Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wy8gWezjVGEXn4GmWdxpV3Yd2sU.roa
File: wy8gWezjVGEXn4GmWdxpV3Yd2sU.roa (raw, json)
Hash identifier: O2cnDlYiDLJsmJv/I327zVTYbjf5OfXI/EiTAcDgcqc=
Subject key identifier: C3:2F:20:59:EC:E3:54:61:17:9F:81:A6:59:DC:69:57:76:1D:DA:C5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01981D398673FBE8D813CCB86E122BF5C537
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wy8gWezjVGEXn4GmWdxpV3Yd2sU.roa
Signing time: Fri 18 Jul 2025 11:09:25 +0000
ROA not before: Fri 18 Jul 2025 11:09:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198584
IP address blocks: 151.244.14.0/24 maxlen: 24
151.244.44.0/24 maxlen: 24
151.244.50.0/24 maxlen: 24
151.244.85.0/24 maxlen: 24
151.246.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Jul 2025 07:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:1d:39:86:73:fb:e8:d8:13:cc:b8:6e:12:2b:f5:c5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 18 11:09:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c32f2059ece35461179f81a659dc6957761ddac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e3:f6:ca:b1:bd:17:72:47:c6:be:be:44:03:
b2:74:3c:04:27:4e:d2:0a:33:49:c6:29:36:5a:90:
e5:eb:62:51:dc:07:46:2b:1b:39:ec:77:72:8c:e3:
6a:66:51:2c:97:b2:29:0d:2a:71:df:47:f5:6c:3b:
f9:12:7a:fd:e2:18:9b:60:9b:1e:d9:7b:f7:f2:2f:
6b:49:6d:37:74:b3:b3:04:f1:06:01:a4:6b:d6:c2:
b2:e8:f3:a5:a2:ea:85:c7:30:14:d3:82:1e:86:d4:
09:86:3e:1b:45:ce:9c:6f:9e:5a:a7:21:25:3f:43:
3b:72:50:90:df:b2:84:59:d4:b4:39:88:6c:e1:27:
02:87:0d:8e:8c:82:00:90:74:c5:ca:8e:cf:61:9f:
98:a9:e8:ff:90:f3:a4:27:46:03:79:85:37:2c:1f:
46:19:a9:f5:17:3d:12:a1:a9:16:02:1e:2a:ee:76:
57:c5:40:c6:09:b0:eb:ba:c5:bc:2f:a6:52:46:6e:
96:04:18:88:ea:3d:9d:69:53:11:77:ac:88:8e:a9:
62:56:94:22:56:b5:43:ef:2b:b1:97:e1:2a:bb:56:
52:49:69:79:01:41:6d:f9:b7:6a:b0:13:b9:92:b7:
a0:35:cd:ac:ce:b7:9e:7e:f4:81:0d:93:48:ea:09:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2F:20:59:EC:E3:54:61:17:9F:81:A6:59:DC:69:57:76:1D:DA:C5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wy8gWezjVGEXn4GmWdxpV3Yd2sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.14.0/24
151.244.44.0/24
151.244.50.0/24
151.244.85.0/24
151.246.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c3:f4:c6:04:fe:0f:33:b3:a3:88:4d:d0:94:7f:c8:c7:c0:
7d:04:cf:73:11:44:a9:b6:03:7f:42:29:a6:f5:ba:90:dd:f7:
d1:db:ca:81:fc:1a:61:9d:c8:03:91:6b:4e:af:53:60:35:b0:
82:19:c8:f5:2a:40:df:6f:38:69:32:07:30:3c:2f:76:d1:54:
a3:0c:e0:66:94:d7:58:d4:55:df:b4:17:9d:fe:26:38:25:10:
dc:00:01:03:87:03:ce:a5:ea:36:4e:e7:80:0b:42:73:90:19:
ae:e2:24:81:37:c1:c4:ea:a0:50:98:40:b7:5b:a4:71:72:d3:
f6:49:b3:42:f0:cd:18:0d:d9:1b:19:4d:59:08:6f:9d:56:47:
1e:84:74:cc:bb:4b:5f:e8:05:06:e6:3a:2d:f3:c2:ef:40:b8:
b6:6f:9b:a1:8f:f8:38:67:20:1e:df:dc:f0:a8:e4:8c:2a:72:
8b:45:64:b7:de:3c:7b:bc:4e:3b:08:cb:8c:c3:e5:17:3a:e9:
86:74:47:44:a3:22:26:59:18:e7:fd:c2:d9:91:bf:b3:d0:03:
f4:90:51:97:af:85:9f:16:79:ca:c9:a4:0c:80:d1:0d:1f:b3:
1a:35:f4:8f:ec:2e:90:89:05:da:41:03:e0:71:28:f8:09:9f:
5a:6e:81:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:49:04 2025 by rpki-client