Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/qsjOSpEuKMBGJrXWHvZCJj9Lzgk.roa
File: qsjOSpEuKMBGJrXWHvZCJj9Lzgk.roa (raw, json)
Hash identifier: jhM7nmE54J/PCRwXNih+rtSzhfFxg+IHP31PrI9L16g=
Subject key identifier: AA:C8:CE:4A:91:2E:28:C0:46:26:B5:D6:1E:F6:42:26:3F:4B:CE:09
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 01970CA2A43F5B3675763EE3D9C2CEFA57F0
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/qsjOSpEuKMBGJrXWHvZCJj9Lzgk.roa
Signing time: Mon 26 May 2025 12:47:54 +0000
ROA not before: Mon 26 May 2025 12:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215185
IP address blocks: 151.218.0.0/18 maxlen: 18
Validation: Failed, certificate revoked on Tue 03 Jun 2025 16:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0c:a2:a4:3f:5b:36:75:76:3e:e3:d9:c2:ce:fa:57:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: May 26 12:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aac8ce4a912e28c04626b5d61ef642263f4bce09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:86:53:6b:80:41:cb:66:8f:ba:db:b0:12:
47:2c:9a:8a:2d:e0:78:e7:d0:18:9e:67:11:d6:e4:
6a:c0:87:0a:34:92:95:02:cc:8d:61:34:e6:1d:f2:
d0:08:bd:39:95:6c:be:67:3b:fc:1b:2c:7e:3f:a8:
61:4d:85:57:dc:96:30:7f:4d:6c:fa:13:35:08:c4:
39:ab:8e:b4:6f:9a:ec:c3:63:d6:1c:bd:eb:a6:9f:
a7:3e:df:0a:2f:67:b5:74:12:fb:5c:ea:bb:a9:37:
70:44:20:a6:47:08:1b:64:98:b9:0c:e6:ed:09:5d:
4d:78:26:53:da:f8:b6:b5:12:ae:47:6f:23:39:f8:
cb:b6:df:db:1a:a4:41:ea:fe:97:46:d4:e7:ee:de:
9c:61:19:3c:ec:38:a2:53:ac:e4:64:24:02:71:a8:
4f:00:23:01:5c:bb:ed:6c:96:12:3a:7d:ac:36:15:
7e:99:c4:68:26:45:ad:3c:01:98:30:47:12:1a:86:
ce:bc:f4:82:f0:38:47:b2:e8:c0:83:89:43:fd:16:
3c:10:e5:26:5d:3b:14:d2:c4:2b:2c:1a:6c:18:5a:
31:60:07:bb:a7:a8:24:2f:f2:30:27:2a:b8:fa:18:
5b:8c:07:2d:e6:f4:d4:a8:e1:1e:35:1c:86:da:17:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C8:CE:4A:91:2E:28:C0:46:26:B5:D6:1E:F6:42:26:3F:4B:CE:09
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/qsjOSpEuKMBGJrXWHvZCJj9Lzgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.218.0.0/18
Signature Algorithm: sha256WithRSAEncryption
7d:f3:48:10:d7:03:1f:70:88:08:8d:bb:2d:b7:a6:f3:91:53:
a7:28:a0:6a:c6:a5:d2:5a:2c:5c:64:77:b5:69:18:bc:a4:e1:
86:4a:e1:a2:03:e9:ea:65:05:db:66:2f:cf:2d:45:a3:c2:73:
5a:4e:4e:03:90:b7:88:76:d6:ff:65:5d:a9:08:fa:b3:c8:0e:
bd:f6:8d:a4:65:c3:8d:36:15:cf:84:72:99:40:66:f0:db:c8:
55:e7:24:f0:1f:ba:63:a5:86:73:18:1e:02:17:77:39:6d:c3:
3c:92:b4:63:0e:dd:98:26:49:06:94:d8:39:b6:3c:25:82:6d:
1d:66:4a:8c:b3:aa:72:67:33:4c:11:e5:aa:c1:f7:12:a3:ca:
1d:6a:3d:77:0a:58:fc:bf:46:69:5a:57:e4:06:2c:1a:27:67:
8c:48:d4:55:cf:ec:65:bf:01:47:a5:59:df:08:29:ab:e4:0f:
33:75:94:9d:e6:5c:fd:a2:af:11:f2:cd:b7:25:62:bf:ca:e9:
79:6a:a7:11:3b:9c:30:6c:e4:8c:36:bf:c4:c1:23:c2:b5:db:
64:7c:5a:c1:1b:1f:67:fc:08:e1:1e:af:b3:08:6a:da:dd:cc:
2a:26:52:83:9d:76:ba:8f:01:3e:24:c1:d3:f0:ef:17:bc:08:
2f:ce:95:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:16 2025 by rpki-client