Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OQ9-ujFC1LzjXaeS0nKoZOpZT0E.roa
File: OQ9-ujFC1LzjXaeS0nKoZOpZT0E.roa (raw, json)
Hash identifier: VP2gqFYqG5K8DAkuPhvUgUd5TTQvA0Ljp9IC4pgGv3Y=
Subject key identifier: 39:0F:7E:BA:31:42:D4:BC:E3:5D:A7:92:D2:72:A8:64:EA:59:4F:41
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01954FEB5EF823596DAF6D45703484F3DFFE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OQ9-ujFC1LzjXaeS0nKoZOpZT0E.roa
Signing time: Sat 01 Mar 2025 04:16:20 +0000
ROA not before: Sat 01 Mar 2025 04:16:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 151.242.44.0/24 maxlen: 24
151.242.56.0/24 maxlen: 24
151.243.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Mar 2025 08:33:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4f:eb:5e:f8:23:59:6d:af:6d:45:70:34:84:f3:df:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 1 04:16:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=390f7eba3142d4bce35da792d272a864ea594f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d4:82:3c:62:1b:9d:77:87:70:6f:b2:6c:ed:
62:ca:a4:0d:a4:c2:ae:8e:79:a2:88:34:18:e1:6a:
21:c0:4b:3f:c8:2b:36:92:b4:f0:9b:e8:14:26:e8:
0e:c5:e1:18:c7:38:c0:8d:e5:25:77:63:65:64:cd:
c1:d6:5c:c0:c1:05:4d:6e:05:cd:b5:ac:49:8c:14:
05:f7:0e:14:27:82:00:af:a8:e4:c2:2a:1f:d6:01:
f0:fa:91:8b:14:6b:30:6e:db:6c:51:8d:77:92:f7:
1d:2d:9c:49:4b:ba:a1:56:fd:61:0d:2e:2c:38:59:
97:9c:31:70:b7:41:11:e7:0d:82:06:49:06:5d:55:
27:02:fb:43:e4:ae:f9:2c:88:eb:1e:4d:a5:dd:2a:
40:a6:b2:b7:40:73:f9:24:a1:09:e0:30:07:a3:77:
98:ee:6c:1a:d5:99:65:2a:a3:8f:87:ca:f0:d9:b6:
08:11:0a:fe:fd:ac:93:b4:53:9e:5e:ec:f3:de:10:
ac:c7:cd:67:6c:28:e1:e1:3e:75:fe:c0:42:40:89:
50:6b:a6:d0:c1:c0:ab:40:87:53:72:e5:5c:5b:2e:
fd:ac:25:84:d6:f5:c8:93:95:5d:b6:10:89:4a:48:
ba:04:a5:02:9c:3c:b1:54:eb:36:6d:d7:e0:6a:23:
c1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0F:7E:BA:31:42:D4:BC:E3:5D:A7:92:D2:72:A8:64:EA:59:4F:41
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OQ9-ujFC1LzjXaeS0nKoZOpZT0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.44.0/24
151.242.56.0/24
151.243.234.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9d:af:45:42:28:d8:13:59:2f:73:e5:f2:e8:5a:63:8b:b0:
f0:1d:8c:99:92:55:69:dc:4d:e2:ff:6e:56:6c:5e:7b:75:1a:
b6:76:d9:cf:c3:56:75:c8:ea:9a:12:11:ca:6a:ea:a3:77:34:
21:b1:5f:71:64:04:c5:e4:82:1d:26:35:fd:c6:f9:63:c0:2f:
da:81:ea:9a:e2:88:f5:e7:64:8e:75:78:70:20:78:24:b3:98:
58:b1:41:1f:d0:eb:a2:9c:c5:64:74:96:ec:80:55:51:c8:df:
fe:c9:3f:10:64:71:87:1c:35:26:63:65:61:29:7c:b5:db:92:
d7:12:8b:3f:bc:ce:df:a7:ba:e0:7a:e7:21:91:48:99:30:7c:
f1:77:74:66:90:40:e3:52:33:0e:f3:88:91:47:bc:e2:8d:db:
00:47:e8:28:8d:4d:fe:bd:d5:b7:cd:0f:23:3f:d8:82:81:b7:
62:15:8d:26:30:31:94:c4:1d:b8:85:34:98:c2:d7:b2:ca:1a:
69:7a:ab:47:f4:ed:64:ef:e7:8c:5d:ba:c4:a2:24:91:1d:5c:
5c:d7:be:ad:df:a4:a0:93:8a:28:d7:eb:3f:a4:b6:4d:35:85:
90:ba:2f:5b:3a:fa:93:49:fa:ea:0a:3a:7a:ea:62:ca:a1:54:
57:68:0c:e8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZVP6174I1ltr21FcDSE89/+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMzAxMDQxNjIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTBmN2ViYTMxNDJkNGJjZTM1ZGE3OTJkMjcyYTg2NGVhNTk0ZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9SCPGIbnXeHcG+ybO1iyqQNpMKu
jnmiiDQY4WohwEs/yCs2krTwm+gUJugOxeEYxzjAjeUld2NlZM3B1lzAwQVNbgXN
taxJjBQF9w4UJ4IAr6jkwiof1gHw+pGLFGswbttsUY13kvcdLZxJS7qhVv1hDS4s
OFmXnDFwt0ER5w2CBkkGXVUnAvtD5K75LIjrHk2l3SpAprK3QHP5JKEJ4DAHo3eY
7mwa1ZllKqOPh8rw2bYIEQr+/ayTtFOeXuzz3hCsx81nbCjh4T51/sBCQIlQa6bQ
wcCrQIdTcuVcWy79rCWE1vXIk5VdthCJSki6BKUCnDyxVOs2bdfgaiPBRQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDkPfroxQtS8412nktJyqGTqWU9BMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvT1E5LXVqRkMxTHpqWGFlUzBuS29aT3BaVDBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/IsAwQA
l/I4AwQAl/PqMA0GCSqGSIb3DQEBCwUAA4IBAQCCna9FQijYE1kvc+Xy6Fpji7Dw
HYyZklVp3E3i/25WbF57dRq2dtnPw1Z1yOqaEhHKauqjdzQhsV9xZATF5IIdJjX9
xvljwC/ageqa4oj152SOdXhwIHgks5hYsUEf0OuinMVkdJbsgFVRyN/+yT8QZHGH
HDUmY2VhKXy125LXEos/vM7fp7rgeuchkUiZMHzxd3RmkEDjUjMO84iRR7zijdsA
R+gojU3+vdW3zQ8jP9iCgbdiFY0mMDGUxB24hTSYwteyyhppeqtH9O1k7+eMXbrE
oiSRHVxc176t36Sgk4oo1+s/pLZNNYWQui9bOvqTSfrqCjp66mLKoVRXaAzo
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:00:22 2025 by rpki-client