Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ClNkvgmhLsFnT-VDvoJSIShbRaQ.roa
File: ClNkvgmhLsFnT-VDvoJSIShbRaQ.roa (raw, json)
Hash identifier: WjfcvzXQ7sgmEfTcYSz8XchNbnArJRUtvL3UpdCN354=
Subject key identifier: 0A:53:64:BE:09:A1:2E:C1:67:4F:E5:43:BE:82:52:21:28:5B:45:A4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01972A745082B15F35C35BA84E8691C9D444
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ClNkvgmhLsFnT-VDvoJSIShbRaQ.roa
Signing time: Sun 01 Jun 2025 07:45:55 +0000
ROA not before: Sun 01 Jun 2025 07:45:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197477
IP address blocks: 151.243.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 05:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2a:74:50:82:b1:5f:35:c3:5b:a8:4e:86:91:c9:d4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 1 07:45:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a5364be09a12ec1674fe543be825221285b45a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2b:d6:91:1f:77:da:90:54:42:04:ec:9c:a8:
35:0a:d2:bb:96:d7:f1:89:3f:87:3c:8d:74:c8:7f:
02:72:05:8f:3e:0e:a5:7d:82:cd:48:f1:2d:df:12:
fa:f5:b6:c7:ca:97:a3:96:fc:de:79:0c:58:c1:4a:
1a:2f:cd:37:8e:84:2d:f4:eb:cd:f1:5e:44:6f:39:
72:65:fb:7f:ce:cd:dc:60:53:5d:4a:0f:1f:10:eb:
b6:44:d3:c2:d3:b8:c2:35:12:70:6a:81:60:ac:3d:
68:e1:15:bc:4c:f7:0f:c7:dc:a6:ae:12:76:ea:d4:
4b:16:d6:1d:f3:04:fe:ed:6e:81:c2:d0:75:ee:28:
37:6e:75:07:fd:72:2f:77:2a:24:4a:86:95:2b:53:
c6:6c:8a:32:81:da:24:bb:b6:eb:b1:ec:c1:2e:fd:
1b:99:b3:c0:17:be:09:5a:59:19:e2:4f:a1:84:16:
c5:7a:9d:6c:a4:0c:20:82:16:b3:c1:f1:a4:4b:f7:
76:a6:78:43:9b:98:c7:5c:8a:53:07:0c:42:2a:76:
83:02:15:20:c6:1d:fd:b1:45:93:97:4e:9f:a8:45:
bf:90:36:aa:80:72:b8:6c:b4:b1:fe:da:f9:05:64:
e3:dd:ad:01:94:03:41:40:3d:d0:1f:1b:8b:de:00:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:53:64:BE:09:A1:2E:C1:67:4F:E5:43:BE:82:52:21:28:5B:45:A4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ClNkvgmhLsFnT-VDvoJSIShbRaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.57.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a0:64:1f:e9:8e:8e:ad:b5:8f:3c:27:fa:3a:df:83:8a:19:
42:ef:78:ec:f6:b7:6a:92:6e:01:e2:fd:da:33:e6:e9:96:bf:
01:3b:cb:ff:5c:e2:8c:67:fc:bd:95:6e:27:27:cc:fb:6a:20:
e9:81:61:e0:c3:d6:45:51:97:0f:31:01:09:a5:1b:da:2d:4a:
3a:fe:cd:25:b5:db:37:67:f8:4f:8a:11:ca:73:71:b2:ad:91:
80:a7:6e:46:3b:56:73:c1:14:30:91:ae:7a:8b:9a:93:5c:61:
58:d5:a4:7e:33:6b:32:77:5e:7b:1a:73:21:38:3d:93:d5:52:
80:dc:16:65:5c:86:02:19:ad:6d:e0:25:b9:fa:4c:3b:ad:6e:
65:a1:2a:9e:42:41:f2:f2:f2:83:0b:60:39:48:a9:7c:3a:ce:
d8:c7:7a:6d:4f:63:6b:8b:6f:6d:c9:7c:0b:6f:24:27:0d:94:
53:6e:57:c1:84:2b:75:b4:77:1f:29:1f:1a:43:09:32:1b:d2:
a0:eb:8f:62:4d:0c:25:c8:df:48:8b:06:b0:08:dc:b3:b6:9d:
c2:b6:6d:c6:c5:99:1c:65:5a:e6:c0:bb:4d:ae:09:ee:d0:0c:
0c:81:64:b0:da:ad:a0:4d:5c:cd:e1:14:5e:d5:96:ac:3b:03:
af:61:cd:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcqdFCCsV81w1uoToaRydREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjAxMDc0NTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTUzNjRiZTA5YTEyZWMxNjc0ZmU1NDNiZTgyNTIyMTI4NWI0NWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhivWkR932pBUQgTsnKg1CtK7ltfx
iT+HPI10yH8CcgWPPg6lfYLNSPEt3xL69bbHypejlvzeeQxYwUoaL803joQt9OvN
8V5EbzlyZft/zs3cYFNdSg8fEOu2RNPC07jCNRJwaoFgrD1o4RW8TPcPx9ymrhJ2
6tRLFtYd8wT+7W6BwtB17ig3bnUH/XIvdyokSoaVK1PGbIoygdoku7brsezBLv0b
mbPAF74JWlkZ4k+hhBbFep1spAwgghazwfGkS/d2pnhDm5jHXIpTBwxCKnaDAhUg
xh39sUWTl06fqEW/kDaqgHK4bLSx/tr5BWTj3a0BlANBQD3QHxuL3gB/BwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFApTZL4JoS7BZ0/lQ76CUiEoW0WkMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQ2xOa3ZnbWhMc0ZuVC1WRHZvSlNJU2hiUmFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/M5MA0G
CSqGSIb3DQEBCwUAA4IBAQAfoGQf6Y6OrbWPPCf6Ot+DihlC73js9rdqkm4B4v3a
M+bplr8BO8v/XOKMZ/y9lW4nJ8z7aiDpgWHgw9ZFUZcPMQEJpRvaLUo6/s0ltds3
Z/hPihHKc3GyrZGAp25GO1ZzwRQwka56i5qTXGFY1aR+M2syd157GnMhOD2T1VKA
3BZlXIYCGa1t4CW5+kw7rW5loSqeQkHy8vKDC2A5SKl8Os7Yx3ptT2Nri29tyXwL
byQnDZRTblfBhCt1tHcfKR8aQwkyG9Kg649iTQwlyN9IiwawCNyztp3Ctm3GxZkc
ZVrmwLtNrgnu0AwMgWSw2q2gTVzN4RRe1ZasOwOvYc1t
-----END CERTIFICATE-----
Generated at Fri Jun 6 20:57:11 2025 by rpki-client