Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/cJkU_Hs3mAKrzS6RLKAYgxJNjSQ.roa
File: cJkU_Hs3mAKrzS6RLKAYgxJNjSQ.roa (raw, json)
Hash identifier: LV6Fo60TohEvabxGZdeTqsOfevR7bVvW8EUdSbwOKvo=
Subject key identifier: 70:99:14:FC:7B:37:98:02:AB:CD:2E:91:2C:A0:18:83:12:4D:8D:24
Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial: 0198CB54BA4AA606880EDFE1057D35CBE278
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/cJkU_Hs3mAKrzS6RLKAYgxJNjSQ.roa
Signing time: Thu 21 Aug 2025 06:33:04 +0000
ROA not before: Thu 21 Aug 2025 06:33:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207471
IP address blocks: 150.40.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Aug 2025 14:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:54:ba:4a:a6:06:88:0e:df:e1:05:7d:35:cb:e2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Validity
Not Before: Aug 21 06:33:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=709914fc7b379802abcd2e912ca01883124d8d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ec:cc:19:d6:9e:5d:71:e4:06:91:88:33:61:
55:a6:aa:3a:db:c9:bc:e7:81:75:99:3b:5a:4e:63:
79:19:ec:b4:50:75:01:72:e7:2e:d8:7f:2c:d2:98:
e2:cf:51:65:36:eb:06:b2:3f:cb:bf:2b:fa:bd:26:
c8:04:d7:0a:49:63:d5:ec:be:c2:c6:40:3e:cc:84:
73:c6:ec:25:1c:11:92:f0:f5:a6:a8:ab:3c:c4:9b:
58:dd:18:5b:53:76:bf:25:71:31:5d:ca:f0:53:cc:
05:e2:ba:64:58:59:4d:7d:fa:fa:d9:a5:e2:f8:50:
24:41:f3:ac:e9:09:a4:29:ba:22:38:0f:73:a1:f2:
a8:4e:6b:a2:e8:f8:a2:61:05:af:b7:13:52:2b:16:
10:da:e3:38:f7:a6:1c:eb:14:5c:fb:fb:59:22:f1:
55:be:70:48:9f:5c:ef:31:c8:6a:be:7f:4a:cb:da:
33:99:5d:76:b3:75:fc:1c:fb:d9:1c:4f:6e:bc:44:
b4:e7:c9:8f:eb:48:d0:c1:a5:e4:b6:eb:7c:47:ca:
7e:93:00:56:c1:c3:45:d3:7b:c3:80:54:ea:19:4b:
1d:7f:4d:54:2f:45:d6:78:1d:39:53:51:75:1a:33:
1b:19:7d:35:67:17:03:de:74:73:93:47:89:38:47:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:99:14:FC:7B:37:98:02:AB:CD:2E:91:2C:A0:18:83:12:4D:8D:24
X509v3 Authority Key Identifier:
keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/cJkU_Hs3mAKrzS6RLKAYgxJNjSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.40.100.0/24
Signature Algorithm: sha256WithRSAEncryption
84:37:7c:80:ae:61:09:5f:98:3a:ce:58:61:9f:36:f7:74:c0:
5f:87:4e:03:01:99:c5:b0:f8:6c:e7:a7:07:35:3d:4a:ec:e2:
f5:ac:84:4b:49:29:29:ce:a9:a6:a1:0b:d2:d2:11:18:09:ab:
f7:14:f5:13:e6:05:6e:e0:f2:d2:7f:ef:5f:fc:85:6c:e7:ff:
67:6f:25:b3:bf:7c:f9:58:c4:84:0f:9e:7e:92:72:d1:c1:3f:
0a:b8:41:91:0b:b5:b1:76:e5:13:5b:1f:d8:b4:04:2d:81:b5:
3a:c2:ae:4b:7b:cb:d8:eb:35:44:54:26:e2:87:dd:d0:ff:62:
7b:cf:52:6d:4a:99:e5:81:fb:77:63:a9:86:8e:9d:3b:02:7e:
c2:a6:45:be:8a:95:ac:d5:39:af:04:e6:29:9c:35:71:e1:f5:
53:cf:54:a1:ab:93:3a:d7:83:91:25:26:28:a8:bf:cb:a8:34:
d2:1e:47:0a:f3:a8:64:b9:eb:36:d8:3c:40:f5:9b:a6:8a:c1:
f0:66:8c:23:fe:77:e1:22:6a:ac:ba:c2:a9:55:89:22:e0:99:
03:a3:78:9a:57:aa:37:3c:8b:b7:61:0c:db:1d:90:b0:fb:f7:
fc:19:e8:f6:5e:9e:f1:0f:10:01:3f:8d:8c:57:52:38:09:b5:
fb:82:bc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:16:17 2025 by rpki-client