Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A6b_w48iguIxU9IFI956KVYdS2I.roa
File: A6b_w48iguIxU9IFI956KVYdS2I.roa (raw, json)
Hash identifier: NxJz9hiGszKnF9sWXl5+oSXf+MDse4kze4DGzyAeqKk=
Subject key identifier: 03:A6:FF:C3:8F:22:82:E2:31:53:D2:05:23:DE:7A:29:56:1D:4B:62
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196945DB3D11AF65E1B979414A3A709B417
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A6b_w48iguIxU9IFI956KVYdS2I.roa
Signing time: Sat 03 May 2025 04:18:10 +0000
ROA not before: Sat 03 May 2025 04:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 151.240.60.0/23 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.236.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 03:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:5d:b3:d1:1a:f6:5e:1b:97:94:14:a3:a7:09:b4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 3 04:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03a6ffc38f2282e23153d20523de7a29561d4b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f9:f8:bc:48:a2:57:4d:32:ba:62:bb:07:18:
a1:1c:7c:03:f5:e4:7b:1c:f7:cc:9b:14:51:72:2d:
54:cd:95:45:46:0c:7f:91:5e:39:47:c1:cb:3f:ea:
8e:52:df:57:88:4e:c6:af:b1:c1:cb:7e:96:c4:80:
8c:31:25:19:24:c6:46:76:ea:47:4f:80:12:c8:39:
32:6e:84:18:54:db:dc:94:5e:b3:56:b0:85:3c:93:
53:76:81:bf:c8:ff:ca:54:86:72:e6:0c:91:32:64:
36:6e:3d:3c:db:f0:77:5c:38:a5:8e:e3:22:29:32:
df:1d:6b:6a:ca:43:56:9d:aa:61:d1:73:2f:d6:df:
a1:6a:d4:e8:87:bb:1e:b9:a6:20:ba:f0:42:c6:02:
e5:9a:a2:a9:ff:21:1e:29:c6:eb:9f:6a:bd:e5:ba:
1e:9a:4d:3c:11:e4:e3:85:05:39:02:ad:46:58:c0:
87:33:77:5b:88:fc:b5:88:f3:f1:ff:a6:5a:32:fb:
6d:28:4d:d4:0d:46:3f:dd:6f:89:9e:90:d2:b5:13:
97:d3:32:30:27:76:fa:f1:0d:ee:e9:ff:52:dd:bb:
e7:14:c6:d3:fe:b4:ea:9c:bf:67:ab:62:c3:0b:bf:
af:af:20:7b:5a:74:f7:a9:50:c2:5f:ab:ac:4e:c5:
e3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A6:FF:C3:8F:22:82:E2:31:53:D2:05:23:DE:7A:29:56:1D:4B:62
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A6b_w48iguIxU9IFI956KVYdS2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.60.0/23
151.242.224.0/22
151.242.236.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:67:8f:cc:af:79:2d:22:56:cc:47:61:33:52:df:b7:73:60:
87:06:39:6d:68:98:79:0e:92:cc:c8:75:d7:38:18:89:8f:01:
8b:c5:07:b7:a9:b4:3b:b5:bf:89:9c:31:50:ed:62:de:7f:b1:
41:db:9b:d5:7a:1a:85:5f:4e:56:b3:57:f5:51:bc:57:30:20:
67:c2:da:b8:b7:0a:67:bf:eb:42:4e:66:ec:4c:bc:9d:9f:58:
0a:99:4c:e4:b4:4d:ad:33:af:2d:f9:75:f7:31:2a:a9:2b:2b:
ab:a5:1e:37:40:2d:4c:1d:cb:8d:78:69:93:0c:95:1f:80:01:
da:7e:b2:a9:6e:d7:ff:c3:b0:15:a8:ff:9b:7f:03:4b:12:9f:
d1:d3:5d:15:c8:0e:c0:27:b7:c9:51:55:cd:8b:0f:bc:b1:62:
8b:4c:1c:50:29:7c:6c:83:76:3b:9d:97:91:48:a9:9e:70:8c:
ba:cb:5d:df:21:35:38:51:b5:ef:de:e7:46:e8:e2:92:ee:c1:
e0:a3:ea:be:1e:de:e0:96:ed:b2:77:76:33:ad:43:70:d5:4a:
f9:79:6f:51:eb:1a:ca:d7:ed:99:a5:a3:fd:7e:3e:c3:5f:7e:
d7:1f:b5:5a:9a:3d:ee:b5:a2:6c:57:8a:67:84:7e:3e:c1:24:
37:f8:30:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:07:14 2025 by rpki-client