Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lIu-P-WOWQAV0vf8OY--N_sDsfw.roa
File: lIu-P-WOWQAV0vf8OY--N_sDsfw.roa (raw, json)
Hash identifier: BQokBZeJKuFj3nSylXyPZLrh48or6zPVPPrXPqkuoJk=
Subject key identifier: 94:8B:BE:3F:E5:8E:59:00:15:D2:F7:FC:39:8F:BE:37:FB:03:B1:FC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01971053795F632EB6E88DAF97FD8A23D6DE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lIu-P-WOWQAV0vf8OY--N_sDsfw.roa
Signing time: Tue 27 May 2025 05:59:55 +0000
ROA not before: Tue 27 May 2025 05:59:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 151.242.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 18:24:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:53:79:5f:63:2e:b6:e8:8d:af:97:fd:8a:23:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 27 05:59:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=948bbe3fe58e590015d2f7fc398fbe37fb03b1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:1e:d4:53:c3:37:a3:a6:8c:bb:9d:6a:58:
07:f9:c4:0c:e6:e0:37:db:2b:8f:0b:d8:e6:dc:59:
ae:cb:1f:70:40:45:44:3b:73:c6:9e:76:ed:22:55:
48:43:32:7a:6c:0a:40:f5:e7:ce:02:cf:d6:aa:97:
9b:bb:a7:81:70:90:b2:66:8c:c5:d5:a1:b5:fe:0a:
89:eb:d1:fd:ed:8e:bd:c9:2c:ad:22:70:e6:e2:22:
ca:a3:d6:75:1b:38:e4:b5:29:31:b6:29:7c:77:76:
2c:3a:da:29:39:99:e0:35:2a:e3:c3:ad:87:a5:65:
83:79:6d:99:04:1e:18:bc:58:f0:1a:f8:23:d8:0b:
c9:98:a8:aa:06:d2:1f:c9:2b:86:ca:d3:60:86:66:
f1:92:51:b8:2f:da:6e:7b:23:42:0a:f9:76:73:98:
60:bf:e5:97:19:fc:71:a7:58:df:43:85:34:cc:0f:
2a:eb:4c:86:6c:2a:c2:ef:5f:bc:d7:a8:dc:0c:00:
fa:95:d7:f0:f8:a9:46:b9:8b:da:29:de:6e:e6:48:
b8:55:4c:e0:67:e4:e9:08:5b:1a:76:28:43:25:80:
18:8d:83:f3:6c:e9:80:e6:45:48:c9:f5:d8:fc:96:
b9:67:5c:78:da:ff:34:ad:1e:53:87:b2:fd:54:85:
c5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8B:BE:3F:E5:8E:59:00:15:D2:F7:FC:39:8F:BE:37:FB:03:B1:FC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lIu-P-WOWQAV0vf8OY--N_sDsfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:00:31:b6:0e:77:6f:bf:15:5d:dc:a9:e2:9f:93:f0:f5:b4:
38:fd:17:f1:cc:fc:e6:83:4b:1f:c2:9d:3b:78:57:4c:dc:3e:
a4:94:1d:a4:44:0c:7e:2f:74:a2:16:fc:bc:17:2a:eb:af:55:
47:99:eb:f6:84:be:25:20:94:e1:1a:47:0e:db:09:08:4f:ae:
62:47:b9:43:d1:72:d5:d0:77:82:2c:2a:be:c2:68:73:ff:5c:
2d:01:2d:79:bf:1e:df:99:be:ec:af:0d:dc:d5:f2:8c:ae:3c:
66:a9:02:15:f5:10:08:99:85:cf:d0:8f:2c:b8:43:fc:49:fc:
50:fa:bd:f3:56:2a:5b:c7:2b:f0:d5:3f:a8:76:fc:1f:da:7c:
14:21:ee:23:da:98:78:0d:f6:ed:63:20:03:14:89:af:16:5d:
dd:6c:90:f4:ea:24:e2:c9:3d:bf:65:dc:c3:e9:77:2f:29:dd:
ac:b0:c5:87:87:fc:6b:38:5c:26:ff:00:5e:14:c8:57:dc:8f:
93:c3:42:f4:f8:0b:19:c3:65:54:ea:f4:04:0c:27:c3:8c:ca:
51:12:b1:6b:b0:22:98:33:eb:07:35:db:01:b4:f4:3c:cb:40:
5b:c6:a3:4d:1c:fd:a2:d0:40:8c:45:ec:a5:f3:5e:84:39:6c:
0e:ba:8b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:07:56 2025 by rpki-client