Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_tYgylhmy4bmPud8SNPni4OwvDU.roa
File: _tYgylhmy4bmPud8SNPni4OwvDU.roa (raw, json)
Hash identifier: ZpsqNeSnO/JHwwy3yJu2ac6T3qhvcGRjz7JP00I5HDM=
Subject key identifier: FE:D6:20:CA:58:66:CB:86:E6:3E:E7:7C:48:D3:E7:8B:83:B0:BC:35
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01970ACA3BC949A72AA2AFD3D366906F3204
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_tYgylhmy4bmPud8SNPni4OwvDU.roa
Signing time: Mon 26 May 2025 04:11:55 +0000
ROA not before: Mon 26 May 2025 04:11:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48266
IP address blocks: 151.242.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 05:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0a:ca:3b:c9:49:a7:2a:a2:af:d3:d3:66:90:6f:32:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 26 04:11:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fed620ca5866cb86e63ee77c48d3e78b83b0bc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:9f:d8:a9:e6:d0:89:5b:54:60:e7:64:2f:
4d:29:76:f6:a1:13:52:42:0a:fa:e6:86:da:f7:23:
99:46:d3:8b:09:5c:1a:ed:77:2b:bb:03:bb:ba:1e:
e5:63:29:fb:4b:7c:ee:20:1a:7a:d9:7f:60:fb:6d:
f7:55:d9:a1:da:a9:42:89:77:38:5b:18:60:fd:c4:
43:ed:51:4c:ae:06:81:73:e8:40:84:91:e7:ca:da:
d7:22:3b:b0:60:89:5b:be:ad:9b:e3:35:8e:cc:f1:
42:d0:d0:5d:c7:75:34:12:fe:67:3f:41:4f:ed:f4:
4e:ee:99:4a:bb:bf:84:41:9e:82:85:af:5e:a8:45:
14:9e:03:c5:c8:fd:7e:fd:7d:2a:22:70:4a:07:89:
92:8e:8c:1b:0a:e7:91:35:46:cc:76:89:f1:74:e7:
00:76:db:b7:60:18:d9:12:c4:33:cb:84:3a:ef:c0:
33:12:c2:04:52:d5:c5:28:83:b9:0a:b2:94:87:98:
88:07:45:9b:53:e1:5f:90:3c:d3:cf:24:f6:55:46:
e3:50:1e:60:43:bb:fe:b8:bb:0f:c0:75:b4:e0:77:
9b:10:d3:21:c6:f4:f4:18:08:80:3d:e9:05:52:51:
8c:19:d5:bc:a9:ae:b9:78:b8:72:ed:59:62:73:ec:
ee:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D6:20:CA:58:66:CB:86:E6:3E:E7:7C:48:D3:E7:8B:83:B0:BC:35
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_tYgylhmy4bmPud8SNPni4OwvDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.14.0/24
Signature Algorithm: sha256WithRSAEncryption
86:87:c8:38:24:1e:d4:5c:89:d5:74:5a:5b:8d:bc:c1:40:7f:
68:09:72:e8:e6:d4:05:c1:6b:38:75:5d:6a:23:b5:fb:f5:bd:
18:6f:ef:ab:5f:e3:b8:c4:55:60:97:51:57:bd:6b:65:58:4c:
c1:f2:62:fd:8f:a0:41:2a:5b:c5:f5:d9:16:f0:4f:ea:86:8e:
79:ab:aa:7c:8d:a7:2b:ef:7f:db:7e:d7:a0:0a:47:19:0b:ee:
d7:0a:65:5c:c7:c0:5a:66:c5:b7:86:b9:e3:d2:66:14:01:8a:
c4:a2:95:6a:0b:a1:6a:dc:8e:2a:5b:09:31:24:72:06:32:9a:
c3:db:cc:c5:3b:df:69:fa:37:f8:9a:a1:e8:c0:66:73:2f:08:
1e:60:00:ac:7c:38:28:ce:4d:01:2a:be:00:c7:c5:75:8d:9f:
3d:ca:44:b3:49:cb:1d:cf:4d:67:b3:a3:b6:19:41:3e:45:9d:
99:b3:e6:64:68:b7:e9:04:b1:94:b5:8a:c3:a4:d9:c5:f1:76:
8c:17:b0:ab:a0:4e:bc:b7:f2:be:f4:10:52:fc:96:41:7f:94:
4d:6d:4f:1e:31:a4:c2:60:7f:37:1f:92:d2:67:01:40:4c:3b:
14:08:6f:bd:73:d6:04:0f:9a:d4:15:af:e1:56:51:bc:19:8d:
5e:56:f4:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZcKyjvJSacqoq/T02aQbzIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTI2MDQxMTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWQ2MjBjYTU4NjZjYjg2ZTYzZWU3N2M0OGQzZTc4YjgzYjBiYzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuOf2Knm0IlbVGDnZC9NKXb2oRNS
Qgr65oba9yOZRtOLCVwa7XcruwO7uh7lYyn7S3zuIBp62X9g+233Vdmh2qlCiXc4
Wxhg/cRD7VFMrgaBc+hAhJHnytrXIjuwYIlbvq2b4zWOzPFC0NBdx3U0Ev5nP0FP
7fRO7plKu7+EQZ6Cha9eqEUUngPFyP1+/X0qInBKB4mSjowbCueRNUbMdonxdOcA
dtu3YBjZEsQzy4Q678AzEsIEUtXFKIO5CrKUh5iIB0WbU+FfkDzTzyT2VUbjUB5g
Q7v+uLsPwHW04HebENMhxvT0GAiAPekFUlGMGdW8qa65eLhy7Vlic+zu/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP7WIMpYZsuG5j7nfEjT54uDsLw1MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvX3RZZ3lsaG15NGJtUHVkOFNOUG5pNE93dkRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/IOMA0G
CSqGSIb3DQEBCwUAA4IBAQCGh8g4JB7UXInVdFpbjbzBQH9oCXLo5tQFwWs4dV1q
I7X79b0Yb++rX+O4xFVgl1FXvWtlWEzB8mL9j6BBKlvF9dkW8E/qho55q6p8jacr
73/bftegCkcZC+7XCmVcx8BaZsW3hrnj0mYUAYrEopVqC6Fq3I4qWwkxJHIGMprD
28zFO99p+jf4mqHowGZzLwgeYACsfDgozk0BKr4Ax8V1jZ89ykSzScsdz01ns6O2
GUE+RZ2Zs+ZkaLfpBLGUtYrDpNnF8XaMF7CroE68t/K+9BBS/JZBf5RNbU8eMaTC
YH83H5LSZwFATDsUCG+9c9YED5rUFa/hVlG8GY1eVvTa
-----END CERTIFICATE-----
Generated at Tue Jun 10 02:49:50 2025 by rpki-client