Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/X22J9_M-_nP-L8HkBFWveWjiJzY.roa
File: X22J9_M-_nP-L8HkBFWveWjiJzY.roa (raw, json)
Hash identifier: XigxEZKBEO7C49AIS4Bf5vRfaqQ0Gc5LKcw/rEqWHDY=
Subject key identifier: 5F:6D:89:F7:F3:3E:FE:73:FE:2F:C1:E4:04:55:AF:79:68:E2:27:36
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019869263DB1E3F06C5541AFAC63915A35F8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/X22J9_M-_nP-L8HkBFWveWjiJzY.roa
Signing time: Sat 02 Aug 2025 04:59:30 +0000
ROA not before: Sat 02 Aug 2025 04:59:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199760
IP address blocks: 151.240.99.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 09:56:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:26:3d:b1:e3:f0:6c:55:41:af:ac:63:91:5a:35:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 2 04:59:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f6d89f7f33efe73fe2fc1e40455af7968e22736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7f:0e:d0:23:35:e4:05:76:da:67:ea:e5:2e:
c2:a4:fa:b5:2e:e1:e3:a9:b7:66:70:ee:c0:d3:84:
c9:d9:64:4e:51:61:56:dc:16:67:a9:b6:34:cd:69:
92:88:b4:b1:fb:7f:24:f2:1f:b1:39:a1:16:5f:3a:
11:46:77:9c:f4:97:eb:9d:81:85:4f:50:0f:03:ae:
56:7d:7d:c3:b7:50:5e:a4:98:d9:27:3a:4a:de:56:
bb:76:28:29:ca:d8:49:c8:71:54:e8:24:06:d5:aa:
1e:21:c9:0d:f7:26:89:43:46:a6:25:5e:65:ab:43:
04:04:35:04:ed:09:2b:7b:ae:b4:46:1d:aa:b3:da:
f7:cc:98:f1:c1:2c:cd:9a:10:35:f8:00:da:af:73:
2d:15:f2:14:9f:5e:e7:3d:3c:0c:c6:f3:27:8f:69:
a5:f2:ca:82:bf:28:38:76:1c:c3:b9:df:84:0b:a7:
7c:4d:da:b2:85:0e:f6:e8:ea:7b:9b:06:15:3d:04:
f4:26:ed:1b:13:10:1d:74:b3:b1:95:16:87:5a:40:
64:e3:50:a0:08:63:50:e4:8b:ef:9f:b3:e5:cb:c1:
38:38:a0:1f:41:7f:17:8d:2a:94:07:25:03:cd:88:
bc:81:3f:b5:1e:9d:1c:93:3a:36:e4:63:79:01:26:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6D:89:F7:F3:3E:FE:73:FE:2F:C1:E4:04:55:AF:79:68:E2:27:36
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/X22J9_M-_nP-L8HkBFWveWjiJzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.99.0/24
151.241.27.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2e:4e:a5:85:7a:08:2f:7d:d9:5e:34:02:1a:0c:af:50:cc:
53:ce:62:71:47:7d:3e:b9:b0:34:99:fc:20:43:3c:a3:b7:a1:
0a:16:56:79:2c:6b:8d:25:99:74:17:96:5d:d8:18:82:a4:fb:
40:52:03:1a:a9:4b:35:1c:84:84:0f:99:b7:aa:80:1f:7d:d1:
c7:bb:46:5b:e5:fa:ac:8a:fb:84:20:d8:10:3f:1e:d6:37:0d:
b2:bf:77:c3:38:e4:57:ff:88:02:c8:ef:c8:8e:ef:e7:b2:94:
ab:35:12:b2:1b:45:ba:29:e1:ca:3f:91:9b:b9:06:55:4b:42:
4e:2f:a4:93:f7:e0:f6:09:71:b6:96:3e:e1:ea:8b:27:d3:23:
65:b1:de:6e:66:1f:92:f6:b2:a9:c5:03:cc:7e:c2:44:54:fe:
ec:97:b5:fc:68:5e:cc:d0:8f:3f:46:8e:7d:d5:bf:18:b0:16:
18:2a:2a:86:39:ab:2e:b0:94:a0:6e:5f:d9:82:d8:51:8b:5c:
ad:04:57:6d:4f:fa:e8:47:42:95:c1:08:d3:37:f0:84:fe:c6:
32:bd:79:9c:ee:3a:a0:41:7d:40:09:0f:4d:3d:e8:67:31:20:
bd:25:24:59:c8:3b:fb:70:3d:3f:f2:39:5d:b7:19:c1:dd:a2:
27:39:8c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:00:54 2025 by rpki-client