Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SAP1ng41F2ISLxAo0yhBckLpHiM.roa
File: SAP1ng41F2ISLxAo0yhBckLpHiM.roa (raw, json)
Hash identifier: ZzEE+0heC3gGirUnaa5AKj1evIzryCRv+mOFm9dXddk=
Subject key identifier: 48:03:F5:9E:0E:35:17:62:12:2F:10:28:D3:28:41:72:42:E9:1E:23
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197968D2CB4845C955D02D2070101E74530
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SAP1ng41F2ISLxAo0yhBckLpHiM.roa
Signing time: Sun 22 Jun 2025 07:32:03 +0000
ROA not before: Sun 22 Jun 2025 07:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22427
IP address blocks: 151.242.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 10:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:96:8d:2c:b4:84:5c:95:5d:02:d2:07:01:01:e7:45:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 22 07:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4803f59e0e351762122f1028d328417242e91e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:9e:61:cd:db:26:3a:f6:4f:e6:f5:79:27:
5c:df:ff:a1:8e:d0:1a:99:e8:41:c1:6b:d3:d2:9e:
61:4f:f3:45:a7:4c:6a:c1:23:0f:77:6c:e2:de:7d:
b5:f7:59:96:53:e1:91:f9:a0:a0:52:3d:c3:d2:1c:
14:1e:76:f7:e7:92:19:3d:4f:25:a0:71:32:bc:49:
31:fb:71:f9:20:5a:15:cb:bd:2f:45:08:0f:e7:3d:
cf:c7:fb:9c:49:24:a7:78:c2:ea:6d:a7:76:05:ed:
0d:46:96:45:6f:a6:4c:d6:08:82:32:c8:3f:a0:b2:
24:ff:ac:e9:77:39:53:a5:f5:c8:b5:b9:1b:f3:6d:
f5:bc:de:de:ef:4c:26:c8:a9:70:9d:ed:88:b6:55:
fc:bd:8b:39:2a:58:a4:db:31:aa:b7:c2:3c:1c:a5:
18:e1:19:fa:d2:a6:56:36:5a:cb:c7:01:8b:59:f8:
e1:f0:ef:a9:2d:c8:50:87:4e:c6:be:33:2f:55:94:
ba:f7:87:ac:a3:d2:e5:7c:3c:98:7c:9d:30:f5:f9:
9b:48:f7:7f:1a:b5:13:fc:ff:be:ad:cc:a2:ca:81:
94:6d:a0:09:95:a7:aa:04:cc:f8:58:62:39:7a:a1:
5c:7c:9c:f6:28:9c:a4:f1:a1:12:fb:39:41:b8:7c:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:F5:9E:0E:35:17:62:12:2F:10:28:D3:28:41:72:42:E9:1E:23
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SAP1ng41F2ISLxAo0yhBckLpHiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.154.0/24
Signature Algorithm: sha256WithRSAEncryption
49:89:94:78:de:cc:25:bc:43:8f:84:64:66:55:de:21:b1:c7:
21:c4:1f:22:40:9d:21:61:38:ac:f4:aa:31:9b:32:c8:ac:38:
ca:d7:63:b0:41:97:62:36:2c:f5:30:8c:db:00:70:80:16:cb:
81:0e:af:bd:d5:7d:8a:7c:3e:75:9d:57:a2:b2:c2:50:42:c2:
14:6b:fd:f8:49:8f:f6:0b:8c:b3:e4:d9:6e:1d:30:db:06:2f:
4e:4e:79:4c:0a:d9:8f:c8:f2:9e:62:ea:82:c4:0c:b7:61:1e:
24:29:aa:33:e6:0e:1b:b2:4b:58:88:f8:c8:52:8a:17:cc:3d:
11:fc:83:5a:df:a5:78:c0:bb:f8:75:7a:a7:88:9c:5f:32:38:
7c:8b:ed:bc:3d:3f:97:31:51:af:aa:2e:20:c1:1b:61:fc:5d:
2e:98:1b:c9:11:c4:b9:ad:12:d4:9d:d0:1e:91:68:26:8a:5d:
d9:14:1e:86:e8:1c:2a:8b:7a:2e:ad:94:fd:01:12:51:8f:15:
ff:ea:b2:bb:ab:3b:90:6b:2c:d3:1b:30:96:36:07:52:7a:dd:
b8:ee:98:b7:4d:73:c2:6d:7c:02:b8:87:91:41:99:bc:86:ca:
45:a7:a9:e7:0f:97:bb:1e:07:e9:e8:47:bc:24:e0:9a:bf:35:
64:2b:81:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:46:05 2025 by rpki-client