Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wHvjZI4GIjuBCuioBZR2k5djAt0.roa
File: wHvjZI4GIjuBCuioBZR2k5djAt0.roa (raw, json)
Hash identifier: hSvS9AR0l8i4HnFyknDnV7cm2+kDmshG3gbUDRzqzx0=
Subject key identifier: C0:7B:E3:64:8E:06:22:3B:81:0A:E8:A8:05:94:76:93:97:63:02:DD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019791A253373433FAFF37642856B197648B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wHvjZI4GIjuBCuioBZR2k5djAt0.roa
Signing time: Sat 21 Jun 2025 08:37:03 +0000
ROA not before: Sat 21 Jun 2025 08:37:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 151.242.41.0/24 maxlen: 24
151.242.58.0/24 maxlen: 24
151.242.200.0/24 maxlen: 24
151.242.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 14:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:91:a2:53:37:34:33:fa:ff:37:64:28:56:b1:97:64:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 21 08:37:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c07be3648e06223b810ae8a805947693976302dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d8:02:c4:07:f3:a3:09:41:20:71:9a:c3:38:
f6:5c:50:2a:54:1e:49:df:84:1b:88:73:c0:1d:d9:
55:a7:36:40:e8:90:b8:23:c8:15:7b:d7:eb:54:59:
54:ab:fc:ee:32:44:12:2c:9d:ce:a6:5c:12:c9:99:
bb:8e:46:58:bf:37:b0:97:b8:25:95:49:9f:13:8d:
7f:b8:01:0f:e7:51:85:ae:bf:45:c2:80:6e:54:51:
74:6b:ce:18:39:e9:b2:2c:ac:07:b6:f6:1d:a9:8f:
f5:0d:bd:1f:12:ff:85:5b:e4:b6:36:d9:e0:38:66:
9c:88:e3:64:db:f9:27:16:ba:af:7d:f2:06:ee:1a:
65:73:f7:64:15:2f:26:45:af:d5:f7:9d:27:d0:6e:
a0:dc:e2:7f:1f:b3:76:a1:e3:e1:f8:8e:17:1e:92:
73:ad:ed:13:14:63:0f:ff:69:bd:d1:d1:38:61:f0:
b3:7b:3d:d0:23:7a:e5:95:e8:ae:a4:ac:c5:20:3c:
41:b2:14:4a:9d:47:d4:4b:72:b8:97:4f:bd:31:0d:
30:a7:77:8f:ba:39:92:fe:6b:8d:f8:94:ec:f7:56:
f0:7f:31:7e:43:73:c0:be:95:87:85:77:65:2f:19:
35:2c:bb:ec:47:80:61:15:c6:64:c0:9c:70:83:8d:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7B:E3:64:8E:06:22:3B:81:0A:E8:A8:05:94:76:93:97:63:02:DD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wHvjZI4GIjuBCuioBZR2k5djAt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.41.0/24
151.242.58.0/24
151.242.200.0/23
Signature Algorithm: sha256WithRSAEncryption
61:b8:67:9d:b5:58:e8:f8:30:11:e9:43:81:4d:77:fe:1a:69:
83:b2:27:b5:6a:23:ab:87:ae:fd:d6:89:86:6a:ab:eb:34:f9:
60:1e:3f:3b:a3:e3:dd:85:6a:8e:24:6c:c1:99:05:11:13:8f:
5f:22:45:21:c0:89:4d:7d:89:76:59:47:d6:e3:40:58:f9:59:
dd:ed:3b:8b:8f:ce:e1:db:99:14:53:7b:2c:63:27:08:a6:ef:
20:f3:12:98:ad:fa:a9:db:74:7e:67:37:d6:63:ab:8d:de:62:
44:cf:62:6c:a5:04:79:26:2f:81:8f:2f:3d:a5:f8:d1:ee:ea:
eb:ea:d0:a0:f1:2d:0b:37:7b:f0:27:cb:ad:41:01:28:3a:44:
f2:0a:5e:95:c8:57:8d:93:a0:a7:04:fd:0e:ec:dd:68:d0:9e:
35:1b:a4:df:af:a5:4f:33:26:c4:38:2b:3d:91:2f:19:41:30:
8d:4f:4d:c4:aa:79:81:81:d4:1c:76:84:b6:5a:f9:95:23:02:
7b:27:13:29:82:83:58:77:79:c3:d9:9d:65:af:6c:d2:ad:b1:
62:70:ce:ed:bb:b7:98:dd:bf:07:09:3f:f7:dc:89:ac:c8:95:
78:67:ec:ac:80:6c:62:49:1c:51:08:c6:d8:30:d5:98:24:73:
87:21:46:d2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZeRolM3NDP6/zdkKFaxl2SLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjIxMDgzNzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDdiZTM2NDhlMDYyMjNiODEwYWU4YTgwNTk0NzY5Mzk3NjMwMmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8dgCxAfzowlBIHGawzj2XFAqVB5J
34QbiHPAHdlVpzZA6JC4I8gVe9frVFlUq/zuMkQSLJ3OplwSyZm7jkZYvzewl7gl
lUmfE41/uAEP51GFrr9FwoBuVFF0a84YOemyLKwHtvYdqY/1Db0fEv+FW+S2Ntng
OGaciONk2/knFrqvffIG7hplc/dkFS8mRa/V950n0G6g3OJ/H7N2oePh+I4XHpJz
re0TFGMP/2m90dE4YfCzez3QI3rlleiupKzFIDxBshRKnUfUS3K4l0+9MQ0wp3eP
ujmS/muN+JTs91bwfzF+Q3PAvpWHhXdlLxk1LLvsR4BhFcZkwJxwg413lwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMB742SOBiI7gQroqAWUdpOXYwLdMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvd0h2alpJNEdJanVCQ3Vpb0JaUjJrNWRqQXQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/IpAwQA
l/I6AwQBl/LIMA0GCSqGSIb3DQEBCwUAA4IBAQBhuGedtVjo+DAR6UOBTXf+GmmD
sie1aiOrh6791omGaqvrNPlgHj87o+PdhWqOJGzBmQURE49fIkUhwIlNfYl2WUfW
40BY+Vnd7TuLj87h25kUU3ssYycIpu8g8xKYrfqp23R+ZzfWY6uN3mJEz2JspQR5
Ji+Bjy89pfjR7urr6tCg8S0LN3vwJ8utQQEoOkTyCl6VyFeNk6CnBP0O7N1o0J41
G6Tfr6VPMybEOCs9kS8ZQTCNT03EqnmBgdQcdoS2WvmVIwJ7JxMpgoNYd3nD2Z1l
r2zSrbFicM7tu7eY3b8HCT/33ImsyJV4Z+ysgGxiSRxRCMbYMNWYJHOHIUbS
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:33:30 2025 by rpki-client