Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hJ0jMYY3OKo9oBVUtbHwKjjvFUM.roa
File: hJ0jMYY3OKo9oBVUtbHwKjjvFUM.roa (raw, json)
Hash identifier: RY13R8QjPVK3Wzuy+56PB2j0UiytCYgotP/IPHI/rjA=
Subject key identifier: 84:9D:23:31:86:37:38:AA:3D:A0:15:54:B5:B1:F0:2A:38:EF:15:43
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01967AF3F6739B9397E76D88F8C228EDD657
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hJ0jMYY3OKo9oBVUtbHwKjjvFUM.roa
Signing time: Mon 28 Apr 2025 05:52:10 +0000
ROA not before: Mon 28 Apr 2025 05:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20454
IP address blocks: 151.243.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 May 2025 05:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:f3:f6:73:9b:93:97:e7:6d:88:f8:c2:28:ed:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 28 05:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=849d2331863738aa3da01554b5b1f02a38ef1543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:85:69:f3:72:0a:8b:fb:58:cd:9d:6e:fe:
52:dc:24:03:68:a8:94:d4:28:c3:05:58:86:4a:56:
84:cd:2b:17:33:d8:aa:bb:05:2b:2c:f1:9e:81:0f:
25:8a:6a:ed:86:3b:41:41:fd:66:db:a2:ff:66:7c:
c1:61:86:20:8f:de:c3:a5:5b:7e:fc:3b:43:51:ce:
3a:22:0a:93:c0:55:e9:fa:91:9f:0a:56:60:b4:4a:
63:f0:d5:7b:fc:c5:60:a9:32:aa:bf:30:9e:03:91:
65:2b:08:4d:24:22:b2:ed:00:e9:dc:30:42:fa:50:
b1:9d:46:a2:90:a9:6f:7c:49:c0:19:d9:c0:ee:76:
63:ec:7e:9d:cf:af:6f:59:29:86:df:d4:f8:c4:b4:
a7:70:bf:bf:e9:4e:9b:38:1d:19:71:17:48:72:cb:
cf:8f:7f:bb:8d:74:26:8e:3d:8a:d1:4e:55:f7:df:
13:9a:b5:90:9e:43:62:c9:3f:a4:08:51:00:e9:85:
49:e8:ae:4a:b0:ad:7b:7b:e4:68:85:a0:d4:9b:2f:
f6:26:e4:de:37:67:44:9a:f3:fb:50:bf:22:6e:b6:
c4:ca:99:d5:e3:8b:df:3f:07:77:72:bd:28:c6:39:
60:e2:bf:0c:e1:16:42:80:ac:1f:cd:51:07:9b:86:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9D:23:31:86:37:38:AA:3D:A0:15:54:B5:B1:F0:2A:38:EF:15:43
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hJ0jMYY3OKo9oBVUtbHwKjjvFUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:a0:bc:44:3a:af:dd:47:8c:08:10:34:5a:f0:88:4b:e7:08:
60:ac:f0:40:83:9e:3f:24:89:74:23:89:bd:3c:e3:35:8f:5b:
88:a1:6f:a8:88:09:72:3a:8b:65:99:7d:e5:84:62:74:d0:a0:
84:85:3c:43:c2:50:9f:b7:eb:e9:0f:ae:bc:a3:05:87:05:0c:
47:90:5e:df:cb:ea:a7:ed:e8:40:18:a5:ee:0b:df:05:d1:f3:
41:0e:ab:ef:65:7a:bd:9a:a2:8e:00:ce:25:75:20:33:27:07:
02:41:fa:77:1a:1c:dc:57:c3:78:d0:70:df:2e:81:78:c1:16:
0f:53:23:db:c0:a9:b2:8b:4e:95:db:e2:59:67:ec:83:d5:e3:
92:99:5b:85:ce:a0:46:8b:2f:75:f1:16:9e:e5:e7:2d:1c:03:
eb:f4:1a:24:80:4a:62:2e:a6:83:26:c4:d7:48:a4:ea:f9:7f:
eb:cd:48:ed:86:14:d9:88:9c:38:b6:98:85:ed:f9:2c:50:0a:
18:2c:62:61:1d:c8:b2:78:7b:34:b7:40:46:5a:95:f5:ed:b5:
2d:ef:9f:80:fe:5d:91:20:15:49:73:28:aa:7a:fa:cf:31:86:
70:74:60:5d:65:9d:c2:cf:b7:27:b9:45:23:49:23:6e:a1:cd:
9b:41:c7:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZZ68/Zzm5OX522I+MIo7dZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDI4MDU1MjEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDlkMjMzMTg2MzczOGFhM2RhMDE1NTRiNWIxZjAyYTM4ZWYxNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCmFafNyCov7WM2dbv5S3CQDaKiU
1CjDBViGSlaEzSsXM9iquwUrLPGegQ8limrthjtBQf1m26L/ZnzBYYYgj97DpVt+
/DtDUc46IgqTwFXp+pGfClZgtEpj8NV7/MVgqTKqvzCeA5FlKwhNJCKy7QDp3DBC
+lCxnUaikKlvfEnAGdnA7nZj7H6dz69vWSmG39T4xLSncL+/6U6bOB0ZcRdIcsvP
j3+7jXQmjj2K0U5V998TmrWQnkNiyT+kCFEA6YVJ6K5KsK17e+RohaDUmy/2JuTe
N2dEmvP7UL8ibrbEypnV44vfPwd3cr0oxjlg4r8M4RZCgKwfzVEHm4ah8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFISdIzGGNziqPaAVVLWx8Co47xVDMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvaEowak1ZWTNPS285b0JWVXRiSHdLamp2RlVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl/OYMA0G
CSqGSIb3DQEBCwUAA4IBAQBaoLxEOq/dR4wIEDRa8IhL5whgrPBAg54/JIl0I4m9
POM1j1uIoW+oiAlyOotlmX3lhGJ00KCEhTxDwlCft+vpD668owWHBQxHkF7fy+qn
7ehAGKXuC98F0fNBDqvvZXq9mqKOAM4ldSAzJwcCQfp3GhzcV8N40HDfLoF4wRYP
UyPbwKmyi06V2+JZZ+yD1eOSmVuFzqBGiy918Rae5ectHAPr9BokgEpiLqaDJsTX
SKTq+X/rzUjthhTZiJw4tpiF7fksUAoYLGJhHciyeHs0t0BGWpX17bUt75+A/l2R
IBVJcyiqevrPMYZwdGBdZZ3Cz7cnuUUjSSNuoc2bQcdr
-----END CERTIFICATE-----
Generated at Tue May 13 11:39:37 2025 by rpki-client