Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uRERFl0mBJxzySou_nh6PvBmu4c.roa
File: uRERFl0mBJxzySou_nh6PvBmu4c.roa (raw, json)
Hash identifier: lHv63WGWxaQMTjpwwtVAaWRaxipPq7vFNjMF63asHzY=
Subject key identifier: B9:11:11:16:5D:26:04:9C:73:C9:2A:2E:FE:78:7A:3E:F0:66:BB:87
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196210B0401E3BA3718CBED1F7668BC67C5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uRERFl0mBJxzySou_nh6PvBmu4c.roa
Signing time: Thu 10 Apr 2025 18:51:32 +0000
ROA not before: Thu 10 Apr 2025 18:51:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149573
IP address blocks: 151.242.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Apr 2025 10:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:0b:04:01:e3:ba:37:18:cb:ed:1f:76:68:bc:67:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 10 18:51:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b91111165d26049c73c92a2efe787a3ef066bb87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:bf:01:ab:56:93:2b:48:fe:49:e8:08:65:
69:52:c4:b5:e8:aa:21:a3:dd:71:02:1a:e1:29:f2:
35:59:63:1c:ca:27:5c:3b:01:4d:96:33:41:c3:5b:
2e:54:5e:8a:fe:41:9a:ea:23:90:1b:84:ab:b3:6f:
c7:70:e4:51:f8:f9:73:48:98:51:47:db:86:e7:9b:
56:f1:29:aa:ab:04:52:9d:77:b0:6c:f6:b9:44:cc:
5a:78:f9:fb:95:9a:42:57:ce:bd:93:a0:6a:f7:92:
fd:24:05:f2:ec:5f:83:af:be:55:39:48:60:95:72:
f1:40:48:84:3b:c1:84:cc:80:78:fd:20:f1:ae:28:
5c:7f:02:54:dc:17:44:b0:df:6c:45:28:58:34:8f:
ca:06:c0:3c:e3:a9:0f:7b:a8:0e:36:90:d2:b1:4d:
91:38:1f:77:57:39:60:be:a0:c9:c3:31:15:50:2c:
17:5a:7d:f0:2a:54:b5:c4:a4:70:c2:8f:5c:bd:71:
2f:68:62:a7:cc:f8:10:ed:79:91:7c:54:2d:3a:46:
94:04:97:bb:9b:eb:f5:5a:a9:8e:13:c4:28:6f:b6:
43:43:06:1b:d0:ad:ef:55:50:e9:b6:ae:e0:d9:a5:
4c:9d:29:e0:0f:d6:dc:91:c0:87:8e:8b:f7:6f:46:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:11:11:16:5D:26:04:9C:73:C9:2A:2E:FE:78:7A:3E:F0:66:BB:87
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uRERFl0mBJxzySou_nh6PvBmu4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.51.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:02:a7:66:a5:49:6c:e4:ff:b2:2c:01:15:7c:b8:86:91:26:
eb:e4:be:cc:28:60:73:35:2c:a4:8d:ea:73:ed:16:d5:b9:3a:
f1:a5:03:97:60:be:a8:58:69:ec:c2:92:92:97:25:01:27:ff:
d4:79:4b:b4:43:b9:b5:73:e4:3f:13:40:05:e9:72:6c:5c:63:
55:93:9d:ea:a7:55:07:15:aa:b7:0e:e5:da:a9:17:05:aa:7d:
b8:74:8c:10:91:a4:b2:ee:41:2d:92:eb:63:87:d6:70:66:73:
bc:19:da:74:2c:0f:55:1c:ac:cc:1c:14:08:97:2c:16:2f:ce:
10:4f:fb:28:da:2c:b1:27:8c:6b:43:4a:4a:b3:a5:8b:83:06:
20:59:70:ca:05:65:69:20:53:03:26:b4:16:94:c8:f1:ef:84:
73:58:28:7f:09:8a:ee:c8:5f:50:38:91:ae:66:18:09:a9:81:
56:e3:49:30:6e:8a:45:75:73:a0:be:00:45:01:89:9f:fe:da:
be:93:1a:21:75:67:66:ed:2f:9b:0b:9e:36:30:67:30:17:92:
35:8d:3f:eb:90:37:f1:a1:8d:5b:2e:b1:f6:0c:2b:b1:f0:98:
ad:1b:1a:a8:da:a8:c8:6a:9a:10:0e:14:87:e4:ca:a9:38:d6:
5d:36:5a:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYhCwQB47o3GMvtH3ZovGfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDEwMTg1MTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTExMTExNjVkMjYwNDljNzNjOTJhMmVmZTc4N2EzZWYwNjZiYjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGq/AatWkytI/knoCGVpUsS16Koh
o91xAhrhKfI1WWMcyidcOwFNljNBw1suVF6K/kGa6iOQG4Srs2/HcORR+PlzSJhR
R9uG55tW8SmqqwRSnXewbPa5RMxaePn7lZpCV869k6Bq95L9JAXy7F+Dr75VOUhg
lXLxQEiEO8GEzIB4/SDxrihcfwJU3BdEsN9sRShYNI/KBsA846kPe6gONpDSsU2R
OB93VzlgvqDJwzEVUCwXWn3wKlS1xKRwwo9cvXEvaGKnzPgQ7XmRfFQtOkaUBJe7
m+v1WqmOE8Qob7ZDQwYb0K3vVVDptq7g2aVMnSngD9bckcCHjov3b0YJswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLkRERZdJgScc8kqLv54ej7wZruHMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdVJFUkZsMG1CSnh6eVNvdV9uaDZQdkJtdTRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/IzMA0G
CSqGSIb3DQEBCwUAA4IBAQC3AqdmpUls5P+yLAEVfLiGkSbr5L7MKGBzNSykjepz
7RbVuTrxpQOXYL6oWGnswpKSlyUBJ//UeUu0Q7m1c+Q/E0AF6XJsXGNVk53qp1UH
Faq3DuXaqRcFqn24dIwQkaSy7kEtkutjh9ZwZnO8Gdp0LA9VHKzMHBQIlywWL84Q
T/so2iyxJ4xrQ0pKs6WLgwYgWXDKBWVpIFMDJrQWlMjx74RzWCh/CYruyF9QOJGu
ZhgJqYFW40kwbopFdXOgvgBFAYmf/tq+kxohdWdm7S+bC542MGcwF5I1jT/rkDfx
oY1bLrH2DCux8JitGxqo2qjIapoQDhSH5MqpONZdNlqw
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:25:34 2025 by rpki-client