Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vjXIjUicZpkvOMqUk2NVaJiyG5w.roa
File: vjXIjUicZpkvOMqUk2NVaJiyG5w.roa (raw, json)
Hash identifier: 8+BaSF+qEceNm4eb7pOHePnWHjz/iDFwUpFAlGp7NUw=
Subject key identifier: BE:35:C8:8D:48:9C:66:99:2F:38:CA:94:93:63:55:68:98:B2:1B:9C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196B3D9FF8702F9C06B036E25B0529A878D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vjXIjUicZpkvOMqUk2NVaJiyG5w.roa
Signing time: Fri 09 May 2025 07:02:10 +0000
ROA not before: Fri 09 May 2025 07:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211415
IP address blocks: 151.244.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 07:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:ff:87:02:f9:c0:6b:03:6e:25:b0:52:9a:87:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 9 07:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be35c88d489c66992f38ca949363556898b21b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:31:8f:78:5e:e2:c1:1a:1a:14:12:a2:a6:
86:ac:0b:77:35:dd:79:e6:2c:25:36:cb:e8:b2:0c:
30:02:dd:6e:15:13:52:a0:64:a0:59:b0:c5:bc:aa:
84:28:4f:5e:ab:b7:76:61:1a:61:85:9f:a4:6d:9d:
e0:80:c2:a6:f9:e1:ac:4d:4a:05:9e:8e:6d:03:6c:
13:9e:11:90:ca:53:74:23:66:22:05:99:ee:8c:53:
c9:35:75:66:3f:a8:bc:29:dc:b7:68:e7:99:16:11:
57:72:24:79:f3:ff:63:fd:12:c1:d3:dc:ae:04:95:
31:2f:4a:15:5a:21:3e:34:e2:d0:4d:1d:38:87:59:
85:1d:28:fe:fb:77:7c:97:d5:04:89:22:1e:92:5e:
31:90:1f:58:57:63:c3:e1:be:0e:33:26:05:16:e6:
0c:a5:78:96:20:43:4b:5c:0d:9a:d6:13:88:5d:f0:
33:21:dd:04:b6:21:94:ed:d4:c2:7c:e0:86:df:6e:
65:8c:e2:a7:2e:af:b6:14:5e:82:61:c1:f5:ed:dd:
6b:19:5e:b0:58:69:f6:35:06:c7:14:85:a4:1c:c8:
06:53:b9:6f:88:ed:1b:8a:b5:60:b4:83:53:3c:79:
76:64:07:46:fa:2f:94:74:8a:1b:84:7d:38:0d:a6:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:35:C8:8D:48:9C:66:99:2F:38:CA:94:93:63:55:68:98:B2:1B:9C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vjXIjUicZpkvOMqUk2NVaJiyG5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:b0:e4:1a:af:de:dc:e3:2b:22:00:bc:ff:34:af:a8:d2:73:
0d:e8:ef:58:35:78:48:c6:f6:52:32:d3:0f:1a:da:91:dc:5a:
34:88:3a:a7:ff:17:f7:b6:53:34:76:c8:2d:d0:9d:aa:40:de:
73:c5:1e:33:3a:df:f1:90:d5:63:44:28:18:bf:10:c8:80:75:
b7:c3:40:60:88:69:d0:c3:55:58:b6:88:5b:9e:52:4b:cf:d7:
ca:dd:9d:47:16:7a:ea:9d:c9:0e:d0:50:7d:6f:bb:b1:99:4e:
0e:9b:a0:2b:2f:47:e0:7a:70:69:a8:b6:82:f0:bb:7d:ed:42:
e5:33:9b:8f:ea:e3:8f:43:61:7a:4a:0a:e1:60:50:80:29:ce:
e0:8e:26:41:a5:31:04:8f:8e:0f:6c:6d:b2:3b:7f:4f:57:40:
01:63:be:de:15:26:64:6d:b5:32:8a:d9:f7:63:bd:87:4a:81:
b9:13:2a:34:75:db:b0:97:d5:0d:10:03:8e:9f:2c:b7:70:82:
ef:1e:b5:72:c7:63:2f:6c:ff:d2:e0:96:0e:82:e4:bb:f4:85:
97:55:ac:2d:42:dc:54:e1:6c:22:eb:bd:e5:84:f6:bc:a1:73:
9a:e8:96:58:9e:1c:24:ba:b6:79:2b:bb:f3:c7:81:02:02:db:
f1:56:5f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:48:44 2025 by rpki-client