Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZqjMPvVrWecOaiEHh25VDQBFLwQ.roa
File: ZqjMPvVrWecOaiEHh25VDQBFLwQ.roa (raw, json)
Hash identifier: XkkTfLpHw5168M+26NI/Re9BCKQJS7JFXIH+3VJGWew=
Subject key identifier: 66:A8:CC:3E:F5:6B:59:E7:0E:6A:21:07:87:6E:55:0D:00:45:2F:04
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B5578B73E2E4E08E65F5466554B8E87F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZqjMPvVrWecOaiEHh25VDQBFLwQ.roa
Signing time: Sat 28 Jun 2025 07:01:42 +0000
ROA not before: Sat 28 Jun 2025 07:01:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214024
IP address blocks: 151.243.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Jun 2025 13:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:57:8b:73:e2:e4:e0:8e:65:f5:46:65:54:b8:e8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 28 07:01:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66a8cc3ef56b59e70e6a2107876e550d00452f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b1:c5:be:eb:13:89:f4:ae:1e:90:ff:a1:9b:
4e:d9:80:66:48:36:66:be:05:c8:b7:fa:28:59:08:
45:5e:79:84:ff:b9:4c:f1:17:cc:8f:e8:dc:46:f6:
1a:c0:a8:9d:d0:72:5a:13:ff:c6:7e:73:3f:c4:7b:
64:e8:89:83:08:e8:18:ef:bc:1b:30:51:0b:1a:58:
ab:c7:90:69:d8:ae:df:de:de:6d:8b:27:f7:07:16:
d8:85:4c:81:be:15:ed:6a:41:fb:6e:21:09:33:95:
70:3a:7f:a0:78:26:f5:37:ea:ed:5e:0b:8f:95:a7:
16:d4:3b:b2:af:70:83:25:fc:82:df:c5:71:46:e7:
5e:52:00:e5:97:44:dc:81:3d:f5:dd:42:28:10:e0:
80:8f:c1:c8:65:c7:ce:82:53:52:a9:cf:02:0b:27:
b9:28:05:c0:3e:6e:5a:8a:eb:c0:b8:b4:c9:08:ec:
d6:61:df:35:ef:31:2b:b8:cd:22:2f:b7:4d:d7:15:
31:5e:f4:c8:e0:b5:84:f7:1b:c5:db:87:a3:d8:b4:
ac:e0:7c:eb:b1:33:9e:d7:66:d3:5b:ff:f7:3f:8c:
0f:fc:f0:46:a1:b5:ea:22:c1:45:a1:de:fc:5c:01:
91:44:92:6f:59:ce:21:54:4f:f7:9d:0d:03:c4:6b:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A8:CC:3E:F5:6B:59:E7:0E:6A:21:07:87:6E:55:0D:00:45:2F:04
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZqjMPvVrWecOaiEHh25VDQBFLwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.41.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1d:ca:3a:61:8d:10:ee:7f:4a:8d:d5:9f:e3:d6:08:d3:b1:
9d:54:01:1c:0a:57:d7:48:c9:cc:6f:29:79:54:55:c0:d2:53:
3b:c5:47:f3:45:f4:22:49:67:6c:b2:b1:6e:31:66:36:41:cb:
f7:a5:2a:32:c4:25:fc:ed:67:fc:44:59:63:e5:d5:56:99:bb:
69:17:95:d2:83:47:78:65:81:0c:51:e1:43:d8:ad:74:71:d4:
ae:40:83:ae:17:34:76:55:37:36:98:f6:70:36:fe:62:6f:0c:
92:84:28:fc:2e:71:fd:4a:e7:27:be:16:50:ad:51:8b:03:72:
b5:cd:1b:19:00:f7:55:be:a4:4f:d3:1b:d4:a3:15:5e:07:35:
94:0a:57:af:1f:23:10:51:83:3e:a3:2a:d5:ca:9e:85:31:fb:
c2:53:c8:b2:e2:50:8d:55:e1:01:38:31:bf:71:51:06:a1:12:
ad:c4:a6:98:c3:98:81:d9:a7:53:ea:eb:fe:0a:ba:c8:fd:ce:
f2:bb:a5:d0:7c:69:37:8d:08:d2:e4:4f:1d:b8:b2:c5:6c:80:
b1:ea:da:3f:d7:ba:36:73:75:02:14:ac:e6:d9:73:b5:69:ce:
3a:38:b0:83:ac:9d:57:93:ed:b7:cd:c8:85:2e:5d:05:e8:89:
b8:11:b1:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZe1V4tz4uTgjmX1RmVUuOh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjI4MDcwMTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmE4Y2MzZWY1NmI1OWU3MGU2YTIxMDc4NzZlNTUwZDAwNDUyZjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rHFvusTifSuHpD/oZtO2YBmSDZm
vgXIt/ooWQhFXnmE/7lM8RfMj+jcRvYawKid0HJaE//GfnM/xHtk6ImDCOgY77wb
MFELGlirx5Bp2K7f3t5tiyf3BxbYhUyBvhXtakH7biEJM5VwOn+geCb1N+rtXguP
lacW1Duyr3CDJfyC38VxRudeUgDll0TcgT313UIoEOCAj8HIZcfOglNSqc8CCye5
KAXAPm5aiuvAuLTJCOzWYd817zEruM0iL7dN1xUxXvTI4LWE9xvF24ej2LSs4Hzr
sTOe12bTW//3P4wP/PBGobXqIsFFod78XAGRRJJvWc4hVE/3nQ0DxGutnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGaozD71a1nnDmohB4duVQ0ARS8EMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWnFqTVB2VnJXZWNPYWlFSGgyNVZEUUJGTHdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/MpMA0G
CSqGSIb3DQEBCwUAA4IBAQCYHco6YY0Q7n9KjdWf49YI07GdVAEcClfXSMnMbyl5
VFXA0lM7xUfzRfQiSWdssrFuMWY2Qcv3pSoyxCX87Wf8RFlj5dVWmbtpF5XSg0d4
ZYEMUeFD2K10cdSuQIOuFzR2VTc2mPZwNv5ibwyShCj8LnH9SucnvhZQrVGLA3K1
zRsZAPdVvqRP0xvUoxVeBzWUClevHyMQUYM+oyrVyp6FMfvCU8iy4lCNVeEBODG/
cVEGoRKtxKaYw5iB2adT6uv+CrrI/c7yu6XQfGk3jQjS5E8duLLFbICx6to/17o2
c3UCFKzm2XO1ac46OLCDrJ1Xk+23zciFLl0F6Im4EbFD
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:11:43 2025 by rpki-client