Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-laWHGP2bT0AU1nUkPb3p8LW2ek.roa
File: 1-laWHGP2bT0AU1nUkPb3p8LW2ek.roa (raw, json)
Hash identifier: KWCK02oC4pPrctBcmTk7QLeihMhmLmb9auABu9vovMA=
Subject key identifier: FA:56:96:1C:63:F6:6D:3D:00:53:59:D4:90:F6:F7:A7:C2:D6:D9:E9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01969081D95DD7B54B371A0D9610962CF653
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-laWHGP2bT0AU1nUkPb3p8LW2ek.roa
Signing time: Fri 02 May 2025 10:19:10 +0000
ROA not before: Fri 02 May 2025 10:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 151.242.50.0/24 maxlen: 24
151.243.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 May 2025 05:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:81:d9:5d:d7:b5:4b:37:1a:0d:96:10:96:2c:f6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 2 10:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa56961c63f66d3d005359d490f6f7a7c2d6d9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:bb:aa:ab:b8:45:90:db:fe:41:1c:83:e6:
44:f8:1c:d0:10:ec:40:f3:71:a6:89:d3:a9:96:8e:
de:66:0d:b2:af:33:73:9d:64:c0:29:a7:60:ae:d8:
7f:97:d5:98:fe:65:68:b9:6c:ec:a3:6b:47:56:c6:
89:3c:f8:6b:d5:9d:b7:1d:2c:89:c0:6c:32:87:b8:
d9:30:76:33:91:bf:30:74:fe:d8:7d:8b:49:bb:e4:
75:98:c9:ac:77:e7:85:29:d7:b8:4a:43:d5:47:ea:
24:e7:f6:0f:97:42:62:b0:16:88:48:b0:4e:79:86:
34:7b:c4:26:97:2d:ff:f7:98:8a:01:8b:aa:f4:ca:
d3:24:b2:6a:05:2d:92:b0:86:e6:4b:68:b9:95:8b:
5d:43:e5:fe:ff:d3:1c:af:1a:ad:d1:d4:01:21:65:
ab:de:a0:c9:97:85:51:bd:50:89:78:95:03:1f:64:
17:7d:e0:be:04:01:b2:13:88:e1:eb:f7:1a:5a:6e:
18:fc:03:3a:83:f7:ff:6d:73:14:32:60:98:5e:37:
3c:3a:58:50:20:76:3b:80:21:20:a1:8e:35:1e:12:
90:78:e8:27:f7:86:42:91:95:7e:e0:db:fc:12:24:
ac:72:9d:cc:0c:13:3b:d5:d6:4f:ed:7d:e6:c8:1c:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:56:96:1C:63:F6:6D:3D:00:53:59:D4:90:F6:F7:A7:C2:D6:D9:E9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-laWHGP2bT0AU1nUkPb3p8LW2ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.50.0/24
151.243.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:cb:bc:6c:05:0d:3d:46:73:ee:91:56:5f:5e:16:b5:cc:1f:
f2:13:73:f8:4f:c8:43:1d:ad:6f:5a:e6:69:be:4d:0b:df:71:
01:45:0d:6c:80:b2:9c:f7:85:db:bb:57:8a:10:ca:a7:22:88:
81:09:eb:24:4a:bd:00:77:56:aa:74:79:65:57:58:c3:01:6a:
e3:1a:83:e7:e7:11:62:c4:fd:59:2a:74:2b:6c:e2:c9:dd:67:
8c:f3:20:a3:ce:a0:27:5e:2c:a6:23:be:4d:12:0b:46:e1:8e:
a5:9c:2f:94:80:31:fd:fb:3c:a7:fb:d4:a6:9a:78:86:25:59:
2c:7f:47:0a:2e:d2:d7:21:af:cf:ed:96:32:e0:e6:67:34:e7:
e2:3d:25:36:32:90:9e:10:12:c3:07:68:2b:a0:1c:8a:b0:2d:
4f:63:ef:6d:16:29:e1:44:c9:06:f6:2e:01:81:55:4d:6d:38:
42:ae:38:96:31:c3:88:54:d1:2c:6e:76:a9:9e:48:58:12:56:
67:e0:f1:d5:5c:21:fe:67:62:08:03:56:73:6e:74:a5:43:4e:
13:d0:18:10:56:6d:08:39:86:93:83:88:aa:b2:bf:85:7a:b2:
5a:f5:21:71:13:7a:e2:df:ff:0f:c5:dc:64:61:25:d6:7f:d2:
3c:b7:3d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:38:13 2025 by rpki-client