Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/OUoyDwEwqw8NpMPc0rGyuWP9-VU.roa
File: OUoyDwEwqw8NpMPc0rGyuWP9-VU.roa (raw, json)
Hash identifier: mrGKVYEyYvjoSBB7vtIoO+mMkzhb8O1qWqXKPZ/9G90=
Subject key identifier: 39:4A:32:0F:01:30:AB:0F:0D:A4:C3:DC:D2:B1:B2:B9:63:FD:F9:55
Certificate issuer: /CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Certificate serial: 01969FC2900EC55D6935E7B656958ADF4694
Authority key identifier: E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/OUoyDwEwqw8NpMPc0rGyuWP9-VU.roa
Signing time: Mon 05 May 2025 09:24:10 +0000
ROA not before: Mon 05 May 2025 09:24:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205664
IP address blocks: 151.156.253.0/24 maxlen: 24
151.156.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 09:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:c2:90:0e:c5:5d:69:35:e7:b6:56:95:8a:df:46:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Validity
Not Before: May 5 09:24:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=394a320f0130ab0f0da4c3dcd2b1b2b963fdf955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:21:06:8e:3a:0e:61:23:9d:fd:3f:2b:56:
4d:a5:a3:88:e4:36:21:cf:f3:e7:39:2e:fb:29:8f:
cb:4d:4d:a7:87:d8:36:c9:af:9d:64:cd:55:12:e8:
c7:87:67:f1:24:1c:06:90:bb:1f:4f:f4:df:43:43:
7e:99:b5:21:6d:33:9f:fc:35:4e:d8:41:2a:54:ec:
c1:c6:b3:58:a1:cd:fc:de:ec:f7:a1:11:0c:a0:65:
8d:c1:f6:5f:40:93:84:de:cf:5d:45:0c:db:13:13:
b3:38:91:75:c9:d0:32:6d:54:1a:29:7e:d2:66:17:
0f:3e:40:c6:d8:0c:82:cf:d3:9b:6b:ef:e8:9e:ba:
d1:03:33:34:20:f6:93:b1:b5:dd:a1:41:a7:f8:09:
4d:4a:c2:e1:28:17:21:5a:be:f2:36:7e:8f:ef:7c:
d3:d7:9d:7a:41:56:d7:cf:0c:cb:ae:82:78:c4:1f:
7c:bf:38:69:58:f0:29:89:e1:05:d1:66:16:32:c5:
31:9a:ce:bb:75:6b:74:00:1e:d3:17:04:88:bc:c0:
be:88:19:90:32:e0:01:43:fd:2d:7b:e3:e6:22:37:
9e:ed:27:ff:15:71:fc:c7:18:bd:5a:d2:4d:05:d9:
1a:f1:5c:eb:18:34:2d:aa:ee:72:56:b6:c4:26:ab:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4A:32:0F:01:30:AB:0F:0D:A4:C3:DC:D2:B1:B2:B9:63:FD:F9:55
X509v3 Authority Key Identifier:
keyid:E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/OUoyDwEwqw8NpMPc0rGyuWP9-VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.156.253.0-151.156.254.255
Signature Algorithm: sha256WithRSAEncryption
07:a8:2f:67:95:b8:58:8d:8b:40:d1:15:60:db:4a:dd:64:17:
18:3d:67:6c:66:c0:87:fd:9f:3d:a3:56:2e:ff:2c:0a:16:97:
87:d2:5a:78:3d:f7:77:22:17:0d:df:f0:98:de:42:44:ce:3c:
dd:f0:4b:6b:75:54:05:58:d9:03:1e:bb:ad:da:b9:04:ef:e1:
54:59:33:be:91:f4:41:40:8a:3f:58:bc:ad:3e:1d:22:99:b9:
5a:81:b2:80:aa:a5:f3:8c:a7:bf:57:6f:87:c2:a8:1d:67:91:
8f:0b:3d:4a:eb:d2:90:a2:6b:8a:96:3f:12:28:e4:78:67:1b:
be:03:81:3b:45:3f:8f:36:12:63:13:70:53:22:7a:b4:1a:7e:
2e:9b:f4:be:04:08:9f:ae:43:13:b1:85:34:fe:ba:ab:cc:b9:
99:48:28:13:b3:f2:c1:31:1e:ea:27:88:28:cf:6b:7b:cb:29:
de:a3:7c:83:63:55:fa:bc:62:1c:bb:c5:79:2e:07:d7:96:df:
86:04:5b:ec:f7:26:15:62:fa:ae:62:97:eb:83:4b:de:9b:92:
93:89:b1:6f:7a:43:8a:40:7d:55:49:09:60:10:41:ae:c2:06:
99:7f:92:2a:0a:40:f0:c8:63:6d:31:d3:ad:1d:89:20:87:5a:
7c:96:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:04:14 2025 by rpki-client