Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2wCBH0j0w8O4ODbEVIhmwwGQeqI.roa
File: 2wCBH0j0w8O4ODbEVIhmwwGQeqI.roa (raw, json)
Hash identifier: Ji2xwbfDaFNnvxlGy2Krn3xZgMUEB4Y5lDC3BH6qRZs=
Subject key identifier: DB:00:81:1F:48:F4:C3:C3:B8:38:36:C4:54:88:66:C3:01:90:7A:A2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019786E99457B40BA2A518FD6C8F428BFE84
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2wCBH0j0w8O4ODbEVIhmwwGQeqI.roa
Signing time: Thu 19 Jun 2025 06:39:04 +0000
ROA not before: Thu 19 Jun 2025 06:39:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.15.0/24 maxlen: 24
151.242.23.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.75.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.80.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.38.0/24 maxlen: 24
151.243.41.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jun 2025 12:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:e9:94:57:b4:0b:a2:a5:18:fd:6c:8f:42:8b:fe:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 19 06:39:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db00811f48f4c3c3b83836c4548866c301907aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:05:cd:28:22:b3:c4:a0:47:92:79:bd:97:f2:
52:15:a6:6f:89:b7:1a:57:e9:58:f3:33:11:57:d4:
82:7a:97:45:a4:ad:6d:3d:90:17:e7:14:37:5a:62:
02:e9:26:f8:36:42:cd:17:d4:73:b1:58:fb:b8:16:
85:fa:22:98:05:44:64:ab:a4:67:b9:75:96:b7:b3:
16:07:58:af:9f:31:f9:33:f5:b4:e4:ae:03:bd:31:
24:31:7e:6d:f8:c8:f7:dd:6f:1a:58:43:b5:bd:36:
b3:f7:46:6f:cc:0c:5c:6d:1e:c9:5c:9e:73:62:a4:
35:09:a0:88:0f:7f:1d:3d:ab:1c:23:9b:8f:16:80:
de:ab:d5:10:b4:80:65:07:f3:3b:2e:59:33:11:f1:
39:39:0b:11:63:47:59:dc:16:c6:82:50:9e:d3:29:
0c:e7:8d:df:6c:d2:7e:9e:ab:c6:a6:e0:16:8c:08:
93:20:03:35:76:e3:80:13:dc:8a:56:3d:15:78:90:
11:d3:74:e1:0a:5d:b3:c0:55:69:9f:9a:1c:f8:4e:
bc:17:be:17:0c:61:b4:21:8d:36:03:56:02:e8:a6:
70:84:36:00:b8:5a:06:f2:a6:3e:9f:5b:7b:90:91:
4e:6a:b1:40:73:7f:e0:78:e8:e3:3c:4c:66:13:33:
f6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:00:81:1F:48:F4:C3:C3:B8:38:36:C4:54:88:66:C3:01:90:7A:A2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2wCBH0j0w8O4ODbEVIhmwwGQeqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.15.0/24
151.242.23.0/24
151.242.40.0/24
151.242.64.0/24
151.242.73.0-151.242.82.255
151.242.242.0/24
151.243.35.0/24
151.243.38.0/24
151.243.41.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d2:a0:1b:91:db:6f:93:bc:0e:89:c5:b0:ef:ef:66:99:86:
42:15:bb:e3:b3:9e:9c:5d:7a:d4:ac:a7:f6:64:91:79:e1:66:
c5:87:ee:a8:2b:70:bd:b3:9e:4e:a1:ff:ff:1e:b6:48:50:b9:
ca:43:1c:86:01:ce:a7:34:98:68:f5:d2:87:01:af:0b:96:e7:
54:c7:33:1b:47:4a:f3:6b:40:92:90:a5:6f:ce:e2:6d:b3:6c:
e0:27:b2:46:e7:3d:d9:b6:f2:63:ef:b0:40:56:ff:41:db:2d:
f8:c9:79:eb:75:ee:81:9e:96:b4:04:c3:1f:24:e8:75:af:bb:
37:16:9a:fc:8c:7b:e7:93:72:f8:ea:dc:e4:54:e8:66:82:24:
98:50:ff:58:4e:54:8d:31:e3:eb:32:69:88:77:74:20:fc:f5:
f0:a1:46:b9:b5:65:b2:6b:cd:55:87:21:f1:29:c7:68:f4:72:
9e:bc:01:7b:b1:82:38:71:76:ff:ab:25:71:1f:1c:1a:2e:24:
70:9a:6e:13:ec:6d:51:af:33:86:42:45:f5:f3:20:2c:cf:4d:
f8:cf:fb:04:c7:a1:52:45:2a:87:fd:41:7d:d2:ea:c5:3a:08:
34:99:c0:13:de:6c:21:88:2f:30:1a:0c:0e:6f:4f:82:99:bf:
c0:30:dc:c1
-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgISAZeG6ZRXtAuipRj9bI9Ci/6EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjE5MDYzOTA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjAwODExZjQ4ZjRjM2MzYjgzODM2YzQ1NDg4NjZjMzAxOTA3YWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QXNKCKzxKBHknm9l/JSFaZvibca
V+lY8zMRV9SCepdFpK1tPZAX5xQ3WmIC6Sb4NkLNF9RzsVj7uBaF+iKYBURkq6Rn
uXWWt7MWB1ivnzH5M/W05K4DvTEkMX5t+Mj33W8aWEO1vTaz90ZvzAxcbR7JXJ5z
YqQ1CaCID38dPascI5uPFoDeq9UQtIBlB/M7LlkzEfE5OQsRY0dZ3BbGglCe0ykM
543fbNJ+nqvGpuAWjAiTIAM1duOAE9yKVj0VeJAR03ThCl2zwFVpn5oc+E68F74X
DGG0IY02A1YC6KZwhDYAuFoG8qY+n1t7kJFOarFAc3/geOjjPExmEzP2AQIDAQAB
o4ICdDCCAnAwHQYDVR0OBBYEFNsAgR9I9MPDuDg2xFSIZsMBkHqiMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMndDQkgwajB3OE80T0RiRVZJaG13d0dRZXFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGJBggrBgEFBQcBBwEB/wR6MHgwdgQCAAEwcAMEApfxgAME
AJfyDwMEAJfyFwMEAJfyKAMEAJfyQDAMAwQAl/JJAwQAl/JSAwQAl/LyAwQAl/Mj
AwQAl/MmAwQAl/MpAwQAl/NzAwQAl/N4AwQAl/PWMAwDBAKX9AQDBACX9AYDBACX
9DgDBACX9DowDQYJKoZIhvcNAQELBQADggEBAFPSoBuR22+TvA6JxbDv72aZhkIV
u+OznpxdetSsp/ZkkXnhZsWH7qgrcL2znk6h//8etkhQucpDHIYBzqc0mGj10ocB
rwuW51THMxtHSvNrQJKQpW/O4m2zbOAnskbnPdm28mPvsEBW/0HbLfjJeet17oGe
lrQEwx8k6HWvuzcWmvyMe+eTcvjq3ORU6GaCJJhQ/1hOVI0x4+syaYh3dCD89fCh
Rrm1ZbJrzVWHIfEpx2j0cp68AXuxgjhxdv+rJXEfHBouJHCabhPsbVGvM4ZCRfXz
ICzPTfjP+wTHoVJFKof9QX3S6sU6CDSZwBPebCGILzAaDA5vT4KZv8Aw3ME=
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:14:33 2025 by rpki-client