Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZE7laQOcdnVdY0kJNP-7N_Hoxz0.roa
File: ZE7laQOcdnVdY0kJNP-7N_Hoxz0.roa (raw, json)
Hash identifier: YQX82DkZs/Ed6muM//oEAJ4L+n72n07qC/SKPoZNy9Q=
Subject key identifier: 64:4E:E5:69:03:9C:76:75:5D:63:49:09:34:FF:BB:37:F1:E8:C7:3D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196DCECD9A5EBBFDD4A93C8B21D21201376
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZE7laQOcdnVdY0kJNP-7N_Hoxz0.roa
Signing time: Sat 17 May 2025 06:27:11 +0000
ROA not before: Sat 17 May 2025 06:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210554
IP address blocks: 151.243.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jun 2025 14:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:ec:d9:a5:eb:bf:dd:4a:93:c8:b2:1d:21:20:13:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 17 06:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=644ee569039c76755d63490934ffbb37f1e8c73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:15:64:b6:ac:6e:78:8d:31:d7:ec:72:ef:ee:
cf:e3:ea:c3:e3:f6:b1:5e:a3:09:c1:19:c9:0b:c9:
5d:7e:09:03:b8:89:39:0d:b0:75:0d:84:ee:aa:d8:
83:7a:71:41:28:76:2a:e0:47:ae:e4:f0:e9:70:0a:
00:31:f5:d0:a8:53:9c:ef:83:6b:57:45:3d:61:ad:
78:e8:ad:c7:93:c1:98:30:d6:48:82:27:7f:5d:6d:
d3:ab:2b:00:34:c8:53:36:2d:10:43:7a:32:68:25:
f4:a2:8e:3c:7f:26:80:af:ac:72:2f:42:04:ea:e3:
b1:df:a5:8e:46:d8:04:8a:d1:99:d4:4a:99:13:60:
d3:25:6e:fb:a8:66:da:9f:0a:c3:c0:6c:36:22:4a:
6a:19:45:29:1e:91:3c:f8:86:5a:d6:ec:36:33:69:
d0:0d:13:e4:4a:90:49:79:e8:d6:0b:b0:ae:0a:2f:
c1:8d:ee:55:4f:86:b3:71:e5:bf:b5:42:9b:72:e9:
c1:cd:55:83:3c:37:0d:7c:99:c8:c4:3f:8c:91:16:
2b:9b:1d:20:f7:89:70:38:ba:f2:3d:9f:7b:51:b6:
ef:61:8d:ac:d0:bf:f0:58:85:82:29:f7:46:ac:cd:
31:d5:bb:29:f8:90:17:81:45:75:3d:b3:56:c6:ed:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:E5:69:03:9C:76:75:5D:63:49:09:34:FF:BB:37:F1:E8:C7:3D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZE7laQOcdnVdY0kJNP-7N_Hoxz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.24.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a4:02:d1:7c:bc:dd:66:12:1d:85:89:98:31:ae:32:9b:0e:
87:8b:aa:64:8a:b1:02:61:6d:02:52:29:d0:e6:af:9c:a4:49:
8a:2e:24:78:bf:2f:aa:0f:f1:c9:d0:b6:3b:02:35:f2:92:ff:
0b:00:81:15:76:45:9b:26:d1:49:c0:ce:e0:0d:07:fb:f3:0a:
75:2b:7e:f6:dd:dd:98:20:f2:79:ec:81:68:b7:52:c4:3c:ce:
ae:87:64:5f:58:dc:9c:50:4d:f4:4c:cf:71:7e:86:7f:a6:4e:
b6:52:2a:d2:04:3f:81:e9:04:5b:0f:94:ab:fb:7c:9d:7d:5e:
fd:08:d8:b2:2d:8c:7d:b2:08:2a:64:6d:90:b2:bc:ee:31:44:
5f:71:61:34:d1:74:46:54:dc:de:bc:70:99:6c:36:76:f9:01:
29:15:63:26:ec:2e:e5:fe:ab:1a:d0:e2:7c:c4:38:75:41:13:
e9:4a:36:52:f0:d9:67:4e:84:d0:a3:41:f1:66:53:68:b0:c1:
99:f9:40:6b:c1:ff:68:c4:98:b1:77:cd:e3:2c:4c:c3:7a:e6:
b3:1e:28:2e:d3:67:f8:51:08:b3:ac:96:38:b2:b5:84:fd:6c:
f6:19:e7:8c:f0:83:b2:bc:6b:23:6f:74:3b:a1:c4:24:c6:73:
09:18:9a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:38:33 2025 by rpki-client