Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/p5zcK-Nn_gsTY4zjBc2LGXgqibM.roa
File: p5zcK-Nn_gsTY4zjBc2LGXgqibM.roa (raw, json)
Hash identifier: MINR0LYNrHIWWHBpQNfuXUJjNKO0AJOaKE72xBZFWkc=
Subject key identifier: A7:9C:DC:2B:E3:67:FE:0B:13:63:8C:E3:05:CD:8B:19:78:2A:89:B3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019610725472F74485017A8027522CD14158
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/p5zcK-Nn_gsTY4zjBc2LGXgqibM.roa
Signing time: Mon 07 Apr 2025 13:30:50 +0000
ROA not before: Mon 07 Apr 2025 13:30:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 151.242.180.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 08 Apr 2025 05:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:72:54:72:f7:44:85:01:7a:80:27:52:2c:d1:41:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 7 13:30:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a79cdc2be367fe0b13638ce305cd8b19782a89b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:56:36:50:ba:d5:10:ed:49:a0:d0:62:e3:
0b:64:48:f7:cd:f2:8d:8e:c8:0c:91:d3:51:4d:e1:
d3:a3:ab:60:04:f7:f6:4f:e4:38:f5:b1:e9:79:85:
70:66:44:f6:cc:8c:9f:13:0a:31:73:a6:67:58:0b:
84:72:a7:d5:de:b6:81:76:44:cd:ac:ae:86:93:1c:
26:7a:45:20:c2:ae:68:a1:58:74:77:43:0b:55:44:
7c:ed:51:7f:a0:1c:0e:c0:9c:35:47:30:a1:91:42:
28:dd:5b:f3:fa:55:14:31:54:a4:d4:39:df:73:1a:
06:ac:b0:75:3f:3f:ad:5b:7a:ba:e4:24:55:4d:ae:
f8:26:5b:73:96:6f:46:e4:3d:c9:09:83:b5:2b:0d:
6b:d9:f6:e5:b4:4f:2f:7b:c7:2a:f9:da:3f:16:bf:
f8:77:8a:03:b9:f6:37:60:10:d0:90:32:78:53:94:
66:e1:84:20:e3:a9:d9:e6:30:6a:fe:22:4c:8a:25:
54:c8:0f:1e:8a:95:6b:36:9e:cb:91:e8:09:91:6f:
57:17:75:d2:8c:2b:af:4c:91:fa:fc:ed:80:11:a1:
11:e4:6d:85:5b:a3:41:06:17:17:41:e2:65:1c:61:
38:d6:88:a9:94:f3:31:55:06:37:d6:1c:4b:02:57:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:DC:2B:E3:67:FE:0B:13:63:8C:E3:05:CD:8B:19:78:2A:89:B3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/p5zcK-Nn_gsTY4zjBc2LGXgqibM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.180.0/22
Signature Algorithm: sha256WithRSAEncryption
60:0c:2e:1f:27:e7:47:d8:1c:8e:9d:ac:08:84:e9:3e:91:81:
82:a3:f4:96:cb:81:26:57:ef:0d:19:84:6b:b7:6b:63:21:7e:
97:d2:2c:27:ee:cc:2f:4e:17:41:c7:c7:38:e7:64:2d:e2:02:
78:57:b1:95:24:37:87:e6:ba:8b:f2:a8:e3:dd:a3:29:3c:d9:
c5:30:af:1f:48:f8:02:64:78:9e:08:38:50:47:bc:0f:6f:cc:
7b:22:4e:67:94:57:db:d3:89:a9:de:ad:36:0a:e8:5a:d8:22:
55:d1:79:66:22:eb:65:af:9a:2a:eb:f7:b1:a2:75:8b:bc:ab:
37:1c:9e:9e:12:f1:a8:28:48:12:60:51:95:a5:de:85:b2:a7:
de:e6:58:e7:72:88:55:ea:ca:eb:7a:a6:5a:09:a4:7b:23:21:
69:5a:ed:4a:6a:27:91:66:a5:55:cd:41:94:ca:e9:3a:0a:d3:
3f:44:e1:01:d5:1c:4f:dd:c2:6d:91:6a:26:af:b2:1a:1e:6b:
fb:89:fb:02:29:4e:5d:a4:b4:3c:10:0e:63:b1:15:d0:ff:dd:
2f:1e:13:ee:49:0a:f8:71:60:7d:4d:85:f7:5b:c7:79:cf:8a:
35:d4:e6:ef:01:e3:0f:d8:92:e1:67:75:7b:0a:49:08:2a:a9:
59:ae:03:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:34:35 2025 by rpki-client