Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kBXctZe97xcPcMwT7YO6RPAar-c.roa
File: kBXctZe97xcPcMwT7YO6RPAar-c.roa (raw, json)
Hash identifier: WW6b15M0WfjAeeK7mzZAmYdRQp0kA8+RjNz+w4t1BYw=
Subject key identifier: 90:15:DC:B5:97:BD:EF:17:0F:70:CC:13:ED:83:BA:44:F0:1A:AF:E7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019811D0BE4A0C7BE8FA39C0D9344FD2AB3E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kBXctZe97xcPcMwT7YO6RPAar-c.roa
Signing time: Wed 16 Jul 2025 05:59:09 +0000
ROA not before: Wed 16 Jul 2025 05:59:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 151.242.202.0/23 maxlen: 23
151.242.252.0/24 maxlen: 24
151.243.206.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 18 Jul 2025 11:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:11:d0:be:4a:0c:7b:e8:fa:39:c0:d9:34:4f:d2:ab:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 16 05:59:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9015dcb597bdef170f70cc13ed83ba44f01aafe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:5b:ab:df:bf:cc:91:4e:ec:a1:1d:ce:e9:
23:67:1f:f0:93:fa:e2:c4:0c:85:7d:52:a5:84:21:
7b:ae:c1:97:52:89:b3:96:73:4c:99:63:5f:ac:06:
93:7e:a4:30:73:3f:70:37:8d:dc:e7:08:35:c9:48:
43:61:87:7e:00:e4:b6:51:ac:1f:79:3a:09:9a:1c:
3c:f4:ac:6c:3c:8e:eb:c4:64:0a:ef:58:5d:26:76:
58:14:14:e6:09:4a:f7:c2:a3:bc:72:df:2b:c7:47:
41:4b:b1:78:7b:ff:ad:8e:d7:33:ca:71:f6:eb:38:
7f:2c:85:76:91:35:27:42:b6:d4:c7:f0:1f:d3:ac:
cb:46:23:fa:8b:f5:6c:42:15:b6:97:bf:fb:06:3d:
af:08:2e:b8:2c:2b:e2:8c:97:ff:fb:7e:c9:69:af:
31:19:59:37:48:3f:38:ec:50:02:52:75:fa:d5:1f:
98:ef:92:9a:14:71:f6:cc:61:9c:27:7e:1b:12:b1:
91:8c:95:22:a6:04:47:0b:84:81:c5:ca:d0:a1:a2:
a0:6b:0b:19:d8:8e:a4:10:57:44:79:72:22:46:66:
52:a5:ec:d3:20:f3:84:93:86:e2:86:49:63:77:d7:
08:a4:ee:2a:8d:19:5a:76:86:d3:c3:59:8b:35:9e:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:15:DC:B5:97:BD:EF:17:0F:70:CC:13:ED:83:BA:44:F0:1A:AF:E7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kBXctZe97xcPcMwT7YO6RPAar-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.202.0/23
151.242.252.0/24
151.243.206.0/23
Signature Algorithm: sha256WithRSAEncryption
54:fa:13:da:e0:45:a6:99:02:b0:22:8b:de:ac:2e:c3:80:90:
06:c5:5a:47:b1:42:31:e6:73:83:74:a2:0b:b5:4f:fe:ea:f6:
d4:4b:77:b5:3f:4b:49:c6:56:b8:c4:ce:10:df:51:ce:cb:4e:
96:bf:cf:57:7c:3e:1d:50:0f:4b:3a:b9:0a:a6:ca:b2:43:92:
64:5f:ed:ff:1a:11:8e:21:b1:a5:08:a6:6b:18:35:22:0c:d3:
a4:0e:57:97:2a:fb:c7:48:7e:23:c1:45:1a:cd:17:55:6a:dc:
48:7d:6a:fb:31:c4:2c:49:c0:18:44:65:b6:a0:09:bc:e1:22:
aa:4c:03:f6:27:f0:b7:e9:72:8e:4e:77:b1:d4:e3:32:7a:e3:
41:f8:35:c3:bc:c7:13:2d:de:ff:4d:71:88:20:80:33:1e:0b:
85:75:50:4b:38:a8:ed:b0:56:c6:15:a6:4f:fd:eb:9f:3b:e6:
00:53:04:f7:e5:0f:51:94:4f:3c:fb:31:62:66:30:b3:b8:4e:
7f:6c:fb:69:64:b0:07:4c:21:72:64:38:ed:09:21:3c:12:50:
f5:88:80:88:9a:5d:37:ac:51:43:dd:90:f1:58:58:e8:66:ce:
7b:1c:08:09:65:af:9e:1e:52:91:23:ca:3d:e2:97:e7:56:20:
92:56:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:52:04 2025 by rpki-client