Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_QqbAkxC2luDIltFqEzCfLioOEg.roa
File: _QqbAkxC2luDIltFqEzCfLioOEg.roa (raw, json)
Hash identifier: 7xHWUipqro09Zgk2XH0jJzpB9Kjzn6RD8SLprCjdOHM=
Subject key identifier: FD:0A:9B:02:4C:42:DA:5B:83:22:5B:45:A8:4C:C2:7C:B8:A8:38:48
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01970ACA3BEC870ED72E9101713AEB04074A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_QqbAkxC2luDIltFqEzCfLioOEg.roa
Signing time: Mon 26 May 2025 04:11:55 +0000
ROA not before: Mon 26 May 2025 04:11:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136501
IP address blocks: 151.242.14.0/24 maxlen: 24
151.242.180.0/22 maxlen: 22
151.242.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 05:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0a:ca:3b:ec:87:0e:d7:2e:91:01:71:3a:eb:04:07:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 26 04:11:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd0a9b024c42da5b83225b45a84cc27cb8a83848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:a4:cb:10:13:54:97:1d:69:15:0f:c2:b1:
5c:ac:9a:4c:da:10:d1:b6:99:02:05:1c:dd:5f:e7:
4b:b6:22:3c:6d:29:8c:e0:5a:d9:ad:ca:af:5a:c5:
ea:65:cb:c4:f8:17:49:70:9e:74:fd:76:43:02:5e:
0c:fb:b1:dc:95:9a:81:0f:d1:3a:ac:78:a7:79:4e:
bf:09:a8:c5:23:f0:c9:e2:47:ff:36:cc:43:b9:2c:
91:af:5f:45:ed:fc:55:75:3c:ce:e0:28:ba:b6:62:
4e:79:c5:ff:9b:e6:db:ce:ba:a4:d7:27:26:62:1f:
2e:21:b1:22:1e:31:d1:5f:9a:e4:6d:6e:f2:9e:5f:
e0:a8:9e:03:14:74:2b:30:69:24:d4:7c:5d:08:ec:
b7:b9:be:29:29:a2:2d:b7:6c:7b:34:0f:c0:3d:b8:
cc:b1:d2:18:68:48:d0:b7:91:7d:c0:94:96:1e:42:
68:02:27:1e:35:fd:b7:7a:ec:79:f8:3f:f4:f4:44:
e0:a0:b3:ad:a8:ff:d7:9c:0f:0b:56:0b:48:90:d8:
9e:10:62:b4:34:f9:90:00:32:77:13:e3:21:88:11:
1a:a8:a6:0f:ac:16:14:d1:02:78:4a:b2:27:db:e0:
52:08:57:31:ca:71:dc:40:bd:29:f7:c7:b5:db:7e:
e5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:9B:02:4C:42:DA:5B:83:22:5B:45:A8:4C:C2:7C:B8:A8:38:48
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_QqbAkxC2luDIltFqEzCfLioOEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.14.0/24
151.242.180.0/22
151.242.255.0/24
Signature Algorithm: sha256WithRSAEncryption
86:69:fd:3d:78:6f:70:a9:db:71:fb:a8:85:c7:92:e4:e0:2a:
c3:20:99:39:4f:4a:75:ac:8b:c6:a9:43:28:0a:dd:d3:c8:fd:
ed:7a:34:df:90:a7:6f:b1:d0:1f:65:90:15:50:5b:96:af:a5:
af:41:10:e8:80:e6:51:cc:40:20:29:dc:43:d8:00:de:99:87:
e7:a5:de:87:fc:72:44:b1:3e:0d:ef:71:11:ea:c4:6c:05:97:
2f:fa:88:d6:38:2f:d3:f0:83:0d:f7:f3:1c:36:49:ab:02:12:
d6:74:98:d2:08:58:3f:33:c6:ba:a9:5c:61:88:3e:d0:a7:9b:
ec:45:a3:7e:53:94:bd:69:2d:01:51:46:d5:0a:34:e8:5b:1c:
30:8f:18:e2:67:50:14:fa:fe:49:95:55:b7:c2:57:88:fe:2b:
7d:d0:3e:63:50:48:16:b4:cf:c3:0f:df:52:65:65:11:76:ab:
6d:38:11:be:0e:00:9e:e0:1c:0d:03:de:b7:27:6e:1a:92:8b:
7b:3b:67:8c:0a:6a:87:1a:39:ce:d5:dd:40:97:9c:38:f3:2e:
81:f6:38:fa:5f:a9:54:77:ef:ba:c1:aa:d3:26:b4:1b:72:96:
6d:65:8d:bf:9a:fb:6e:86:48:91:54:e2:29:2f:cb:c3:5c:c7:
68:c8:e4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:52:38 2025 by rpki-client