Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-vyHVrfd-Rdzeng7vSuYud5nLJc.roa
File: 1-vyHVrfd-Rdzeng7vSuYud5nLJc.roa (raw, json)
Hash identifier: ubgwTcPcmM87OzB4sKELssU1W8h5eK2YhqlibkATL2A=
Subject key identifier: FA:FC:87:56:B7:DD:F9:17:73:7A:78:3B:BD:2B:98:B9:DE:67:2C:97
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196EC237D7181AB51251E89F121F771D4AC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-vyHVrfd-Rdzeng7vSuYud5nLJc.roa
Signing time: Tue 20 May 2025 05:21:10 +0000
ROA not before: Tue 20 May 2025 05:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 151.242.108.0/24 maxlen: 24
151.242.111.0/24 maxlen: 24
151.242.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 06:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:23:7d:71:81:ab:51:25:1e:89:f1:21:f7:71:d4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 20 05:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fafc8756b7ddf917737a783bbd2b98b9de672c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:1e:f3:09:17:29:ba:b6:17:87:e2:6e:f4:
4d:83:d3:54:86:8d:45:22:c8:81:93:dd:1e:7f:8c:
1f:93:93:e5:30:1a:fd:48:3e:69:a8:b1:0e:5c:85:
f2:b3:30:45:43:61:cc:4f:01:5a:2f:17:d7:77:4d:
98:9b:88:d6:50:15:d5:0e:d4:4d:b7:c7:f6:3b:b3:
fa:34:f5:54:8c:31:ad:13:01:4d:59:15:19:e5:24:
d0:7c:4d:dc:fe:a0:ab:79:2d:e5:e3:b0:57:a9:8c:
cf:3b:92:1e:a8:c6:27:ad:e0:b6:94:0c:08:99:9c:
7e:4f:97:88:8e:4a:e2:3b:6e:ed:0c:95:4f:ab:ae:
22:49:e4:83:80:4e:28:c3:5e:82:8e:0b:d4:b1:b3:
62:6d:32:19:57:b7:af:00:93:c6:7f:0b:a4:0d:d9:
23:27:25:e5:21:1d:27:fb:09:30:91:89:e7:6d:d7:
09:95:3d:35:c8:3e:d7:38:a2:b5:80:d2:88:94:f7:
14:4c:5f:03:3f:01:49:36:4f:d7:e8:02:40:36:cb:
6f:5a:27:0f:1e:59:11:f8:21:35:f4:9f:ca:e7:52:
30:fe:14:8c:0b:cf:c1:a3:14:3f:b8:09:65:4a:9a:
fb:c2:81:dd:77:5c:ae:4d:04:9c:30:a0:72:ae:aa:
08:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FC:87:56:B7:DD:F9:17:73:7A:78:3B:BD:2B:98:B9:DE:67:2C:97
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-vyHVrfd-Rdzeng7vSuYud5nLJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.108.0/24
151.242.111.0/24
151.242.155.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e6:4e:f9:93:7a:44:5e:21:ba:4d:99:b2:7c:13:b2:7f:e3:
ec:1b:8f:dd:a4:b4:cc:26:a5:a4:cc:9b:0f:d4:c9:6f:8f:ff:
54:db:a9:5b:19:e0:11:11:f2:f2:e3:24:a2:76:7a:9f:a1:51:
73:b5:bd:1e:6e:24:5c:09:a6:8d:fe:6e:26:ac:32:15:f0:2f:
04:65:1a:5a:8c:54:72:45:06:bd:bf:4c:d8:e8:62:8a:1d:1a:
bd:9d:ad:79:a0:2f:d2:33:ea:13:36:01:e7:e3:6e:8f:27:ad:
64:42:7d:77:86:44:91:86:cb:d2:b5:19:f5:e0:1e:27:9c:2c:
8f:96:a3:c8:36:ef:7a:9c:c4:b6:61:84:44:8f:ed:63:48:01:
ca:34:7d:61:98:1f:97:85:12:49:15:f8:52:db:ff:f7:01:4f:
c0:e3:74:ad:13:6d:4b:cf:f1:e9:64:98:49:e3:b7:bf:33:09:
65:dd:b3:5d:de:af:89:a8:45:0a:1a:d9:fc:64:c2:36:1c:70:
04:ab:a6:d0:ab:ab:66:b6:e1:48:ec:cc:62:b2:9d:94:0f:24:
12:9b:83:97:94:12:69:6b:33:04:c6:9d:09:6f:b6:a0:26:ef:
c4:d4:54:5c:aa:dd:7e:79:8b:66:84:90:11:64:c0:89:05:22:
db:2e:ba:a8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:55:48 2025 by rpki-client