Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/x5By0pfhJ9GLgqcw8U588sSyRWA.roa
File: x5By0pfhJ9GLgqcw8U588sSyRWA.roa (raw, json)
Hash identifier: h77AVue9CCY37GQ0FiKBRzcNLP/YjUepfqXxEOiIMXY=
Subject key identifier: C7:90:72:D2:97:E1:27:D1:8B:82:A7:30:F1:4E:7C:F2:C4:B2:45:60
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019657C417AC885B38FCECA78F8D35C050EE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/x5By0pfhJ9GLgqcw8U588sSyRWA.roa
Signing time: Mon 21 Apr 2025 09:53:10 +0000
ROA not before: Mon 21 Apr 2025 09:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138244
IP address blocks: 151.243.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 May 2025 10:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:c4:17:ac:88:5b:38:fc:ec:a7:8f:8d:35:c0:50:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 21 09:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c79072d297e127d18b82a730f14e7cf2c4b24560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:66:7e:16:39:e5:69:33:fc:72:f1:ce:d4:3e:
4b:97:a9:e2:da:7f:26:b1:f8:87:db:41:a1:c4:c7:
1e:5e:65:28:f9:cb:15:88:0e:8f:9a:ce:bb:24:7a:
dd:db:97:32:e7:80:c5:a5:5c:e2:18:a8:bb:f3:29:
f0:9a:f5:18:7a:65:1f:64:d5:06:d2:6a:62:91:cf:
b5:ec:f8:8e:e0:a2:14:60:e3:f5:8e:1c:81:5f:ff:
5b:d8:b4:72:a0:6e:a2:d6:50:98:8d:14:28:02:8f:
54:db:a0:f2:98:56:d6:de:86:d3:5e:ed:a4:b0:db:
68:3d:5d:b1:da:a6:6b:1d:21:99:d4:7d:dd:95:d9:
b5:1e:a0:91:a6:66:f7:97:54:28:2e:9b:35:ac:6c:
7c:07:aa:9f:e6:94:65:f1:27:04:49:e6:d0:d5:92:
b3:b2:96:55:13:6e:ef:d3:2e:db:0d:41:9f:99:11:
fa:a5:23:79:42:a3:f3:c4:16:d5:4e:3b:d4:b8:4c:
3c:3c:6d:e0:2b:33:9d:81:b0:5c:f7:c9:42:cd:3e:
6c:11:2e:af:67:4e:71:f1:92:5f:2e:92:da:b4:8f:
a6:e9:4e:61:f1:bb:ac:15:63:87:e4:f6:02:3a:5c:
13:10:e8:4f:f1:d9:6b:40:9c:02:ce:84:3c:9c:57:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:72:D2:97:E1:27:D1:8B:82:A7:30:F1:4E:7C:F2:C4:B2:45:60
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/x5By0pfhJ9GLgqcw8U588sSyRWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.146.0/24
Signature Algorithm: sha256WithRSAEncryption
29:73:20:ae:2f:d6:ad:9b:2c:44:94:41:d3:1f:2a:9b:ea:23:
9b:e1:2a:5d:a0:de:0a:5f:80:34:c4:c9:aa:69:ee:a1:29:bb:
4b:7b:7f:1a:a5:a1:9a:b1:26:c5:e3:9f:e4:d6:06:cc:8d:32:
b3:99:1f:8b:95:06:f7:a1:2c:c2:d3:47:98:ac:c3:99:51:f9:
57:d9:15:3d:6e:16:2e:4a:29:7a:52:03:54:b9:5b:6d:8b:4c:
b1:b6:72:8f:c2:4e:6e:28:8d:f1:34:79:7e:31:2f:a9:01:59:
3f:7c:32:7b:6f:bb:8b:8a:fe:ea:2e:cd:cd:f4:ec:0a:ca:d5:
f9:b8:bf:8f:18:ff:fa:5f:86:bf:28:6b:7c:08:ec:84:70:ef:
b5:5e:c6:c1:8e:b4:75:dc:fd:d3:a5:a8:d9:70:bb:87:cb:89:
89:df:e7:5b:f2:2e:63:ee:56:25:45:1e:b4:25:50:7a:aa:e0:
51:e9:b7:68:00:3b:5d:6e:55:f5:b9:40:1a:bf:99:5a:cb:74:
8d:a7:bd:03:3a:5d:93:8f:6e:1f:66:aa:36:91:74:3c:8f:cb:
4b:b1:dd:df:bb:b7:0b:f1:44:e4:40:9e:e8:79:05:c5:3e:f2:
09:97:72:d0:47:c0:13:c0:0d:fc:0d:1c:43:b0:e6:9d:d3:7e:
8e:af:65:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:50:32 2025 by rpki-client