Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gRB2QsUHbWhfwVDlcJLU6Gg6qFk.roa
File: gRB2QsUHbWhfwVDlcJLU6Gg6qFk.roa (raw, json)
Hash identifier: Ukupq2BiRhAADVLH8Aw8jFC3ecFy7wXUqKfvooYnzEE=
Subject key identifier: 81:10:76:42:C5:07:6D:68:5F:C1:50:E5:70:92:D4:E8:68:3A:A8:59
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01964DBDDD211E3089CCA1DC7A00D9ACD933
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gRB2QsUHbWhfwVDlcJLU6Gg6qFk.roa
Signing time: Sat 19 Apr 2025 11:10:10 +0000
ROA not before: Sat 19 Apr 2025 11:10:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214965
IP address blocks: 151.242.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 May 2025 20:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:bd:dd:21:1e:30:89:cc:a1:dc:7a:00:d9:ac:d9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 19 11:10:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=81107642c5076d685fc150e57092d4e8683aa859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:0f:84:8c:16:30:9c:98:03:92:4d:2f:11:
cc:d2:b5:ac:a0:57:82:e2:72:0b:f8:76:de:4e:21:
7d:8d:fa:1b:0f:c4:1d:39:87:5b:62:91:b0:4e:e0:
c3:11:86:80:89:72:64:56:27:c9:33:8a:1c:7f:95:
83:ea:c3:bf:25:fe:ac:e2:af:33:1b:c7:43:03:c0:
5a:04:b2:71:ee:14:de:86:a0:a7:7f:32:38:2a:e9:
a5:0c:70:10:3a:d0:26:b9:b6:ea:70:8e:34:9f:34:
7c:32:92:aa:64:e8:94:8d:24:20:19:57:a5:7a:1e:
b3:fe:15:2b:49:5d:5e:e1:29:2b:40:a8:3b:15:b2:
56:33:97:a4:78:3b:d5:49:10:8d:2c:a0:9b:88:61:
c5:45:cc:97:f1:95:f1:8c:81:60:2a:1a:c5:51:3f:
32:45:2c:4d:31:a2:07:9c:47:fd:1c:b9:a3:ef:71:
68:e9:b2:aa:4a:8a:28:a2:28:83:8c:ba:ec:6a:64:
f5:06:b5:96:f3:15:b5:4d:e2:4e:71:42:de:5c:1c:
6e:0a:90:35:65:5b:58:db:48:42:1d:4a:77:62:81:
67:7f:5f:82:d7:0f:50:72:ec:7a:bb:2e:ad:fb:22:
cb:03:25:6f:90:09:2f:d1:e9:da:3d:08:da:93:99:
96:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:10:76:42:C5:07:6D:68:5F:C1:50:E5:70:92:D4:E8:68:3A:A8:59
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gRB2QsUHbWhfwVDlcJLU6Gg6qFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.51.0/24
Signature Algorithm: sha256WithRSAEncryption
72:d2:d9:cd:4d:71:b9:1e:ff:00:c0:3d:26:85:d0:d8:67:11:
09:64:60:08:15:fc:16:fd:06:54:09:af:e8:31:14:ce:e8:14:
d7:f1:ac:ee:20:51:87:b0:07:ce:4d:dd:fd:0d:b1:15:23:e9:
6d:14:79:e6:59:52:84:b3:93:76:28:c1:5f:f1:2a:45:2f:af:
81:65:e8:15:01:ee:09:73:db:99:68:e0:f4:4b:46:48:45:83:
81:96:e2:a0:33:36:4d:9e:a5:27:73:8f:9c:0d:26:1d:2c:49:
4c:85:55:a3:15:df:0f:96:97:dc:7b:55:6d:29:1a:26:7a:96:
d7:76:d8:da:1a:c8:8a:c8:0a:4e:37:50:86:f0:16:15:33:55:
59:c2:02:d6:e5:44:fd:4f:00:83:80:bc:e8:98:24:88:4b:f8:
80:aa:5a:86:9a:05:cc:05:b2:cf:bf:6c:2c:72:79:03:d6:db:
3f:6b:c0:09:e7:0e:45:a2:90:8f:d5:03:05:8b:5d:0d:0e:99:
db:3c:03:a8:51:e1:b0:6a:73:0b:91:4f:b1:bb:05:95:b9:6d:
b2:79:ba:e6:38:3e:1e:b1:52:f8:c9:4c:9f:8a:a0:94:ec:4e:
cb:42:33:37:7a:73:8f:82:b6:1c:e4:5f:9f:6d:59:c4:c4:8d:
74:2c:b1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:29:08 2025 by rpki-client