Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zUmy-B7pZQcgLM-Ut1krs1vTbuE.roa
File: zUmy-B7pZQcgLM-Ut1krs1vTbuE.roa (raw, json)
Hash identifier: Z6jp9vD2x7yEyH/A7urp4dZnAfZajF3O9jIyjZh8jSw=
Subject key identifier: CD:49:B2:F8:1E:E9:65:07:20:2C:CF:94:B7:59:2B:B3:5B:D3:6E:E1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019748DB90303692F872D898206AE481CD7A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zUmy-B7pZQcgLM-Ut1krs1vTbuE.roa
Signing time: Sat 07 Jun 2025 05:27:18 +0000
ROA not before: Sat 07 Jun 2025 05:27:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 151.242.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jun 2025 13:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:db:90:30:36:92:f8:72:d8:98:20:6a:e4:81:cd:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 7 05:27:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd49b2f81ee96507202ccf94b7592bb35bd36ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:7f:9e:8f:a6:55:2a:08:f6:98:ce:18:35:
da:25:7b:5d:f0:84:e6:b0:8f:89:c8:de:44:0b:19:
74:32:8b:a7:4e:f5:fe:4a:b0:38:82:0a:b2:3d:57:
cc:27:61:54:eb:57:10:e3:aa:a2:01:74:e5:df:f6:
62:e1:eb:14:54:f9:0e:8a:d7:6b:de:50:7b:a2:c2:
dc:08:90:40:98:dc:b9:b3:32:5a:85:b0:5e:94:fa:
a4:d6:98:7b:77:b1:16:8c:15:13:0e:2e:f3:f8:7c:
c3:fe:93:50:24:48:38:94:b8:93:f2:34:12:de:68:
d6:2c:72:ff:61:71:45:2c:af:84:6d:e8:9b:88:70:
a1:9d:c6:3a:db:4d:5d:c2:ab:50:4f:05:2e:7f:81:
ce:24:9e:df:77:54:02:ff:41:97:09:ef:38:09:24:
9c:bd:c0:b7:d6:bd:03:db:3f:4b:e8:36:98:0b:b6:
04:93:96:7e:30:2c:78:8d:af:dd:db:d0:41:fe:a1:
4f:2b:f5:13:b9:c9:47:ba:08:f9:c2:ad:b9:c6:8e:
b4:ec:bf:14:9e:66:d2:2e:25:85:45:bd:22:b9:09:
24:a4:4e:2d:b7:c6:cc:a2:28:f5:ea:f2:61:0e:9a:
04:f5:58:bb:94:34:4e:d7:5d:d2:b1:b2:63:10:6c:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:B2:F8:1E:E9:65:07:20:2C:CF:94:B7:59:2B:B3:5B:D3:6E:E1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zUmy-B7pZQcgLM-Ut1krs1vTbuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.226.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:cf:23:98:65:7a:1f:68:e6:a2:32:c4:2b:82:22:37:6c:01:
8d:c6:dc:ef:9c:7a:51:49:f7:40:4f:2f:03:52:6e:c0:e3:95:
28:f4:13:56:fc:f4:fb:fd:41:25:52:47:f0:df:25:04:43:3a:
4a:8e:e3:4b:2e:be:f2:d6:e4:2e:ce:13:d1:0a:72:04:23:05:
72:4d:60:98:3b:27:f3:95:c2:80:24:04:ff:56:f6:74:c1:d2:
49:45:5a:90:e0:a6:34:b2:f8:30:34:0e:88:97:9a:fd:19:d7:
ea:d9:71:df:57:23:82:a7:81:19:7d:a7:a0:92:61:a3:5a:4d:
43:b5:8f:94:3e:19:39:3e:65:a3:8a:84:65:a6:e7:27:e1:cd:
02:05:7f:42:32:30:01:b2:af:6f:d1:49:18:70:4c:1b:62:85:
9e:4b:ea:9c:ea:76:3e:1b:0a:d0:bd:61:96:83:d1:e1:86:08:
05:bc:fb:cd:5f:c7:40:a6:0b:f6:54:18:8d:7b:fb:0a:4d:c4:
30:ca:2b:24:f7:3d:5c:f7:73:26:3c:c7:1f:33:59:97:ea:11:
76:14:ad:09:77:3b:e8:4d:d5:1e:57:2e:e1:6f:5c:6a:b5:10:
ae:34:99:96:9c:a3:1c:7a:cc:8e:7e:30:a4:bd:52:a7:81:7c:
e8:76:84:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:46:14 2025 by rpki-client