Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-jiqUBxvhyk8f-TMp3yt2EhuA20.roa
File: 1-jiqUBxvhyk8f-TMp3yt2EhuA20.roa (raw, json)
Hash identifier: H0Hl54znJ31Rb9O+cqiO2qE9FbZfsnqYWYVtHYGwsN0=
Subject key identifier: FA:38:AA:50:1C:6F:87:29:3C:7F:E4:CC:A7:7C:AD:D8:48:6E:03:6D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01964C6DDD6B131F30DEF0F1A3CB0CF9871C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-jiqUBxvhyk8f-TMp3yt2EhuA20.roa
Signing time: Sat 19 Apr 2025 05:03:10 +0000
ROA not before: Sat 19 Apr 2025 05:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199707
IP address blocks: 151.242.188.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 20 Apr 2025 05:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6d:dd:6b:13:1f:30:de:f0:f1:a3:cb:0c:f9:87:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 19 05:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa38aa501c6f87293c7fe4cca77cadd8486e036d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:df:4f:06:d2:b9:90:79:6c:98:35:01:7c:
59:bd:5e:6f:79:42:12:25:6f:4d:48:28:a0:b3:06:
8e:d4:12:be:e2:21:97:ef:69:f5:48:40:e2:37:50:
d8:19:e4:5f:00:b2:28:62:c3:6f:8e:67:15:15:7e:
ee:b7:31:06:48:66:18:db:dc:e5:ca:e7:ef:ed:15:
e0:7a:2b:bd:2e:e6:8d:e1:9b:bb:a7:19:eb:44:20:
f4:27:ef:83:fb:14:a8:3e:4f:0d:30:e6:04:f1:b5:
fa:b2:c0:c4:cc:af:f6:5d:c4:a4:ee:d2:18:54:f4:
4e:1e:56:0a:72:e4:b9:52:d0:2e:f2:2a:f0:cb:d8:
70:62:50:d6:35:5a:cd:74:63:f6:3a:39:5a:d7:d8:
dc:f2:de:44:00:64:09:7c:98:87:42:c8:dc:f8:db:
e5:8b:f2:ed:7e:d4:26:21:97:01:15:96:b7:f8:e3:
dc:3e:04:4c:fb:37:5c:89:c3:d4:27:f4:ef:3f:6a:
f6:22:e1:30:d9:a5:77:42:0e:b1:67:e9:29:ba:af:
cc:a5:e0:99:84:4d:b6:47:05:8a:53:6d:dc:68:e5:
c0:ff:92:99:bf:cb:5d:58:f3:62:65:83:ea:76:c7:
08:4d:27:e9:e7:2d:97:db:09:86:af:3b:9d:22:de:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:38:AA:50:1C:6F:87:29:3C:7F:E4:CC:A7:7C:AD:D8:48:6E:03:6D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-jiqUBxvhyk8f-TMp3yt2EhuA20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.188.0/23
Signature Algorithm: sha256WithRSAEncryption
43:50:4d:d4:eb:d5:3f:49:ad:b3:0a:fa:06:4e:7e:53:e3:51:
0b:2c:e5:1e:ff:a0:4a:01:71:7d:38:d6:ec:9a:31:5f:be:c8:
ec:0b:ea:4c:70:37:2e:ad:d8:56:ed:e0:d0:7f:a8:f1:d7:b1:
6b:c7:fa:36:a2:10:6e:df:76:f2:aa:b3:e5:c6:20:98:ee:f5:
ad:fc:bf:f7:e4:1e:81:72:7e:df:a0:02:ac:16:47:f1:a4:6c:
f3:48:4e:18:7b:35:b6:59:48:81:a8:9d:61:d4:ce:fc:21:ca:
98:6f:90:e2:ea:c9:5b:d8:77:12:10:39:43:97:8a:ec:dc:b2:
da:81:38:d3:2b:17:0b:d1:05:fb:3d:c9:62:b0:b5:dc:ab:c4:
e7:35:9a:5e:ac:c7:c2:a6:35:42:b6:e7:bc:07:28:35:91:2a:
36:cf:63:c0:8c:9b:62:09:df:bc:af:47:17:99:fe:10:d8:6a:
57:af:b9:7c:90:a7:a6:3d:47:b3:5d:7c:2d:34:a5:7e:a5:6d:
f5:52:a0:26:37:25:3d:3b:61:08:63:3b:4d:c0:f1:06:18:8a:
d2:71:cb:da:0e:43:54:9c:5f:ab:d2:96:6e:6d:cc:2b:66:11:
bf:e1:99:99:70:86:9c:78:9c:67:66:75:b5:4c:de:20:c3:07:
7a:18:24:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:58:26 2025 by rpki-client