Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wEp6teoUZL4sTMnRUZDzet8E5RE.roa
File: wEp6teoUZL4sTMnRUZDzet8E5RE.roa (raw, json)
Hash identifier: VPzlKas1efS/MqLiu8XYP2G9IlhbVA/hx3jShxhXvM0=
Subject key identifier: C0:4A:7A:B5:EA:14:64:BE:2C:4C:C9:D1:51:90:F3:7A:DF:04:E5:11
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195D1B710E416B5AC32F61B3138236EF0D7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wEp6teoUZL4sTMnRUZDzet8E5RE.roa
Signing time: Wed 26 Mar 2025 09:09:50 +0000
ROA not before: Wed 26 Mar 2025 09:09:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 151.242.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 18:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:b7:10:e4:16:b5:ac:32:f6:1b:31:38:23:6e:f0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 26 09:09:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c04a7ab5ea1464be2c4cc9d15190f37adf04e511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6f:64:e3:07:1d:dd:03:26:c3:ad:04:c8:bc:
6d:69:76:30:ee:f5:77:c5:b2:c6:f8:99:77:8a:dd:
2f:bb:07:c7:89:be:3b:d1:5a:77:d1:6d:63:b3:9b:
ad:7e:70:02:d1:1b:fd:6c:7c:23:c3:4a:a1:17:6b:
88:55:5c:b5:10:51:e7:6a:14:a7:c1:1f:4c:01:7d:
74:60:b1:44:11:a9:c9:7c:50:f2:38:57:0e:9a:77:
c2:44:b5:ca:9b:28:4d:69:b0:a3:4e:80:ba:f8:8a:
65:3f:d0:73:bc:f3:35:af:88:0f:1c:b4:40:04:ab:
46:3d:6b:32:9d:3d:7b:f2:79:f9:77:9c:f0:b6:77:
04:f7:f8:17:2b:c2:63:39:33:e3:f4:d2:76:2d:7f:
7a:b2:ee:96:86:48:a7:37:94:81:ce:b8:00:bc:82:
39:2f:7d:09:70:c7:ab:f4:51:d6:13:67:d5:1f:c6:
6a:56:bd:0f:db:b1:2a:e2:8f:f5:ef:58:e4:35:95:
dc:ea:1f:7b:c1:a6:93:79:36:16:ef:e7:90:0e:53:
23:75:b2:de:9c:fd:22:17:61:f1:62:a0:59:f0:7c:
ee:2d:3c:76:b2:b0:74:71:d2:81:c4:08:0a:0e:89:
a5:b8:2a:54:8f:e4:e1:af:4c:91:8f:aa:49:11:79:
5c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4A:7A:B5:EA:14:64:BE:2C:4C:C9:D1:51:90:F3:7A:DF:04:E5:11
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wEp6teoUZL4sTMnRUZDzet8E5RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.36.0/24
Signature Algorithm: sha256WithRSAEncryption
06:0f:ff:b9:3e:36:94:2f:53:51:9e:10:25:34:c8:bf:c1:53:
3b:cb:b2:bf:d4:46:44:64:11:f1:de:9e:d4:8a:8b:d8:4c:47:
f1:7b:1e:21:82:b3:14:7f:49:2a:60:b3:19:3c:35:fd:94:b2:
5b:9c:dd:61:36:bf:a8:cd:1c:cf:ed:04:be:68:f1:d6:65:ed:
9d:4b:3f:16:dc:de:87:55:6d:3c:93:f1:95:a9:dc:c3:4d:6f:
bd:6e:3b:4f:f9:f5:55:9b:b6:29:9d:02:c0:56:6f:2f:24:6d:
48:83:c8:61:9b:0e:0b:41:b2:87:b3:53:c6:9c:a7:1c:ae:c9:
99:a8:ad:3e:b9:e4:20:ae:21:5a:1c:4d:0a:e4:3c:fc:9e:50:
5e:6e:8d:96:1f:67:a0:9c:aa:c7:08:6b:91:94:f7:b7:a1:31:
95:0e:ad:cd:ca:f1:8f:b5:9a:51:3a:9b:03:54:dc:9e:56:b3:
dd:e6:e6:2d:ae:2d:94:06:37:7c:11:9e:a8:02:08:a0:9b:9a:
38:3c:94:3f:4f:09:5d:e6:5c:fe:6c:59:91:56:c9:7b:9f:8c:
d4:bc:d3:8d:14:f4:da:14:13:df:8b:72:d4:5b:16:bf:67:b3:
fa:e2:60:38:02:00:6c:69:54:87:2b:79:25:98:b9:65:90:50:
41:31:64:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:39:04 2025 by rpki-client