Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LMvFsoQvsHh7P1UQLKSjzfuR_7w.roa
File: LMvFsoQvsHh7P1UQLKSjzfuR_7w.roa (raw, json)
Hash identifier: I7Bvba6TLK4QmJDj7xJ6+hDGOzpF812GuLEyHuOdQjA=
Subject key identifier: 2C:CB:C5:B2:84:2F:B0:78:7B:3F:55:10:2C:A4:A3:CD:FB:91:FF:BC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196F12E638D22B410587F1187C8CA2B3124
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LMvFsoQvsHh7P1UQLKSjzfuR_7w.roa
Signing time: Wed 21 May 2025 04:51:11 +0000
ROA not before: Wed 21 May 2025 04:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 151.242.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 08:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:2e:63:8d:22:b4:10:58:7f:11:87:c8:ca:2b:31:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 21 04:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ccbc5b2842fb0787b3f55102ca4a3cdfb91ffbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:c9:22:ba:0d:0d:19:78:33:6b:63:2a:2d:
dd:38:82:75:fa:55:6a:d8:d9:9c:35:cf:a8:5c:b0:
f7:bb:1b:ba:ca:7d:e0:cd:f3:da:5a:70:b3:93:68:
c8:27:e3:16:7e:7e:06:e7:69:87:ae:a2:1c:8d:a7:
c0:3c:0f:aa:b5:d1:d0:e1:d7:22:80:c9:27:72:ee:
85:aa:fb:45:ed:86:6f:6e:f1:c5:33:90:9d:bc:58:
66:9d:9a:70:4f:40:df:de:f1:be:56:96:d1:3e:18:
f4:95:e0:31:a0:d1:d4:f2:33:05:61:e2:3c:42:fa:
d4:94:ed:f5:e7:4b:40:31:58:7e:c1:1d:46:d5:f8:
15:9b:60:06:bb:8c:fc:c8:f7:91:5d:04:46:d2:a6:
59:48:f8:45:f0:03:b0:6c:58:75:39:77:fd:50:f9:
21:2a:85:f5:e2:29:4d:53:c5:69:e8:cd:78:36:04:
f6:07:cd:a2:e6:1c:80:66:66:35:3e:8e:42:e8:66:
2b:39:ca:f3:7e:56:91:7d:54:5f:30:07:b3:22:3b:
0d:3a:59:b6:02:81:89:54:a7:d1:bb:62:fc:3f:2c:
71:35:13:61:47:b8:72:f4:52:d7:8d:d6:54:9b:bf:
9e:70:e5:7f:1e:b0:06:a5:22:a5:2f:ae:2c:2b:b0:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CB:C5:B2:84:2F:B0:78:7B:3F:55:10:2C:A4:A3:CD:FB:91:FF:BC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LMvFsoQvsHh7P1UQLKSjzfuR_7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.119.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:78:83:c0:b1:90:b4:8d:a2:87:29:3e:cd:80:28:45:01:aa:
7a:b8:9e:bd:03:40:76:58:a7:6a:0f:a4:88:97:98:fc:e1:63:
00:ea:59:4f:b6:c9:16:db:e0:4b:4d:a9:e1:12:36:6b:8b:e4:
44:1c:8e:20:98:25:7a:7f:39:10:eb:95:7f:bf:6e:64:26:73:
23:aa:e4:c8:1a:c6:49:9b:3e:bb:bd:7b:3e:bf:1d:9d:d9:4a:
64:2f:95:88:d2:23:eb:cf:14:4f:ca:1b:bb:56:9b:3b:00:fd:
16:6a:d4:a4:f8:2f:db:b9:b1:60:aa:ac:b5:6a:16:4a:c9:b3:
0a:64:c6:7f:5a:ac:94:79:92:c6:bf:90:e0:8c:d2:1c:8c:1d:
73:31:e1:04:16:6c:51:a4:9c:3f:6d:9f:97:16:64:2b:e4:6b:
95:cf:4d:c8:2a:2d:c0:7e:24:ab:5d:ae:6c:1f:d7:a6:73:69:
85:eb:0b:a4:38:49:08:66:4e:72:ae:6c:a6:5a:01:1c:aa:ba:
2f:9d:bb:2b:44:b8:f4:a4:7c:18:bf:0d:d6:2a:8f:4f:92:7c:
03:8f:1b:65:2a:ff:88:41:d8:31:fc:92:b4:ba:04:30:45:88:
19:eb:c7:7a:50:ca:f8:ba:a5:bd:2f:7c:05:15:58:bb:c3:8e:
95:58:21:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:26:04 2025 by rpki-client