Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PN8hog1eHNgMYOSm4IaTmhbFN8U.roa
File: PN8hog1eHNgMYOSm4IaTmhbFN8U.roa (raw, json)
Hash identifier: Vo14kgX1SYGrS0HqdIx3Fi5vFPw6vczGbmVnbQS1nS0=
Subject key identifier: 3C:DF:21:A2:0D:5E:1C:D8:0C:60:E4:A6:E0:86:93:9A:16:C5:37:C5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196DCECD9DB2BEFC9A1C25F352787ECD5E9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PN8hog1eHNgMYOSm4IaTmhbFN8U.roa
Signing time: Sat 17 May 2025 06:27:11 +0000
ROA not before: Sat 17 May 2025 06:27:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 151.240.78.0/24 maxlen: 24
151.244.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 05:21:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:ec:d9:db:2b:ef:c9:a1:c2:5f:35:27:87:ec:d5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 17 06:27:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cdf21a20d5e1cd80c60e4a6e086939a16c537c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6b:74:90:50:1a:2c:d7:ad:d2:09:f8:19:19:
32:d7:a4:1b:9f:81:5f:f9:4b:2d:e7:80:b2:c2:d2:
93:1e:a6:3d:ae:7b:f7:56:d1:af:bb:a0:63:34:51:
5d:1e:a1:f4:56:55:16:55:9b:9f:71:47:1a:28:c7:
ab:19:b4:00:19:0d:6a:1b:aa:49:58:13:0c:60:1c:
d9:01:6b:99:91:9c:3e:14:68:6a:68:8d:3e:ce:da:
cc:da:ec:d5:f1:fc:bc:95:81:7b:7e:56:16:36:74:
26:0e:ab:44:0b:bd:1e:bd:5e:3e:0b:bd:10:12:19:
91:6e:a9:fe:04:1c:8d:f4:c6:4d:35:4b:e0:9a:8b:
c6:d9:eb:36:cf:05:9b:1b:cf:ca:c9:90:4c:6c:37:
a6:d5:5a:2e:b4:04:18:53:2c:f2:ac:7f:5e:c8:d5:
94:8c:52:ec:6c:43:a0:6b:a1:c6:14:87:2a:8e:64:
55:c4:24:de:1e:37:86:52:70:ac:15:41:54:1e:75:
e3:d1:fc:3d:6b:a6:68:c3:ce:d8:67:66:c6:4a:9f:
e4:12:16:c5:cd:f4:37:2b:7c:b2:ba:a3:08:ff:12:
d6:ed:33:94:62:34:04:30:1f:8d:7b:56:f4:cd:8a:
44:4b:e9:18:f5:2d:c8:87:1c:58:eb:b6:e9:4f:bf:
82:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DF:21:A2:0D:5E:1C:D8:0C:60:E4:A6:E0:86:93:9A:16:C5:37:C5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PN8hog1eHNgMYOSm4IaTmhbFN8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.78.0/24
151.244.75.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a9:2d:ba:fd:20:bc:2b:eb:f1:ab:fb:38:f7:21:72:ae:1b:
92:0c:8b:c2:6f:63:ac:7b:33:7a:e2:b3:d2:ef:70:54:7f:db:
6b:dd:d8:ef:d9:97:da:e5:7b:ab:14:2a:dd:97:e1:ca:46:f9:
6d:db:fe:03:1a:9a:0b:3c:a4:be:5f:78:10:26:61:6e:4e:c5:
0d:ee:c7:f8:78:e5:c5:0e:b9:4e:46:ba:4b:2e:17:42:da:ce:
3b:f5:03:47:88:13:09:fb:57:46:be:e0:87:e4:aa:b0:9b:06:
68:30:99:17:43:60:82:ef:c1:67:75:67:59:31:7f:62:85:ef:
03:96:33:da:b1:f1:87:e7:1d:c2:06:0b:14:0e:11:95:db:4a:
38:3a:0e:59:ed:01:b4:c4:cd:b6:ce:1c:83:a6:96:c4:68:18:
0b:6f:12:55:5b:cb:be:70:a2:8e:73:a9:b3:78:96:0c:96:08:
ea:88:f8:14:3c:82:b8:99:4b:86:cf:f7:d3:d6:92:93:c5:5e:
c0:a6:fb:98:e8:e2:b3:60:85:2c:74:9c:38:f8:51:76:a6:80:
79:8e:c6:2c:17:c7:4a:11:65:cf:a4:f2:c4:66:4f:65:1e:e9:
23:30:3e:33:8f:66:e5:1f:e8:62:99:c3:9c:19:78:44:1b:fe:
ff:49:b2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:21:45 2025 by rpki-client