Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/01zWfYPYdotAS5GHxEECkak_r-8.roa
File: 01zWfYPYdotAS5GHxEECkak_r-8.roa (raw, json)
Hash identifier: In9keipvSZ8GB70AGkHUKRS2IkN1BCAMd1D92FOtPRU=
Subject key identifier: D3:5C:D6:7D:83:D8:76:8B:40:4B:91:87:C4:41:02:91:A9:3F:AF:EF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019690799AF9D2889E413BDDBFE20AE918C9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/01zWfYPYdotAS5GHxEECkak_r-8.roa
Signing time: Fri 02 May 2025 10:10:10 +0000
ROA not before: Fri 02 May 2025 10:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209699
IP address blocks: 151.243.58.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 06:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:79:9a:f9:d2:88:9e:41:3b:dd:bf:e2:0a:e9:18:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 2 10:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d35cd67d83d8768b404b9187c4410291a93fafef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:79:36:bf:44:38:dc:21:be:de:02:d0:ca:
0f:d6:a8:5f:3e:24:86:1c:9a:62:77:85:a4:b1:5b:
e7:f4:8c:20:fc:6e:86:fe:2b:77:07:b1:fb:43:98:
eb:9a:d8:39:73:73:50:9b:5d:8b:8c:d1:f6:d2:b5:
d0:0e:4e:00:90:bf:e7:02:3c:16:9c:96:bb:a4:35:
f9:4b:78:50:e4:29:70:09:30:e3:81:33:bf:fb:00:
6b:72:9f:50:15:29:b1:99:49:cd:95:8e:8f:6b:db:
f2:e0:50:9f:5a:19:a7:8e:d8:24:be:9c:13:13:d6:
1b:3d:4e:a1:5a:2e:39:bb:82:5d:d6:7b:40:bf:50:
eb:bd:89:3c:43:72:69:a0:ce:4f:8b:61:9d:c2:76:
61:ce:f6:54:98:6b:15:55:ff:bc:b6:17:84:60:4d:
03:b3:a4:ad:5c:86:a9:39:c8:ce:14:de:80:1b:0e:
28:44:83:62:e6:b9:a8:b6:d5:1d:fe:58:8d:d0:e3:
cf:fb:ad:05:8f:de:52:0c:ff:9b:94:52:e6:75:90:
8d:23:cc:8e:9e:6f:36:4d:70:fc:50:18:9b:e9:a7:
69:6d:21:d0:26:bf:2c:bc:32:6a:94:93:86:d2:53:
21:5a:a6:6b:42:22:d3:02:38:da:5b:32:e8:a9:ff:
ee:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5C:D6:7D:83:D8:76:8B:40:4B:91:87:C4:41:02:91:A9:3F:AF:EF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/01zWfYPYdotAS5GHxEECkak_r-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.58.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:39:5b:7d:e9:60:c9:f0:bd:3f:1a:25:93:9e:7e:ed:7e:be:
7a:91:5c:23:53:8b:3f:5a:5c:59:66:e1:c0:1c:4b:8b:fe:b5:
8d:44:b2:17:c0:7a:33:c9:ff:9f:86:4b:f8:ba:43:5e:f7:79:
16:21:f5:80:f3:cb:ee:d3:8d:3f:6f:eb:0c:0f:94:a4:cf:98:
aa:b4:53:22:78:31:af:1b:ec:58:f2:41:fd:6f:44:ea:1a:4b:
b0:d9:65:62:e5:db:22:1d:4a:61:bd:97:ad:97:14:cf:35:fa:
a1:a5:39:45:7a:7b:90:11:69:dc:19:2e:62:1f:ce:9b:6f:c8:
ac:19:68:b5:0f:1e:21:ce:3b:99:66:ce:ea:2c:bc:e4:9c:a8:
a8:db:9f:62:ea:4e:b1:b0:2f:4e:3c:14:50:d5:b0:67:51:e1:
58:d2:64:5a:7f:27:a1:af:93:18:fc:56:c9:4c:ef:3f:84:ee:
60:3d:fe:8b:93:76:b9:b9:47:9a:83:3a:44:40:4a:b8:8d:f4:
10:96:ee:f8:6c:4f:3c:60:8b:d8:85:ab:63:c4:83:d7:1d:45:
5e:2b:44:fe:03:06:43:0f:2a:e8:29:88:f7:10:dc:f0:8a:a5:
b1:95:45:a7:d7:72:b8:4c:15:7d:c9:70:5b:25:b1:9d:53:ec:
82:78:d1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:30:56 2025 by rpki-client