Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hjmquBNBB3hII_NSfOwwraGe1m8.roa
File: hjmquBNBB3hII_NSfOwwraGe1m8.roa (raw, json)
Hash identifier: jKmNrRUKLreViTrfePLGwREpifjYNfpGXgI0SwJco+U=
Subject key identifier: 86:39:AA:B8:13:41:07:78:48:23:F3:52:7C:EC:30:AD:A1:9E:D6:6F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01978C415EBB4FF0B6D5056F5F88B6F52252
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hjmquBNBB3hII_NSfOwwraGe1m8.roa
Signing time: Fri 20 Jun 2025 07:33:03 +0000
ROA not before: Fri 20 Jun 2025 07:33:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212384
IP address blocks: 151.242.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 14:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:41:5e:bb:4f:f0:b6:d5:05:6f:5f:88:b6:f5:22:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 20 07:33:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8639aab8134107784823f3527cec30ada19ed66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:c2:10:c4:6e:75:85:99:e4:fa:7d:0b:0e:
21:d5:27:fe:61:6f:aa:ff:60:92:81:27:05:22:d3:
2c:31:61:ed:2d:b1:11:ac:1e:95:3d:30:15:3d:ef:
3e:19:0b:2c:7f:3d:46:62:4e:7c:b9:48:df:54:e3:
5e:57:fc:92:f4:6b:4b:c3:1e:4f:17:bb:3a:76:95:
23:c8:f4:66:6a:9c:d4:3e:12:19:0a:cf:26:b7:23:
47:de:24:75:42:8e:50:32:92:39:d5:7f:be:4d:a1:
a3:3f:8c:68:f9:fd:6e:ba:30:3f:64:c0:78:11:c1:
6c:e6:61:2a:a3:32:26:3a:1c:51:fe:b8:1b:c4:15:
9b:b9:fd:83:0f:c8:2d:15:4f:57:95:91:04:15:89:
68:5b:ea:a7:d2:09:46:5a:77:c6:c2:41:b6:81:3c:
71:7e:b0:0f:55:bd:ea:84:38:5f:96:ae:a7:4e:88:
a5:b3:36:4b:37:29:cd:67:94:4b:e7:4b:71:ae:95:
7d:80:c2:5b:a4:32:1c:b0:77:94:de:a2:65:de:ee:
63:cf:92:7c:5a:d3:d9:8e:50:54:ce:95:d9:93:a6:
cf:46:94:3c:7a:d9:fd:78:e0:83:3c:36:a6:da:5a:
a5:1c:c9:8f:c2:c4:15:e2:31:8c:62:74:b4:a4:26:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:AA:B8:13:41:07:78:48:23:F3:52:7C:EC:30:AD:A1:9E:D6:6F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hjmquBNBB3hII_NSfOwwraGe1m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.138.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:23:5b:0a:73:3a:8f:ce:1a:63:05:14:eb:78:f5:58:c2:6e:
06:65:25:1a:c5:67:61:ef:d9:56:aa:7a:19:86:be:3b:ef:74:
68:6d:42:64:77:c5:76:a1:d3:32:14:a9:06:45:8a:e3:69:a1:
ec:42:7e:ac:16:e9:93:77:9e:88:78:e9:0c:1e:ba:fd:f9:74:
35:17:54:ef:87:f2:8d:22:35:6c:4b:20:5a:33:09:85:ce:35:
ea:05:69:c6:e8:ea:8f:3c:7f:22:89:9b:93:63:6b:05:73:f4:
ef:f7:a0:bf:a5:92:08:de:a5:58:18:92:35:91:a8:d6:70:2d:
ea:5f:63:87:47:48:a6:36:9f:fa:e3:c2:62:17:0c:60:00:7d:
b1:b3:2e:66:4b:ac:d9:33:89:46:24:f8:c6:0d:14:05:09:7b:
ce:1a:0d:5d:f7:29:fd:61:af:9f:07:42:9a:93:98:d2:3d:ff:
c3:25:57:51:e6:07:88:c7:26:eb:3e:5a:9c:04:97:72:53:00:
7a:47:34:23:b6:9e:87:6d:d9:be:e1:c6:30:93:e3:4e:95:d5:
94:7b:b2:2d:7d:59:9e:36:1f:18:5e:2e:2d:9e:49:9f:7e:7b:
5d:76:0a:fd:b7:2d:d8:f6:ec:63:5d:63:99:74:84:3c:f1:9d:
3a:fb:b1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:38:32 2025 by rpki-client