Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nhFFWv89vmsEEykNkUMNpkDLWmE.roa
File: nhFFWv89vmsEEykNkUMNpkDLWmE.roa (raw, json)
Hash identifier: YFZan7AEkbRwvdqMURH+57AHmp01DXxP3oPJHRZMXAs=
Subject key identifier: 9E:11:45:5A:FF:3D:BE:6B:04:13:29:0D:91:43:0D:A6:40:CB:5A:61
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197DF795FB7F7001333D8668B79951B4099
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nhFFWv89vmsEEykNkUMNpkDLWmE.roa
Signing time: Sun 06 Jul 2025 11:22:42 +0000
ROA not before: Sun 06 Jul 2025 11:22:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59993
IP address blocks: 151.243.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Jul 2025 06:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:df:79:5f:b7:f7:00:13:33:d8:66:8b:79:95:1b:40:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 6 11:22:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e11455aff3dbe6b0413290d91430da640cb5a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:bf:28:37:8d:2a:a9:7c:6b:79:e3:30:9b:
38:8b:ea:1c:1a:9f:ea:d5:40:0d:dd:a1:6b:5b:d4:
ba:cd:f5:20:28:90:99:31:da:ee:e9:01:c3:a2:d6:
46:45:d4:76:6b:f7:d7:97:4a:78:d5:89:df:f1:e6:
bd:63:92:46:49:6b:a7:43:e5:b2:b2:a0:ee:3a:05:
9f:8f:8b:c7:a2:24:0e:52:9e:45:83:d3:b4:1b:26:
9a:62:e0:c0:c2:8a:ca:f1:c3:10:1a:fa:2a:44:90:
d0:d9:fb:a7:1d:ca:aa:ba:83:63:c3:91:4b:55:c1:
f4:58:12:31:39:8d:7b:fa:dd:48:39:71:31:02:3e:
df:3f:7a:0e:b6:fb:fc:54:67:e4:04:52:55:7c:35:
46:6d:ff:cd:7b:f1:55:a4:cc:f0:e2:d9:29:9f:74:
17:9d:3f:48:3b:7b:17:7b:2a:da:16:51:19:25:f9:
d1:a4:6f:0a:ac:a7:a1:e3:59:df:df:17:ce:3e:ea:
b9:46:15:17:d5:0e:28:aa:6b:35:31:e4:25:a1:d6:
fd:1c:be:fe:47:ff:22:f5:c7:e8:9b:00:bd:a0:7c:
03:85:d2:19:f8:2e:c4:47:d2:5a:77:2e:ad:ca:a2:
4a:0c:ed:9f:39:bc:77:7c:b8:80:cc:c5:82:50:51:
af:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:11:45:5A:FF:3D:BE:6B:04:13:29:0D:91:43:0D:A6:40:CB:5A:61
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nhFFWv89vmsEEykNkUMNpkDLWmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.100.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:38:be:ac:07:6d:a8:69:e8:13:4c:b2:4d:10:bc:15:2b:89:
35:22:b3:8a:12:72:b4:96:5e:bf:82:dd:23:61:75:13:e3:0b:
a3:3e:c6:0e:25:45:d9:1c:1b:09:c1:26:35:67:ca:ca:57:29:
77:ce:57:15:90:6e:60:fc:51:f1:20:16:bd:62:b8:08:f1:7a:
e0:53:46:5a:61:a9:9c:95:de:eb:e2:fb:a4:20:1c:d0:dd:7f:
24:57:6e:86:df:e4:b7:8e:49:36:8f:e7:5a:cc:dd:04:7b:be:
e9:51:d4:0f:50:c9:c5:41:34:19:8e:a3:4e:37:83:a1:4b:73:
8a:1f:b2:07:4b:a6:18:fe:b7:9b:5a:9b:e6:d7:08:4a:57:78:
09:53:cd:2b:6e:84:66:53:16:11:b0:ce:69:31:6c:20:33:fe:
63:4f:75:f0:17:53:17:ac:95:22:08:53:f8:0e:f8:08:b5:f5:
2d:a7:34:40:d5:a0:93:fa:7c:89:a5:6c:17:19:78:f8:3e:c8:
1c:0e:6b:40:89:2a:c3:41:1f:2e:bf:33:b1:43:b6:c5:ca:d5:
52:c4:7b:5d:1e:31:bc:d4:c2:0b:09:a3:8c:1a:21:4e:fc:9a:
69:7d:df:5e:08:5e:54:c3:f1:1c:2b:e1:9f:10:35:39:fb:aa:
a3:41:7f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:34:56 2025 by rpki-client