Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/smYv-RQsKreoSPp2tNeWxYu1YCs.roa
File: smYv-RQsKreoSPp2tNeWxYu1YCs.roa (raw, json)
Hash identifier: i6fyte8tk0DqTL7/qhMFaqxHDXPIRsv+3OK3phrrKlo=
Subject key identifier: B2:66:2F:F9:14:2C:2A:B7:A8:48:FA:76:B4:D7:96:C5:8B:B5:60:2B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196F92F19CFF6F8637900FF898EBEEBC798
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/smYv-RQsKreoSPp2tNeWxYu1YCs.roa
Signing time: Thu 22 May 2025 18:08:55 +0000
ROA not before: Thu 22 May 2025 18:08:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395374
IP address blocks: 151.242.111.0/24 maxlen: 24
151.242.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jun 2025 04:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:2f:19:cf:f6:f8:63:79:00:ff:89:8e:be:eb:c7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 18:08:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2662ff9142c2ab7a848fa76b4d796c58bb5602b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:f6:d1:40:dd:7d:33:e3:57:29:9c:00:2f:
0a:d9:f3:c8:b1:ac:31:29:e2:63:fe:80:cd:17:c1:
e2:64:02:83:d0:37:61:f3:f6:49:dc:b7:e2:0d:85:
02:d8:9b:4f:59:63:8d:0b:a2:89:e9:3d:11:2a:c9:
fb:a7:43:e6:87:2b:26:6a:31:78:10:5a:66:2d:c7:
f3:b1:e7:e9:aa:c4:f4:c2:29:2e:45:58:e0:3c:03:
95:97:83:19:40:f0:fc:ef:93:1b:4f:8b:b7:99:0c:
82:5f:b2:8a:2d:be:b5:ac:c5:f0:a6:0d:98:21:9d:
7f:73:ea:e8:28:4c:f8:37:af:b6:0e:92:35:e8:3a:
50:af:8e:a9:d9:be:39:26:d6:07:ae:e2:4c:21:a5:
86:55:ef:ee:a0:90:6c:44:4b:b5:bb:60:3f:54:59:
53:7c:71:b3:bd:15:4d:bc:56:a6:40:aa:09:70:a1:
3f:66:17:a8:d7:a2:ca:01:44:55:59:f0:80:16:19:
57:a2:1b:f5:91:81:7a:62:62:aa:4f:ce:5a:3c:0c:
71:b8:dc:f8:2b:e2:57:94:64:2a:7e:5d:9b:4d:0c:
5d:6d:99:fb:99:12:02:7f:9b:03:e3:02:13:f1:34:
79:11:5f:13:6a:1b:72:ec:b9:5f:4a:23:d5:69:4f:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:66:2F:F9:14:2C:2A:B7:A8:48:FA:76:B4:D7:96:C5:8B:B5:60:2B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/smYv-RQsKreoSPp2tNeWxYu1YCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.111.0/24
151.242.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7a:f3:86:da:45:0c:30:b8:54:37:ab:8b:11:bf:67:18:e2:
66:1c:a7:56:b6:65:71:58:a7:e6:31:c3:9d:9e:61:28:97:03:
d6:13:ab:3b:25:d8:29:8a:ca:0e:94:16:19:13:1e:4d:eb:4e:
6e:6b:2e:4c:b1:9c:9c:b0:90:cb:5f:b0:0a:0d:9e:6e:13:76:
65:3e:24:35:d7:67:4c:fd:5a:20:6d:0e:cb:f7:e9:42:74:7b:
d3:54:ce:ee:21:da:99:fd:d2:49:5d:62:80:c0:77:d9:aa:eb:
06:7b:cc:cb:d3:bc:19:d8:ea:e0:16:8a:47:71:84:4e:ca:90:
eb:64:38:4a:46:99:af:82:2e:93:12:db:06:30:0a:e4:b1:eb:
f0:34:4b:ca:ee:e2:61:37:82:6e:25:0c:f3:14:bc:2d:be:48:
c6:59:05:37:fa:1d:2e:0a:19:72:d2:f9:09:8f:ac:f5:f5:83:
62:a1:f7:45:be:dc:bb:8b:4a:44:a1:42:37:d2:3d:7c:bc:67:
f2:c8:b4:03:49:5f:6c:f4:26:b6:2f:15:3e:37:ed:36:84:20:
da:74:ea:fb:98:71:89:d3:55:13:e1:d2:53:d5:34:fc:5d:6f:
7b:4f:26:9c:74:b5:65:4d:06:4a:e5:a0:dd:15:58:9d:7d:dd:
08:c4:27:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:54:15 2025 by rpki-client