Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/14AL15uQVbGYjT606Ft6p2UMlKs.roa
File: 14AL15uQVbGYjT606Ft6p2UMlKs.roa (raw, json)
Hash identifier: WlZWqm+elr7vHM7zp5t+sGMYzSSXP2QxUL9LFMs55Z0=
Subject key identifier: D7:80:0B:D7:9B:90:55:B1:98:8D:3E:B4:E8:5B:7A:A7:65:0C:94:AB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197FA8992705D326959B8225F2BAD1DB81C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/14AL15uQVbGYjT606Ft6p2UMlKs.roa
Signing time: Fri 11 Jul 2025 17:30:09 +0000
ROA not before: Fri 11 Jul 2025 17:30:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.240.45.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.160.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.57.0/24 maxlen: 24
151.242.136.0/23 maxlen: 23
151.242.144.0/23 maxlen: 23
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.132.0/24 maxlen: 24
151.244.133.0/24 maxlen: 24
151.244.191.0/24 maxlen: 24
151.244.193.0/24 maxlen: 24
151.244.198.0/24 maxlen: 24
151.244.201.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.70.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.201.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 05:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:89:92:70:5d:32:69:59:b8:22:5f:2b:ad:1d:b8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 11 17:30:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7800bd79b9055b1988d3eb4e85b7aa7650c94ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:db:2d:27:d0:95:0c:44:82:4c:8c:10:39:74:
df:8a:2c:5c:04:4a:7e:72:6e:a9:6d:3f:84:72:71:
64:47:0e:cb:1a:55:e5:91:0d:3c:b8:99:f1:5a:de:
c3:75:60:f9:4a:77:63:e0:29:1a:55:af:ec:3b:75:
6b:60:9f:94:5b:5a:38:1e:e1:f5:44:23:61:61:cf:
68:f2:93:a7:f9:30:39:86:35:8b:ca:a4:7d:18:05:
ba:81:8b:3b:c3:23:bb:60:a4:97:39:75:87:6a:dc:
a4:cb:f6:4c:06:c8:b0:38:da:30:5c:95:b2:bd:3a:
58:12:c6:18:9c:fb:6a:cf:be:b0:c8:b4:74:34:6c:
04:b9:64:38:75:30:f8:85:db:1b:a8:ab:be:23:27:
a9:7e:5c:13:31:3f:1d:13:49:19:1a:a2:45:f6:88:
91:7f:5f:22:89:e9:7c:07:f4:b5:63:9a:9a:e2:a7:
20:7f:ec:8e:94:f9:ce:a4:7a:22:64:c8:ee:c6:fd:
8a:6c:d2:f5:a3:c5:45:4a:08:bf:2b:1d:ba:9c:8a:
84:03:56:9a:8f:8c:9c:1c:ab:93:0c:43:cd:89:c5:
ff:32:f7:c6:ab:33:cd:5b:2f:7b:62:66:4d:81:e1:
a1:45:a1:95:91:45:97:20:bc:f8:bd:4c:b7:69:95:
62:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:80:0B:D7:9B:90:55:B1:98:8D:3E:B4:E8:5B:7A:A7:65:0C:94:AB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/14AL15uQVbGYjT606Ft6p2UMlKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.45.0/24
151.240.163.0/24
151.240.173.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.160.0/24
151.241.204.0/24
151.242.45.0/24
151.242.57.0/24
151.242.136.0/23
151.242.144.0/23
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.159.0/24
151.244.5.0/24
151.244.57.0/24
151.244.111.0/24
151.244.115.0/24
151.244.131.0-151.244.133.255
151.244.191.0/24
151.244.193.0/24
151.244.198.0/24
151.244.201.0/24
151.244.212.0/24
151.245.70.0/24
151.245.78.0/24
151.245.201.0/24
151.245.212.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e9:12:a8:0b:c8:29:fa:a8:3a:68:a5:5b:4e:67:92:69:cf:
76:e5:ea:f5:37:57:2b:ec:78:b4:93:15:c6:71:3b:3f:c2:1a:
28:7e:f7:36:6b:f4:12:3c:55:5d:6e:91:e5:a1:fa:e6:12:8e:
cd:9f:8f:4a:45:e1:5b:9e:e1:1e:29:fa:fd:b2:de:6e:66:1f:
eb:bf:43:11:c6:bc:e1:74:3e:82:77:f3:d6:02:82:45:2e:0e:
57:5b:42:ad:66:b4:f9:d7:02:48:37:3a:6d:0a:1b:ea:fc:5d:
6c:4f:d8:d7:8c:d4:52:22:87:74:bf:77:43:bd:a3:1b:0e:a7:
c3:02:bc:76:f3:76:87:76:19:ec:94:e8:bb:e2:7b:a6:2e:a2:
1f:55:34:47:b2:2b:18:90:08:81:31:c1:7e:af:c5:e1:11:05:
ca:9b:e7:45:5b:e9:f2:df:98:1d:e5:96:be:d8:52:9b:26:1c:
1a:a7:70:70:ef:c4:89:c6:3c:0f:e7:64:25:34:10:b4:df:f3:
a5:3a:37:e6:96:cc:07:1b:25:39:88:13:30:4b:3e:0c:dd:51:
ba:3f:7e:e4:fb:aa:59:03:86:47:03:81:ee:46:aa:02:7b:05:
5c:c1:38:e2:b2:e5:3e:38:d9:cb:4e:d8:80:f1:c3:31:bd:56:
78:e2:2c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:07:56 2025 by rpki-client