Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XPwXj-q_FsFnjSBpI5PJRNw4JKc.roa
File: XPwXj-q_FsFnjSBpI5PJRNw4JKc.roa (raw, json)
Hash identifier: YoW4SgMMDdYBvkV3Rcf4LIE3oAF8TbMWoCcrth7PbdU=
Subject key identifier: 5C:FC:17:8F:EA:BF:16:C1:67:8D:20:69:23:93:C9:44:DC:38:24:A7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019734E517DBF0B0191EF589AF5DF2801D52
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XPwXj-q_FsFnjSBpI5PJRNw4JKc.roa
Signing time: Tue 03 Jun 2025 08:25:18 +0000
ROA not before: Tue 03 Jun 2025 08:25:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59432
IP address blocks: 151.242.119.0/24 maxlen: 24
151.242.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jun 2025 05:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:e5:17:db:f0:b0:19:1e:f5:89:af:5d:f2:80:1d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 3 08:25:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cfc178feabf16c1678d20692393c944dc3824a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4c:da:bf:80:4c:af:63:61:b1:c0:5c:88:f0:
19:b4:c3:df:b3:19:f6:23:6b:88:07:d0:14:f7:6b:
a1:9a:d7:f5:66:9b:90:ad:70:d6:af:f5:f5:dd:21:
b0:4d:e0:1e:63:ec:5a:90:be:09:df:96:9f:3f:87:
9f:8a:bd:25:f0:f5:3b:f6:6a:7a:0f:a0:f0:c2:17:
41:f2:d9:14:99:e6:8b:32:e3:17:18:43:18:90:0a:
e0:5f:e5:8e:37:c6:a8:b5:92:4b:81:b5:1e:0c:b7:
2b:a8:d3:d2:4e:4a:43:74:dc:64:73:53:d9:5d:84:
ac:4e:66:c7:4b:3a:78:17:0a:aa:35:70:8d:35:6e:
6e:6e:f5:2b:ee:c1:ed:df:f2:72:24:34:8e:03:a1:
de:6c:1b:31:fd:57:59:1e:6c:d9:ca:8a:5e:b4:17:
f5:92:a8:3d:1d:76:13:38:11:40:12:1e:f2:78:7b:
d5:8f:0f:5e:76:c6:6c:77:54:58:ab:74:3c:5f:b5:
60:bf:a8:cf:49:a9:18:5b:d1:13:77:6e:f7:44:0c:
50:78:1a:f9:8f:b9:11:4e:59:03:64:24:50:38:61:
a4:48:c2:08:0e:77:72:e6:97:75:32:2b:98:bb:80:
a6:58:33:81:f6:fb:68:fb:41:a8:92:f1:21:54:72:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FC:17:8F:EA:BF:16:C1:67:8D:20:69:23:93:C9:44:DC:38:24:A7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XPwXj-q_FsFnjSBpI5PJRNw4JKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.119.0/24
151.242.155.0/24
Signature Algorithm: sha256WithRSAEncryption
32:71:5c:35:cd:f5:bb:b1:4f:ac:c9:06:a3:09:7e:50:1c:75:
d1:05:df:0b:51:98:05:49:4c:59:08:c9:5b:53:ba:ee:4d:7a:
4f:4a:60:5d:55:88:90:b5:ec:29:6a:64:ed:cd:0d:79:88:28:
fd:1d:1e:e3:bb:92:1c:e4:6c:55:cf:17:d5:17:ef:18:12:b2:
7d:f6:5e:aa:08:08:fe:8a:66:85:e2:15:e2:26:4c:50:a7:46:
69:ba:d0:03:1f:73:ab:35:1d:09:c2:be:91:ca:32:ab:ae:8d:
1b:79:56:0a:64:9c:0f:0d:da:47:b9:cb:34:7b:5b:06:9f:3a:
0c:4e:45:04:84:e9:00:2e:0c:90:eb:e4:5d:e9:a3:c0:da:8d:
d7:7c:df:ac:36:45:5c:2d:fb:49:07:d3:5d:a6:3c:af:91:fe:
96:7e:94:44:7a:73:2e:d9:55:4e:37:26:fc:eb:7a:0c:cc:af:
de:b6:77:14:5e:00:54:7f:bf:c7:81:68:c8:52:22:1e:1a:60:
d8:fd:d6:a4:fd:35:b7:1b:0d:63:20:87:13:f1:27:05:38:10:
c2:1c:01:77:1c:bc:fc:40:1b:89:04:bd:9a:cc:86:70:b7:60:
32:42:bb:bd:a4:1d:05:77:41:08:2c:56:cb:5c:5c:28:d1:2b:
af:62:dd:4f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZc05Rfb8LAZHvWJr13ygB1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjAzMDgyNTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Y2ZjMTc4ZmVhYmYxNmMxNjc4ZDIwNjkyMzkzYzk0NGRjMzgyNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEzav4BMr2NhscBciPAZtMPfsxn2
I2uIB9AU92uhmtf1ZpuQrXDWr/X13SGwTeAeY+xakL4J35afP4efir0l8PU79mp6
D6DwwhdB8tkUmeaLMuMXGEMYkArgX+WON8aotZJLgbUeDLcrqNPSTkpDdNxkc1PZ
XYSsTmbHSzp4FwqqNXCNNW5ubvUr7sHt3/JyJDSOA6HebBsx/VdZHmzZyopetBf1
kqg9HXYTOBFAEh7yeHvVjw9edsZsd1RYq3Q8X7Vgv6jPSakYW9ETd273RAxQeBr5
j7kRTlkDZCRQOGGkSMIIDndy5pd1MiuYu4CmWDOB9vto+0GokvEhVHIG/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFz8F4/qvxbBZ40gaSOTyUTcOCSnMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWFB3WGotcV9Gc0ZualNCcEk1UEpSTnc0SktjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/J3AwQA
l/KbMA0GCSqGSIb3DQEBCwUAA4IBAQAycVw1zfW7sU+syQajCX5QHHXRBd8LUZgF
SUxZCMlbU7ruTXpPSmBdVYiQtewpamTtzQ15iCj9HR7ju5Ic5GxVzxfVF+8YErJ9
9l6qCAj+imaF4hXiJkxQp0ZputADH3OrNR0Jwr6RyjKrro0beVYKZJwPDdpHucs0
e1sGnzoMTkUEhOkALgyQ6+Rd6aPA2o3XfN+sNkVcLftJB9Ndpjyvkf6WfpREenMu
2VVONyb863oMzK/etncUXgBUf7/HgWjIUiIeGmDY/dak/TW3Gw1jIIcT8ScFOBDC
HAF3HLz8QBuJBL2azIZwt2AyQru9pB0Fd0EILFbLXFwo0SuvYt1P
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:09:35 2025 by rpki-client