Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8EudoY1tJmf-SBFrk2iUNwviii0.roa
File: 8EudoY1tJmf-SBFrk2iUNwviii0.roa (raw, json)
Hash identifier: 5CKuJ/hNJHVBmdqS+nrx3y576atGgg+zY68WOP2uBd8=
Subject key identifier: F0:4B:9D:A1:8D:6D:26:67:FE:48:11:6B:93:68:94:37:0B:E2:8A:2D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01969081D8D87EF8A629BE0DB0AC7F7A39BB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8EudoY1tJmf-SBFrk2iUNwviii0.roa
Signing time: Fri 02 May 2025 10:19:10 +0000
ROA not before: Fri 02 May 2025 10:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 151.242.108.0/24 maxlen: 24
151.242.111.0/24 maxlen: 24
151.242.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 May 2025 04:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:81:d8:d8:7e:f8:a6:29:be:0d:b0:ac:7f:7a:39:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 2 10:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f04b9da18d6d2667fe48116b936894370be28a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:f2:33:e7:9f:79:8b:89:c3:42:b3:a6:5c:
66:8a:f1:90:90:df:5c:ed:6e:5f:89:96:38:24:4f:
e2:54:f7:0f:20:db:49:2f:b7:40:95:64:f0:bc:01:
82:04:be:30:c2:3f:53:b4:b0:a2:11:1a:ad:1e:16:
f3:f8:f4:98:d9:74:1a:c5:44:85:53:ee:a1:d5:ff:
c2:d7:30:57:1d:ab:93:ff:52:ee:7e:94:e7:17:c4:
a3:c9:4a:1d:e7:4b:e0:21:01:3c:d1:82:5b:ed:05:
be:0f:82:63:11:c3:b1:80:5b:7c:48:dd:a2:83:99:
69:6e:85:76:9c:21:dc:98:7c:5c:39:8b:c2:7d:f0:
45:ab:4e:83:70:54:5d:b0:78:d6:c8:fd:69:21:a7:
0d:2e:dd:63:8e:3d:89:ee:1a:bd:2e:8e:4b:52:65:
2a:d8:6f:8b:28:e1:ee:bb:70:4f:f0:5e:b4:b6:75:
0d:e9:c9:d3:12:3f:fb:90:d9:7f:2b:1e:8c:61:f1:
34:ec:f2:fe:b7:ee:18:d1:7b:76:b7:e2:08:bf:b6:
3b:01:05:3c:3e:ee:3d:1a:23:32:47:1c:f9:e0:16:
ac:00:0d:b3:da:af:3e:e8:f6:6d:c1:68:03:1a:89:
4f:0f:ae:ba:3f:09:7a:6c:cc:25:81:e6:54:86:d1:
ce:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4B:9D:A1:8D:6D:26:67:FE:48:11:6B:93:68:94:37:0B:E2:8A:2D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8EudoY1tJmf-SBFrk2iUNwviii0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.108.0/24
151.242.111.0/24
151.242.122.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:71:0c:b8:65:6f:7b:5a:34:a7:16:00:55:4c:8e:1a:25:a5:
17:78:b8:a4:df:7f:e1:0d:16:d6:02:7e:21:a0:b5:90:9a:be:
ad:fa:64:2d:21:79:34:c5:eb:74:0c:d1:43:3a:64:c7:fb:0c:
74:50:9b:a4:1e:21:8e:76:dd:34:48:09:c2:d1:32:ba:07:cf:
1b:05:e0:5c:b3:66:45:c9:4d:b5:d1:6c:ce:79:10:79:dd:6b:
9e:17:98:12:eb:9e:d1:03:fe:42:46:91:13:df:11:19:b8:1d:
52:73:82:f8:d3:ae:e2:08:b9:69:ae:ad:f0:61:97:d8:54:db:
ff:11:da:29:ac:55:f7:3e:89:35:b5:4f:fc:a2:9d:0e:68:47:
08:c2:28:a6:70:2c:72:09:66:3a:ea:6c:80:22:be:5d:b0:dd:
73:7d:03:44:36:3b:79:68:85:cf:86:86:5f:85:e2:d3:61:64:
ab:61:38:53:43:d0:3e:c1:ff:92:fa:8a:df:60:e8:e3:b9:0a:
9f:f3:fd:5e:50:c4:40:53:15:87:3b:b7:40:81:18:93:89:f7:
0e:ba:a5:e4:25:b7:71:a2:3c:4f:48:22:f9:c7:43:31:8f:4b:
49:17:e6:e5:06:84:02:db:a4:f9:67:75:48:a7:8c:d5:fb:e0:
a9:95:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:00:48 2025 by rpki-client