Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wRe9HffPC5DuyFk9t_xwYM1AI28.roa
File: wRe9HffPC5DuyFk9t_xwYM1AI28.roa (raw, json)
Hash identifier: 7rX9+Z2T8Cd4tnZCoqCnNCcm/e4BAAznrNZnWHHrkZY=
Subject key identifier: C1:17:BD:1D:F7:CF:0B:90:EE:C8:59:3D:B7:FC:70:60:CD:40:23:6F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D95AE7BA67674C196CCE0D409F67484C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wRe9HffPC5DuyFk9t_xwYM1AI28.roa
Signing time: Sat 05 Jul 2025 06:51:42 +0000
ROA not before: Sat 05 Jul 2025 06:51:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211373
IP address blocks: 151.245.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Jul 2025 05:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:5a:e7:ba:67:67:4c:19:6c:ce:0d:40:9f:67:48:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 5 06:51:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c117bd1df7cf0b90eec8593db7fc7060cd40236f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e4:b8:a4:70:11:8b:20:ab:be:af:c4:f5:e5:
c5:cd:76:dc:6d:3e:4d:ae:36:87:65:7a:21:08:fa:
32:97:d0:fe:71:bc:e3:56:5a:11:d1:e1:9b:38:85:
8e:e5:e3:35:2e:55:45:fa:3a:df:0c:33:6c:06:0c:
c6:b8:96:cc:99:aa:39:78:00:6e:7a:2d:43:24:50:
bc:3c:47:3d:33:95:0c:57:a8:4a:de:47:a8:80:f7:
39:33:af:f2:c2:c3:d1:4f:8e:0d:a0:20:52:75:8c:
c0:fe:93:d8:d5:d8:33:56:7b:99:18:f6:35:68:a3:
de:d3:aa:57:3a:ec:12:b9:81:0a:4c:e0:01:9b:21:
88:9b:1d:41:ff:a1:66:ba:9e:37:07:9b:d9:2a:b3:
00:c2:24:cd:51:72:66:00:99:1f:96:7d:9f:2b:bc:
80:8f:74:dc:f5:2d:f5:e3:fa:97:00:b1:87:07:4c:
f4:39:b5:fe:5e:3e:8d:2f:98:f4:02:4a:ab:71:00:
c8:87:d5:7e:46:3b:ea:5f:41:18:80:0f:74:cc:bf:
f5:2e:61:2b:00:e8:88:85:6c:60:5a:d0:01:c5:8c:
f3:e2:1b:d4:04:d1:0a:d5:32:ad:b6:52:dd:f6:b1:
ac:0c:36:12:3c:ee:08:85:d5:b0:32:43:55:28:cb:
d1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:17:BD:1D:F7:CF:0B:90:EE:C8:59:3D:B7:FC:70:60:CD:40:23:6F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wRe9HffPC5DuyFk9t_xwYM1AI28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.134.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:40:b3:6c:97:54:e1:6d:c3:62:0b:20:d2:b6:81:5f:ca:d7:
38:45:8c:4e:61:1e:9b:84:ad:26:0e:33:db:58:4c:b9:97:80:
97:85:40:c1:6f:c4:f3:aa:7d:6d:a7:97:40:d4:e7:1e:58:29:
12:84:c9:2d:66:32:ed:b2:f3:9f:15:d4:b2:be:82:52:0b:6d:
9e:2c:2e:2f:c4:0d:c7:00:07:ec:77:b5:a8:f2:5d:d6:b3:0b:
06:b7:b1:66:ca:a4:98:4f:30:4d:c2:1f:66:6f:6d:f0:44:fe:
2d:1a:f5:b2:49:16:b4:43:96:d6:e8:00:4c:46:62:8f:89:57:
ca:6a:71:3c:5a:cd:83:59:1f:6b:9b:69:cd:b5:f1:ff:61:8d:
38:04:38:1d:d3:b7:ae:c1:f2:7d:da:7c:b5:e3:f1:e3:c4:e9:
6c:ac:94:cc:25:12:d4:52:65:29:c6:a2:f5:1b:68:f5:25:29:
48:a0:8e:14:81:bd:3b:60:ae:f5:7f:7e:e1:95:f6:ef:1b:55:
3e:e8:1e:38:c3:a5:18:7d:1d:d3:09:6c:c1:aa:05:9f:f2:5a:
99:05:c2:84:e8:09:13:03:f3:2c:23:53:26:48:3b:0b:68:0b:
eb:27:d0:01:2c:12:83:73:ad:e7:f4:d9:69:db:7c:3e:a2:19:
6f:4d:33:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:39:07 2025 by rpki-client