Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OcP6LS4y1XFOu1np7Nm__LMOENo.roa
File: OcP6LS4y1XFOu1np7Nm__LMOENo.roa (raw, json)
Hash identifier: qc6fWNoJz+7/yQHc8hmfC4uBclPJaVIsx4XHu7oDFTo=
Subject key identifier: 39:C3:FA:2D:2E:32:D5:71:4E:BB:59:E9:EC:D9:BF:FC:B3:0E:10:DA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019821B684518DDCA14779B60460C2E0B33B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OcP6LS4y1XFOu1np7Nm__LMOENo.roa
Signing time: Sat 19 Jul 2025 08:04:26 +0000
ROA not before: Sat 19 Jul 2025 08:04:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 151.244.14.0/24 maxlen: 24
151.244.85.0/24 maxlen: 24
151.246.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Jul 2025 08:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:21:b6:84:51:8d:dc:a1:47:79:b6:04:60:c2:e0:b3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 19 08:04:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c3fa2d2e32d5714ebb59e9ecd9bffcb30e10da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:e2:9e:62:58:40:de:94:de:c1:2b:79:ca:
39:e1:18:73:01:32:5b:b6:5c:d7:46:e0:93:e8:e5:
00:9b:eb:01:4f:46:32:48:dd:df:90:e0:7c:ed:fc:
44:e2:88:95:1a:a0:b9:88:d2:66:f5:1f:e0:e9:10:
8e:13:5c:8f:75:05:6c:c4:df:d1:1f:dc:ee:47:bc:
59:34:d6:ea:3a:20:fc:7a:3f:4a:58:74:6c:ed:a6:
bb:6b:af:eb:00:e8:28:ff:c0:de:86:88:90:18:af:
f3:f3:b3:4d:59:43:68:ca:c8:2e:af:c8:a6:10:0c:
56:ee:98:13:46:32:e5:ac:43:c8:69:ca:8f:fe:f6:
60:86:00:b5:d7:ec:f0:ae:43:fe:d4:04:f2:61:30:
c7:d3:5f:32:d3:2a:92:e9:c0:9c:30:58:ca:d7:91:
32:f4:d8:73:00:f7:d2:94:6d:96:e7:0e:2a:16:a2:
94:5a:0b:48:a9:12:e1:90:5b:10:5f:8f:9e:ea:5b:
41:c1:14:76:8d:c9:55:4e:cd:d6:c7:0d:20:4b:6b:
47:8c:e0:41:3b:88:2f:33:b4:25:2a:99:93:c0:42:
65:68:aa:9f:d8:3f:48:ec:0e:d3:63:29:b2:eb:41:
0f:a1:7f:e7:54:b3:f7:53:d3:26:dd:70:b2:ba:14:
6c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C3:FA:2D:2E:32:D5:71:4E:BB:59:E9:EC:D9:BF:FC:B3:0E:10:DA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OcP6LS4y1XFOu1np7Nm__LMOENo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.14.0/24
151.244.85.0/24
151.246.127.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f8:59:af:72:17:b5:c3:f6:d3:56:ee:30:57:ce:3c:5c:4e:
80:57:86:34:86:b0:8d:3e:34:ed:bb:47:92:7f:79:f3:aa:a9:
54:c7:da:2d:97:fd:5a:bb:ec:be:88:46:c2:e7:4e:03:22:9b:
bf:1d:0a:c1:c8:8c:b7:80:eb:d0:19:7b:47:0a:67:f3:a0:10:
0d:c9:fe:d2:cf:55:39:eb:17:bc:fc:20:4d:22:8b:7f:95:52:
8c:38:ae:df:6a:36:03:4e:7d:c1:1e:ac:9a:dd:79:7d:bf:6f:
d6:8c:5b:85:b6:d3:e6:f0:db:c9:c0:11:d0:de:b2:f8:a1:3f:
05:44:da:7d:6d:a3:a7:49:d9:62:96:ef:b3:d9:cc:ae:c5:0a:
64:05:17:1c:34:1a:79:05:07:f4:f3:5b:88:2d:7e:10:14:79:
95:43:5c:91:1e:d9:84:45:cd:c1:62:02:25:28:c1:fe:d8:5f:
ed:45:ce:d3:48:27:cd:ba:77:df:2e:5d:75:35:54:07:14:f4:
1b:19:e6:1c:50:52:6a:50:45:c9:51:25:92:7a:4a:f2:55:65:
8b:64:43:7e:22:92:e6:e7:4f:f6:9a:68:09:35:e8:a6:d3:23:
a1:1c:fd:3c:c8:d7:01:c6:ee:f9:53:47:a9:38:29:cc:7d:13:
b0:2b:2c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:53:17 2025 by rpki-client