2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G-ntpJvIBwzFsJeGpfAvGgoIVMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.35.0/24
151.243.41.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bf:37:c8:03:a9:11:6d:ee:1d:ac:69:13:37:e6:e1:26:67:
07:99:e5:db:37:07:e4:2a:d3:5a:f0:fb:31:38:01:67:d5:50:
1d:27:f8:fe:19:dd:b9:40:90:8d:f8:4d:32:39:87:ea:ff:38:
fa:aa:23:60:a5:4e:bc:75:e3:23:d3:62:b0:b4:c9:52:cd:cc:
6a:2e:00:5c:a1:0a:16:c5:f4:81:d3:2a:c0:a1:fc:f4:f7:e3:
ce:2c:29:c6:5f:44:ca:d1:00:96:b0:8f:da:c6:48:52:cc:3b:
39:12:a4:3f:a5:10:61:54:2f:0f:c5:a4:92:12:93:cd:02:de:
3a:a6:27:2b:6c:6c:65:cd:ce:e0:fc:94:31:8c:43:47:19:3f:
40:02:b0:31:6f:67:ee:ec:7a:97:ff:ea:96:13:6f:61:19:00:
5c:4e:ed:98:3c:34:cd:e7:cf:ca:58:8e:55:aa:0f:15:f5:4c:
67:1a:af:e6:2a:32:f5:79:8a:03:14:c4:ad:78:5c:e1:a5:0d:
6f:1f:d4:34:a1:49:ac:3d:dc:d8:68:ac:94:cb:08:e3:85:48:
3b:01:68:e4:a6:c2:e1:ae:a6:60:ee:0b:0a:cd:1f:7f:c9:0b:
22:f4:f0:95:3a:5c:2a:89:87:7d:3f:58:64:d3:e6:a9:08:de:
8a:59:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:27:05 2025 by rpki-client