Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0itAMrcUgZXLdL8Rcb4QFoEEr_I.roa
File: 0itAMrcUgZXLdL8Rcb4QFoEEr_I.roa (raw, json)
Hash identifier: oFT05mMzJJ9X2tVt4/7ebVZmOx9LO09UYsgGUO8/868=
Subject key identifier: D2:2B:40:32:B7:14:81:95:CB:74:BF:11:71:BE:10:16:81:04:AF:F2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B4F769F9BC52D41D60EF7E6712B80D9F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0itAMrcUgZXLdL8Rcb4QFoEEr_I.roa
Signing time: Sat 28 Jun 2025 05:16:42 +0000
ROA not before: Sat 28 Jun 2025 05:16:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 151.242.41.0/24 maxlen: 24
151.242.58.0/24 maxlen: 24
151.242.200.0/24 maxlen: 24
151.242.201.0/24 maxlen: 24
151.245.232.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sat 28 Jun 2025 13:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b4:f7:69:f9:bc:52:d4:1d:60:ef:7e:67:12:b8:0d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 28 05:16:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d22b4032b7148195cb74bf1171be10168104aff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:e7:aa:83:b9:28:a0:2e:2a:28:a9:ac:dd:
b2:15:10:8b:8d:fe:be:8a:ef:8b:fa:ca:9c:c2:ad:
68:de:7b:0c:09:d1:3c:50:76:40:be:00:68:99:3a:
62:3e:21:66:5b:94:bf:fc:b4:9e:96:09:2c:b0:59:
39:09:1e:50:08:f2:f3:21:59:44:70:0c:51:f4:42:
ed:2c:83:10:46:0f:83:86:0d:30:4f:56:8b:4f:ee:
68:29:cb:78:d1:72:b8:62:75:76:60:a9:be:fb:d7:
1a:23:5e:a5:9d:f1:34:35:5f:4e:4b:7f:de:29:78:
88:54:da:ce:87:f8:52:ac:62:96:b6:3b:e5:50:ab:
fa:49:db:12:1a:4d:26:b6:9f:8e:c6:86:ab:f2:60:
ec:2a:96:d2:25:32:52:c1:ed:36:31:50:19:a2:c8:
a5:87:7b:44:65:d1:73:cd:a4:43:8c:63:39:78:31:
5f:e3:65:23:d7:a9:29:6a:99:ff:c6:2f:f3:72:de:
98:27:02:24:4d:ef:26:2f:f7:c1:d1:50:c8:6c:38:
7d:bf:17:4a:97:0e:63:24:2a:47:21:90:28:f0:81:
96:ef:3b:89:e6:09:5c:0c:e8:42:82:fb:7c:6a:91:
7a:9d:33:b3:b0:cf:2b:8b:cb:4d:8d:ff:ba:b6:72:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2B:40:32:B7:14:81:95:CB:74:BF:11:71:BE:10:16:81:04:AF:F2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0itAMrcUgZXLdL8Rcb4QFoEEr_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.41.0/24
151.242.58.0/24
151.242.200.0/23
151.245.232.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:d7:b8:09:70:e7:5d:0f:e3:4d:3f:ed:06:91:eb:ff:7e:57:
75:04:75:6b:18:95:a6:b5:a0:43:65:68:70:27:8f:c3:aa:a0:
61:d5:06:d6:7e:7f:a8:9c:8a:a8:5c:8f:f9:8b:cf:23:42:17:
e2:c7:75:26:05:8d:81:83:2d:69:3e:d7:15:16:4a:95:98:bd:
62:f6:de:f9:d9:34:80:4b:6a:59:f0:b2:b8:97:3a:f2:00:02:
d7:6b:e5:38:44:54:5e:f6:bc:38:de:f6:58:45:83:3f:f5:ab:
c2:98:39:75:0f:23:10:5f:da:32:d9:9c:ca:1e:01:84:e4:58:
e4:70:0c:4f:a9:17:48:04:c3:71:91:c5:1e:13:6c:2b:8a:2f:
e4:51:e4:cc:4a:92:f1:86:89:6c:8c:9d:f8:d6:b7:ed:41:dd:
16:48:3c:39:ef:66:03:d2:d4:81:8e:ae:7a:92:6b:51:9b:b1:
95:07:b2:12:69:1a:70:c1:96:77:74:05:11:14:41:f9:d8:a6:
3e:3d:bf:75:62:58:87:7b:6d:e9:b8:b1:07:25:f6:2d:77:ca:
71:4c:49:67:fa:15:95:94:ed:34:83:ec:c2:50:a8:45:a6:05:
24:43:08:d9:36:d3:c5:62:c5:94:c5:93:72:5d:49:2c:7e:46:
94:30:a5:cb
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZe092n5vFLUHWDvfmcSuA2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjI4MDUxNjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjJiNDAzMmI3MTQ4MTk1Y2I3NGJmMTE3MWJlMTAxNjgxMDRhZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotfnqoO5KKAuKiiprN2yFRCLjf6+
iu+L+sqcwq1o3nsMCdE8UHZAvgBomTpiPiFmW5S//LSelgkssFk5CR5QCPLzIVlE
cAxR9ELtLIMQRg+Dhg0wT1aLT+5oKct40XK4YnV2YKm++9caI16lnfE0NV9OS3/e
KXiIVNrOh/hSrGKWtjvlUKv6SdsSGk0mtp+Oxoar8mDsKpbSJTJSwe02MVAZosil
h3tEZdFzzaRDjGM5eDFf42Uj16kpapn/xi/zct6YJwIkTe8mL/fB0VDIbDh9vxdK
lw5jJCpHIZAo8IGW7zuJ5glcDOhCgvt8apF6nTOzsM8ri8tNjf+6tnLNRwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNIrQDK3FIGVy3S/EXG+EBaBBK/yMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMGl0QU1yY1VnWlhMZEw4UmNiNFFGb0VFcl9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/IpAwQA
l/I6AwQBl/LIAwQDl/XoMA0GCSqGSIb3DQEBCwUAA4IBAQAd17gJcOddD+NNP+0G
kev/fld1BHVrGJWmtaBDZWhwJ4/DqqBh1QbWfn+onIqoXI/5i88jQhfix3UmBY2B
gy1pPtcVFkqVmL1i9t752TSAS2pZ8LK4lzryAALXa+U4RFRe9rw43vZYRYM/9avC
mDl1DyMQX9oy2ZzKHgGE5FjkcAxPqRdIBMNxkcUeE2wrii/kUeTMSpLxholsjJ34
1rftQd0WSDw572YD0tSBjq56kmtRm7GVB7ISaRpwwZZ3dAURFEH52KY+Pb91YliH
e23puLEHJfYtd8pxTEln+hWVlO00g+zCUKhFpgUkQwjZNtPFYsWUxZNyXUksfkaU
MKXL
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:31:37 2025 by rpki-client