Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/Oh9lmh8EU2Uo3-Im2zky38LC0nQ.roa
File: Oh9lmh8EU2Uo3-Im2zky38LC0nQ.roa (raw, json)
Hash identifier: o3u4udbFADSNtpQ6vZF5dg1+Q89fc/Y0RUocM0r4vvE=
Subject key identifier: 3A:1F:65:9A:1F:04:53:65:28:DF:E2:26:DB:39:32:DF:C2:C2:D2:74
Certificate issuer: /CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Certificate serial: 0196AA7055352A1AC2A63175EE44DEB04658
Authority key identifier: E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/Oh9lmh8EU2Uo3-Im2zky38LC0nQ.roa
Signing time: Wed 07 May 2025 11:10:10 +0000
ROA not before: Wed 07 May 2025 11:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205664
IP address blocks: 151.156.248.0/22 maxlen: 24
151.156.249.0/24 maxlen: 24
151.156.253.0/24 maxlen: 24
151.156.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 May 2025 06:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:70:55:35:2a:1a:c2:a6:31:75:ee:44:de:b0:46:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47e3c9a951f1b158113ab7c3df19dfc336d9eef
Validity
Not Before: May 7 11:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a1f659a1f04536528dfe226db3932dfc2c2d274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:02:28:fb:92:42:8f:6d:47:32:54:e3:db:cd:
b1:11:d4:c3:45:16:51:59:3b:dd:68:f4:1a:de:52:
c4:57:e4:31:c8:a6:32:b7:28:40:97:d8:5a:8c:e0:
d2:ba:bc:ad:69:f5:4a:52:38:54:66:69:94:d4:f8:
be:4c:46:a2:b6:06:58:c0:61:a9:82:64:ed:3f:9b:
79:62:01:85:db:78:12:a0:5a:9e:c5:4e:57:f9:f4:
6b:d3:71:10:92:e2:7a:ba:9f:3e:5a:9d:d4:7f:11:
81:69:10:f0:c5:ee:dc:1c:ff:19:a1:96:d1:66:ed:
27:1f:06:2f:b7:07:b9:56:f4:78:df:57:50:3c:cc:
fb:0f:78:24:e2:b2:99:31:10:66:b9:75:f0:31:bf:
5c:c3:53:63:35:e1:08:2a:0a:b2:66:9a:6b:2c:71:
66:2a:d1:88:f8:76:29:2d:6e:9f:ef:99:0d:7e:5e:
c8:7c:54:3d:e4:36:3a:13:06:96:c5:b5:24:36:7d:
d6:5d:69:1d:b3:52:c9:83:82:88:6c:93:f2:fb:b0:
c8:8e:3f:bb:be:e1:a8:88:c2:62:8c:b0:40:a6:24:
c3:23:93:e7:43:97:59:a3:dc:fc:82:e7:70:58:d2:
93:6a:73:78:e2:09:71:0a:2a:b6:37:5b:7a:af:84:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1F:65:9A:1F:04:53:65:28:DF:E2:26:DB:39:32:DF:C2:C2:D2:74
X509v3 Authority Key Identifier:
keyid:E4:7E:3C:9A:95:1F:1B:15:81:13:AB:7C:3D:F1:9D:FC:33:6D:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H48mpUfGxWBE6t8PfGd_DNtnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/Oh9lmh8EU2Uo3-Im2zky38LC0nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/60aed1-6f74-43a9-976f-7ed5e31ae44f/1/5H48mpUfGxWBE6t8PfGd_DNtnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.156.248.0/22
151.156.253.0-151.156.254.255
Signature Algorithm: sha256WithRSAEncryption
75:59:80:11:c8:b3:35:01:5b:0f:14:c1:68:12:c5:30:25:96:
b7:3d:37:f3:f0:cf:df:fb:0c:59:02:8b:6c:a9:19:39:f7:68:
6b:80:66:a6:c8:5b:eb:ea:f6:e1:c5:1e:9f:dd:71:74:b6:c2:
da:18:9e:99:5b:7e:62:03:b5:78:3f:7e:67:e1:4c:ab:02:24:
7e:6c:4a:20:cb:7f:c7:a9:06:5b:35:4f:49:10:e2:2e:ac:c4:
c7:25:90:d5:10:c9:9a:e3:9a:4b:7a:da:bb:4b:ff:41:90:c3:
f9:6e:9f:da:cd:47:93:c7:ec:68:81:d0:77:05:81:02:95:48:
ab:25:30:8f:f1:c3:8f:21:7a:f3:2e:9f:da:09:8f:11:fd:af:
5d:f7:1d:b4:5f:9e:d7:e6:66:ff:fe:44:01:48:88:3a:d9:47:
6a:3d:be:a3:f5:fe:a3:25:18:27:f5:53:f4:e7:d1:dc:71:90:
d3:f5:7e:8e:20:31:ef:d8:3e:c5:0d:dc:85:de:9f:fc:3a:28:
20:10:77:e4:ed:b1:c9:71:51:0d:2c:9a:23:f2:3e:aa:78:d8:
6f:c8:31:5a:ed:75:07:b1:13:fe:ad:86:fb:33:82:23:32:55:
cc:9c:b7:f0:b3:ae:19:ac:8f:5a:35:ba:16:c1:e5:37:40:97:
b4:e6:be:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:23:13 2025 by rpki-client