Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jsiMi1vxbMzGKG_BUTVEMumVwXw.roa
File: jsiMi1vxbMzGKG_BUTVEMumVwXw.roa (raw, json)
Hash identifier: WVRnhtumImv3jhaOGIGndKed+lvOlJnWylV+NX5UcjE=
Subject key identifier: 8E:C8:8C:8B:5B:F1:6C:CC:C6:28:6F:C1:51:35:44:32:E9:95:C1:7C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01983112B4C981F63416FCA7704B72B90C13
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jsiMi1vxbMzGKG_BUTVEMumVwXw.roa
Signing time: Tue 22 Jul 2025 07:39:26 +0000
ROA not before: Tue 22 Jul 2025 07:39:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137157
IP address blocks: 151.244.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Jul 2025 07:22:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:12:b4:c9:81:f6:34:16:fc:a7:70:4b:72:b9:0c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 22 07:39:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ec88c8b5bf16cccc6286fc151354432e995c17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:b0:e0:4e:14:da:31:9f:3b:91:13:7a:eb:
76:96:d2:28:b2:3a:ba:d1:09:23:96:10:d1:1d:ba:
df:5d:5b:ff:70:02:d3:46:47:83:71:ac:84:35:29:
30:d8:db:ed:8f:5e:a4:cc:07:80:64:9f:86:8d:8b:
01:83:08:42:16:1a:71:3b:c6:83:2b:f8:c0:87:c5:
3b:4a:dc:96:56:0f:11:a3:1a:8f:75:0c:0a:bd:83:
83:c1:60:06:b0:f1:73:88:a4:90:21:fb:01:27:66:
71:1e:d4:73:57:9e:76:b4:53:7a:02:a5:6f:d0:53:
e6:c1:1e:6c:fb:34:5b:36:e3:da:c7:21:5b:d7:29:
2a:08:70:3e:a1:ad:79:16:6d:d3:27:07:d4:83:e7:
af:24:72:b7:df:b4:4c:7a:dc:a5:e0:44:ed:40:bd:
c3:fd:b1:79:da:a3:b6:68:88:e6:82:d6:8d:c4:a5:
29:ba:34:d6:82:6b:ff:1a:ed:98:13:70:17:21:e8:
8e:e3:f2:c3:e0:fb:65:7c:7a:25:a0:5d:99:53:85:
73:3f:7b:71:b9:a7:a6:17:db:44:b7:dc:80:e7:c1:
f3:0e:a5:c9:2d:4a:b3:5e:50:82:87:28:29:f2:80:
47:d9:50:6b:3d:1b:18:c9:d2:9f:46:83:6a:8f:2b:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C8:8C:8B:5B:F1:6C:CC:C6:28:6F:C1:51:35:44:32:E9:95:C1:7C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jsiMi1vxbMzGKG_BUTVEMumVwXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:4f:03:3a:51:2e:4d:cf:4c:74:b2:68:4e:05:d9:b5:13:de:
04:69:99:a7:66:9a:ca:a2:5e:7e:42:89:f5:af:c8:6b:ca:c6:
c4:fd:a4:3d:4f:13:9e:d8:12:c9:0a:61:f1:88:6d:38:6d:68:
20:4b:07:92:24:a7:c0:f1:e5:56:a4:eb:be:62:b6:75:72:1e:
70:c0:df:8c:ff:19:34:db:4a:e5:5d:37:41:bd:56:d0:0c:b0:
5e:7d:6a:ca:62:bf:23:63:ee:0b:c4:fb:04:23:e7:b6:8a:a1:
b1:7e:01:ba:6e:b3:08:70:41:ae:d5:86:39:90:d7:c7:3b:36:
6e:15:11:64:4b:9b:f6:8d:88:80:8c:bd:55:e0:94:fe:aa:79:
6e:3a:f3:c5:c1:6e:d1:ea:e9:be:3d:4b:de:e5:ce:cd:92:d4:
4d:8d:da:3b:1a:43:48:2b:8b:5b:38:84:ad:24:15:88:56:fa:
40:c0:56:66:8d:28:64:89:4a:69:04:3e:72:c2:64:91:9c:1d:
b5:f0:7e:09:c8:a0:fb:19:07:61:85:88:1a:57:16:a2:43:69:
2a:fd:77:2b:89:d2:9b:09:62:48:af:22:6e:4e:80:69:47:54:
5a:e5:85:22:d3:74:fd:fa:e4:81:b8:0d:b3:e2:61:5a:88:ee:
cf:e1:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:26:36 2025 by rpki-client