Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YzhPBAYcA3W5VDrgEH5CakkD8rA.roa
File: YzhPBAYcA3W5VDrgEH5CakkD8rA.roa (raw, json)
Hash identifier: aWs36g3+0pM/NDrn9l6rwM2f1/9UJsAkKVKb0fCJ6Uk=
Subject key identifier: 63:38:4F:04:06:1C:03:75:B9:54:3A:E0:10:7E:42:6A:49:03:F2:B0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019748B34A8CDDE2855905AEA7C8A9B3EE67
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YzhPBAYcA3W5VDrgEH5CakkD8rA.roa
Signing time: Sat 07 Jun 2025 04:43:18 +0000
ROA not before: Sat 07 Jun 2025 04:43:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200950
IP address blocks: 151.240.122.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jun 2025 09:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:b3:4a:8c:dd:e2:85:59:05:ae:a7:c8:a9:b3:ee:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 7 04:43:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63384f04061c0375b9543ae0107e426a4903f2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:00:07:54:1d:5a:a3:42:70:b3:45:24:4b:
20:51:56:22:03:5e:69:4f:ee:d3:d4:6e:4a:25:2f:
8c:d2:2f:12:aa:cd:09:4c:70:c1:3c:a1:10:cd:8f:
22:22:f8:ea:8d:ff:d2:3c:b7:8c:6b:9e:a0:8f:c7:
c4:73:b6:6b:82:ca:f2:d6:30:8b:a8:9a:48:71:4a:
c1:2e:d1:84:e4:8a:3d:84:14:c3:15:70:35:0a:08:
de:c3:14:b0:36:ad:ba:cd:81:16:c8:09:ce:1f:00:
c1:47:42:fd:67:91:8b:0d:e9:a7:14:ae:0d:cc:99:
75:58:01:ce:19:14:07:4d:32:0c:dd:db:6a:88:a9:
0c:87:09:ee:3f:08:f3:0c:ff:c3:39:31:c0:43:74:
82:03:06:d8:87:b2:7d:65:c3:f4:66:8e:11:93:3e:
84:ea:92:01:7f:4f:6c:ab:60:51:59:ef:ca:28:8f:
90:27:99:98:79:4c:f5:98:0e:f6:95:8e:92:f9:15:
83:4c:e7:d8:61:49:b4:90:64:8b:19:bc:0f:12:40:
f5:4b:c5:f9:2f:32:f1:6d:31:bb:d2:d9:65:1f:37:
2c:1d:fc:e2:5d:ab:3d:bb:5a:24:d5:e8:52:a0:36:
7a:f5:a2:ec:e1:af:d3:f3:07:b4:42:72:5f:8a:7a:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:38:4F:04:06:1C:03:75:B9:54:3A:E0:10:7E:42:6A:49:03:F2:B0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YzhPBAYcA3W5VDrgEH5CakkD8rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.122.0/23
Signature Algorithm: sha256WithRSAEncryption
24:1a:62:af:aa:10:75:ab:4f:c4:d6:65:af:4a:9a:ff:ec:27:
62:71:69:4d:19:c5:ab:a8:89:89:98:9a:37:b5:40:9f:53:8e:
b0:eb:d1:a3:15:31:fa:0e:82:89:48:da:8f:12:f1:72:a3:c8:
b8:51:b4:0f:1c:8f:98:90:b3:fb:90:fc:6c:95:a5:5e:87:ca:
ed:fa:bc:c3:1e:e4:80:b0:d5:5e:95:59:b4:e1:af:63:5e:64:
1b:62:cc:db:86:69:1b:c1:c8:e6:e3:3c:92:64:44:9c:b4:7d:
03:81:fc:d5:83:4a:3d:bd:1d:6a:4d:3b:61:c7:e1:7c:5b:0d:
43:66:83:2f:22:31:71:b9:3f:2a:8a:42:c4:0c:e9:0e:0a:82:
c2:6d:60:15:18:85:8d:39:3c:39:74:5d:4d:5f:35:b0:f1:49:
7d:62:37:53:2e:a6:f0:d4:bc:49:2e:07:5a:0c:d1:a6:b7:7e:
2a:dd:06:b8:15:8c:00:d7:f6:6b:c2:ae:31:bc:fc:4a:37:09:
11:07:00:b9:6e:1c:f0:ae:68:8b:06:6d:32:4b:39:48:c2:f1:
c4:c8:f5:71:1d:e2:51:a2:2d:c9:b9:35:42:9e:6e:77:df:3b:
ea:bc:b3:6f:a2:99:75:80:36:59:5f:24:fc:6d:85:8a:24:7d:
ae:b3:27:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZdIs0qM3eKFWQWup8ips+5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjA3MDQ0MzE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzM4NGYwNDA2MWMwMzc1Yjk1NDNhZTAxMDdlNDI2YTQ5MDNmMmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiUAB1QdWqNCcLNFJEsgUVYiA15p
T+7T1G5KJS+M0i8Sqs0JTHDBPKEQzY8iIvjqjf/SPLeMa56gj8fEc7Zrgsry1jCL
qJpIcUrBLtGE5Io9hBTDFXA1CgjewxSwNq26zYEWyAnOHwDBR0L9Z5GLDemnFK4N
zJl1WAHOGRQHTTIM3dtqiKkMhwnuPwjzDP/DOTHAQ3SCAwbYh7J9ZcP0Zo4Rkz6E
6pIBf09sq2BRWe/KKI+QJ5mYeUz1mA72lY6S+RWDTOfYYUm0kGSLGbwPEkD1S8X5
LzLxbTG70tllHzcsHfziXas9u1ok1ehSoDZ69aLs4a/T8we0QnJfinr4NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGM4TwQGHAN1uVQ64BB+QmpJA/KwMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWXpoUEJBWWNBM1c1VkRyZ0VINUNha2tEOHJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/B6MA0G
CSqGSIb3DQEBCwUAA4IBAQAkGmKvqhB1q0/E1mWvSpr/7CdicWlNGcWrqImJmJo3
tUCfU46w69GjFTH6DoKJSNqPEvFyo8i4UbQPHI+YkLP7kPxslaVeh8rt+rzDHuSA
sNVelVm04a9jXmQbYszbhmkbwcjm4zySZESctH0DgfzVg0o9vR1qTTthx+F8Ww1D
ZoMvIjFxuT8qikLEDOkOCoLCbWAVGIWNOTw5dF1NXzWw8Ul9YjdTLqbw1LxJLgda
DNGmt34q3Qa4FYwA1/Zrwq4xvPxKNwkRBwC5bhzwrmiLBm0ySzlIwvHEyPVxHeJR
oi3JuTVCnm533zvqvLNvopl1gDZZXyT8bYWKJH2usyc3
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:25:53 2025 by rpki-client