Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qN1HsArhuPibpyvrN1tnFBeIi6w.roa
File: qN1HsArhuPibpyvrN1tnFBeIi6w.roa (raw, json)
Hash identifier: GMVG/nhdSnWIMgo8lODf2DAH63rmAfwqsu5WqYzstGU=
Subject key identifier: A8:DD:47:B0:0A:E1:B8:F8:9B:A7:2B:EB:37:5B:67:14:17:88:8B:AC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197DF7D0A4E390C61F2CC69180867F94124
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qN1HsArhuPibpyvrN1tnFBeIi6w.roa
Signing time: Sun 06 Jul 2025 11:26:43 +0000
ROA not before: Sun 06 Jul 2025 11:26:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401776
IP address blocks: 151.242.27.0/24 maxlen: 24
151.243.252.0/23 maxlen: 23
151.244.3.0/24 maxlen: 24
151.245.24.0/23 maxlen: 23
151.245.28.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 14 Jul 2025 05:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:df:7d:0a:4e:39:0c:61:f2:cc:69:18:08:67:f9:41:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 6 11:26:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8dd47b00ae1b8f89ba72beb375b671417888bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:a3:6e:5e:3a:52:bb:b8:45:4f:0d:a2:5c:
1d:c0:3f:04:17:3e:5a:a1:08:32:7a:d3:72:79:9e:
57:a0:71:2c:52:be:df:d4:61:8e:3d:ae:81:a4:6b:
f1:e4:cd:f2:3b:db:45:a2:92:09:74:be:82:a9:72:
ae:8b:a6:6e:02:94:11:c0:76:79:b5:97:e7:63:f5:
73:a1:67:2f:62:00:b8:3c:91:b1:fc:9d:e2:83:22:
27:3d:12:aa:ab:96:2e:0e:ac:57:eb:fd:b8:b8:52:
74:59:d3:25:ac:ea:0a:ea:b7:6e:13:f6:09:56:e3:
2a:38:17:95:56:e2:db:45:be:ad:f1:a3:4f:11:c5:
16:bf:05:54:e9:dc:21:e5:4d:81:9d:73:dd:21:bc:
c3:9e:04:87:40:ea:9a:33:a9:f2:d9:09:15:a9:a2:
cc:8e:66:29:3e:d7:f1:cd:c7:95:db:7c:77:37:da:
04:5a:e2:f9:ad:7b:4c:b5:f5:2e:4e:42:2c:30:d9:
a3:34:44:e8:84:f0:3f:da:1d:0e:2b:be:8b:7c:59:
d5:5f:fd:4f:57:c0:47:1a:45:72:e2:3b:dd:ca:24:
0c:bf:38:16:18:89:3c:35:47:db:bf:1c:6e:31:1e:
6c:41:db:b2:1f:b2:d3:64:ed:e3:98:2d:21:c4:3d:
d2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DD:47:B0:0A:E1:B8:F8:9B:A7:2B:EB:37:5B:67:14:17:88:8B:AC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qN1HsArhuPibpyvrN1tnFBeIi6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.27.0/24
151.243.252.0/23
151.244.3.0/24
151.245.24.0/23
151.245.28.0/23
Signature Algorithm: sha256WithRSAEncryption
39:6f:8d:7c:d4:b3:5a:ef:94:21:94:ee:97:c3:bb:58:04:68:
ce:02:90:f4:42:ef:28:d3:72:4b:9a:da:75:3d:61:32:8d:4d:
de:54:15:0d:2f:4f:54:5d:86:e2:35:4c:7c:5a:56:39:27:e6:
3c:76:b1:ab:af:4c:56:60:7b:53:53:93:4c:da:18:9e:32:9e:
57:33:8a:52:8f:d1:ea:36:ae:ae:40:d1:63:9b:83:12:d4:f9:
73:20:e6:54:bb:40:78:22:82:2a:d3:bb:b8:1e:03:98:ec:b1:
2d:c0:4b:d5:d9:a9:dc:85:7f:86:a5:75:1e:dd:34:ae:27:4b:
1c:aa:4b:bb:3f:86:02:19:0d:c5:66:17:42:99:61:c4:be:1d:
f7:3d:41:2b:73:00:82:b1:f6:1d:47:bd:e4:77:e5:4f:91:6e:
c0:b7:92:1c:31:91:45:39:8e:37:43:29:b1:31:61:2d:44:f4:
a0:a2:3e:98:50:03:24:2c:6d:69:07:d7:5e:f1:38:e9:ee:2f:
b2:07:a2:86:ae:82:ec:b8:f4:5b:0e:30:dc:53:af:03:8e:67:
db:a1:9a:e0:34:26:4f:39:8d:c3:8a:4d:26:51:88:c2:21:0b:
07:47:c3:06:f8:a4:31:98:79:cf:f4:81:b6:f5:9f:46:06:f2:
56:5d:33:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:04:58 2025 by rpki-client