Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kQnhJu75fh71aw0ZZvaZXrvsz6s.roa
File: kQnhJu75fh71aw0ZZvaZXrvsz6s.roa (raw, json)
Hash identifier: Hoom9XAl3AcNqufuv4q5+hYFT2dg8PGvIF6DF/3/u6c=
Subject key identifier: 91:09:E1:26:EE:F9:7E:1E:F5:6B:0D:19:66:F6:99:5E:BB:EC:CF:AB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196EC4AE3592D2697160E45A11E0C11914F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kQnhJu75fh71aw0ZZvaZXrvsz6s.roa
Signing time: Tue 20 May 2025 06:04:12 +0000
ROA not before: Tue 20 May 2025 06:04:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 151.242.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 05:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ec:4a:e3:59:2d:26:97:16:0e:45:a1:1e:0c:11:91:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 20 06:04:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9109e126eef97e1ef56b0d1966f6995ebbeccfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:03:e6:d4:24:a0:63:b6:aa:ac:7a:0d:1a:
87:87:6b:d5:8c:73:8c:71:ff:61:fb:c5:c7:2a:55:
33:97:35:08:fb:8c:29:81:32:dd:fe:21:10:df:d7:
1b:01:df:de:97:fc:27:f5:c6:88:9c:e1:44:88:5d:
32:a5:12:88:83:2b:af:4a:ba:06:10:b9:e2:d0:a4:
43:0c:7c:62:56:df:e5:47:ad:8d:02:e2:66:c1:8f:
5e:09:55:f9:ab:13:ef:5e:16:84:20:82:6f:ed:2e:
c5:2c:23:ef:ab:ad:95:7a:37:02:00:da:3e:10:c9:
2e:1a:35:63:ba:2e:bf:6f:71:b6:82:40:a3:cc:ba:
f1:83:bc:5f:db:0b:37:f7:f0:52:41:b6:4a:83:fd:
32:0e:44:ea:83:a7:21:87:2a:3f:40:52:26:5c:a0:
08:bc:fd:63:37:d6:84:e1:25:ed:b3:da:0f:8e:c5:
18:ac:a3:97:35:45:f1:51:ce:1c:8f:81:a5:4d:26:
ae:9b:57:bb:b3:5a:56:ce:e3:0d:c7:7d:60:cb:5e:
b9:4d:00:71:34:50:92:86:22:57:de:62:22:f1:be:
05:2c:f6:bc:db:50:27:4c:be:5b:2a:d9:61:f9:db:
67:51:b0:97:32:e7:3c:b1:11:5f:27:cd:6a:07:fd:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:09:E1:26:EE:F9:7E:1E:F5:6B:0D:19:66:F6:99:5E:BB:EC:CF:AB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kQnhJu75fh71aw0ZZvaZXrvsz6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.155.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2f:ca:76:4d:1e:ea:51:56:0c:5f:ad:99:98:0c:0b:8c:e7:
d2:44:e9:19:2f:a3:2f:c5:3c:86:bf:cd:2c:05:21:1c:61:45:
c8:d0:22:a5:b2:6f:4d:36:70:33:42:4d:52:73:d0:69:0e:1c:
84:b3:d9:6b:fb:d4:77:3c:a7:7a:fc:e7:6c:7f:1c:d4:cc:50:
1d:89:94:9a:e6:90:0d:1c:93:70:35:b9:85:b6:ba:3b:fb:47:
fb:01:57:bf:7d:5e:03:c2:96:a2:3a:e9:e4:70:09:73:f3:d5:
2c:72:10:f0:30:fb:cb:de:c5:33:bb:2b:93:2c:6c:56:1e:94:
51:69:f7:0b:60:f8:b4:0c:1b:7a:8e:18:0d:06:05:02:58:b6:
49:9b:b3:93:08:9f:71:ce:5a:c0:4c:43:01:b1:17:f8:7c:e6:
fb:4c:34:58:d3:d0:68:43:24:60:d3:5f:da:9f:89:0f:5f:69:
a8:92:16:62:1d:c1:32:f2:9f:f1:79:c4:a0:b9:a6:56:d8:88:
d9:de:60:17:d1:dc:14:6b:7f:8c:64:2b:26:dd:47:b1:3f:79:
44:09:fa:83:a4:ad:b4:b8:8a:b9:a7:5d:e3:c1:27:1d:ad:1b:
a5:3f:b1:73:6c:da:eb:f9:4a:5b:c5:5e:7f:3a:7d:7f:26:e5:
9f:5f:49:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:35:16 2025 by rpki-client