Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ElMETWnjedLiEKZE2OGVfR-mKYQ.roa
File: ElMETWnjedLiEKZE2OGVfR-mKYQ.roa (raw, json)
Hash identifier: muWtx8ky2HNANI44NV85hnErSbe+2NKCBkAO5LGXK90=
Subject key identifier: 12:53:04:4D:69:E3:79:D2:E2:10:A6:44:D8:E1:95:7D:1F:A6:29:84
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019600AEAE876434668F19B34EDB782E4DAE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ElMETWnjedLiEKZE2OGVfR-mKYQ.roa
Signing time: Fri 04 Apr 2025 12:02:50 +0000
ROA not before: Fri 04 Apr 2025 12:02:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134709
IP address blocks: 151.240.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Apr 2025 11:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:ae:ae:87:64:34:66:8f:19:b3:4e:db:78:2e:4d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 4 12:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1253044d69e379d2e210a644d8e1957d1fa62984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:47:86:f0:36:94:3e:d8:2b:9f:77:98:be:
bd:d9:d4:3b:e9:00:14:f6:7b:99:75:3e:ae:bb:88:
1b:fc:8d:a3:40:2a:db:0f:15:b1:c6:e1:f0:ed:2a:
b0:2e:29:72:82:8f:b4:9d:54:62:e8:96:1f:d5:57:
fa:0c:47:61:f3:b8:b2:6e:82:f0:d7:16:25:6b:91:
e2:96:6b:11:5e:50:6f:bf:ca:8b:75:fb:9f:14:8a:
3d:81:e6:ce:59:f5:41:d4:2a:18:95:31:5f:1d:92:
9f:aa:c6:24:c3:06:e1:88:d8:78:4e:35:a0:b7:0b:
b8:30:b0:d8:35:bc:f3:56:a9:ef:30:2f:86:a5:d2:
ae:24:74:cc:92:d2:86:78:b5:35:4b:1b:a4:d7:af:
a4:d7:cc:67:f6:d9:6a:f8:04:df:61:29:dd:d4:39:
96:5e:04:c7:9e:8a:08:58:e5:8c:e2:53:c2:b4:81:
ae:fe:0b:d4:d8:fc:73:fd:1c:c9:3f:e6:ce:26:92:
aa:bc:fa:db:4c:35:f8:f5:bf:2a:50:a1:b8:d9:a1:
04:2a:9d:cd:48:15:7e:09:7e:3f:85:25:3a:92:38:
e0:78:42:a3:d7:33:a0:b6:a7:c7:8c:65:b4:02:16:
12:fb:80:d4:e0:11:81:0e:be:4c:a4:e5:1a:50:a7:
08:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:53:04:4D:69:E3:79:D2:E2:10:A6:44:D8:E1:95:7D:1F:A6:29:84
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ElMETWnjedLiEKZE2OGVfR-mKYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:83:88:dc:74:84:ed:bc:ce:9c:b7:e4:4c:fe:f4:82:41:ac:
4d:49:ba:51:02:e1:4d:ea:aa:3e:3a:26:2d:39:0c:37:5b:12:
c0:62:55:59:f1:30:78:f8:c9:b7:3c:eb:e7:2a:75:0f:8c:9e:
43:c8:c7:be:78:e8:2a:c9:32:34:d5:d2:59:9d:e9:87:5e:72:
13:c2:44:f4:0d:db:76:e8:14:01:d8:d9:51:1b:c7:a3:4e:f9:
0d:75:f6:c1:c6:f2:e0:24:15:46:66:12:39:0e:23:c0:94:fb:
d3:58:48:4d:ed:4c:b7:71:c7:f3:14:a1:da:54:1f:31:d4:f6:
34:bd:92:23:c8:89:34:e4:af:02:41:e6:18:ee:aa:3c:78:47:
2b:b7:58:55:6a:2e:c4:45:29:96:13:1a:22:d2:ee:c1:41:ec:
f8:ee:58:43:ee:f7:4e:67:4f:4e:59:ec:7c:c4:f2:b5:f0:f4:
25:97:8b:48:0b:b5:20:23:39:0c:d8:c8:39:14:7f:35:43:a6:
af:ae:e0:43:61:4e:10:df:04:fc:9c:12:d6:32:e3:56:bc:04:
9b:f4:90:60:95:5b:3d:91:4e:9d:50:2a:cd:7e:79:55:dd:1d:
03:e9:77:94:7f:bd:0e:5a:c8:af:80:37:5c:60:ad:f5:7a:5a:
48:30:2e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 08:38:32 2025 by rpki-client