Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5LgD8iD_qIxzPAMFRHXxK7wexDs.roa
File: 5LgD8iD_qIxzPAMFRHXxK7wexDs.roa (raw, json)
Hash identifier: mh0ubbbKQGhIuTCM3oS1BvE9BuaujjPGYR1xf58YekI=
Subject key identifier: E4:B8:03:F2:20:FF:A8:8C:73:3C:03:05:44:75:F1:2B:BC:1E:C4:3B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01977E31BC3F9653590EC5514438DC45CD06
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5LgD8iD_qIxzPAMFRHXxK7wexDs.roa
Signing time: Tue 17 Jun 2025 14:01:17 +0000
ROA not before: Tue 17 Jun 2025 14:01:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 151.240.73.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.244.75.0/24 maxlen: 24
151.244.87.0/24 maxlen: 24
151.244.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jun 2025 07:11:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:31:bc:3f:96:53:59:0e:c5:51:44:38:dc:45:cd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 17 14:01:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4b803f220ffa88c733c03054475f12bbc1ec43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:cb:41:31:ae:b8:d7:57:a8:b7:5b:c9:70:
46:ca:c1:82:81:df:0f:d2:a2:a3:72:79:7b:92:70:
4a:80:0d:af:de:8c:e4:7a:ce:97:0d:56:92:e4:69:
b5:00:37:e0:b6:29:b0:1b:98:7b:34:fb:db:34:e4:
69:4a:18:04:3c:65:57:32:3b:51:e0:93:5f:6d:cf:
8f:7f:b0:e8:6c:f6:2a:f6:89:7d:f8:fd:2e:1e:b7:
1d:de:0d:73:3f:3c:1d:3f:ce:b5:63:77:be:fd:be:
4c:6f:81:32:92:e4:e5:68:1b:41:e5:ac:3f:0a:d7:
be:ed:3e:7e:ec:5f:3b:03:2e:82:73:8d:cf:39:8f:
90:7e:70:77:e3:44:72:16:45:45:1f:1f:18:e2:74:
42:1e:9b:fb:91:35:eb:a4:8b:48:57:8e:62:0a:8e:
d5:7c:6d:74:fe:2d:2b:2b:e2:db:e9:37:05:87:23:
5f:fc:47:fe:8e:bc:1d:4a:5b:79:6a:96:8d:cf:46:
3d:1c:e3:d4:a3:22:b4:82:5c:8c:43:cc:cf:16:90:
c1:73:17:9d:d8:63:17:d0:9e:94:cb:8c:ee:ea:f5:
57:7a:9c:a9:fe:ba:73:db:b5:4d:3c:63:8d:cc:2c:
f7:4d:5f:5d:c1:6d:09:e1:50:a6:bb:7f:e9:47:40:
21:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B8:03:F2:20:FF:A8:8C:73:3C:03:05:44:75:F1:2B:BC:1E:C4:3B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5LgD8iD_qIxzPAMFRHXxK7wexDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.73.0/24
151.240.78.0/24
151.244.75.0/24
151.244.87.0/24
151.244.109.0/24
Signature Algorithm: sha256WithRSAEncryption
19:69:a7:39:c3:54:47:ce:0c:82:9c:c2:bb:e6:67:45:ac:e5:
2b:7f:fc:b2:15:9d:35:6c:cd:bc:e1:ae:48:ab:8c:a0:89:1e:
64:ef:6f:28:f5:e2:e5:13:00:eb:42:38:b1:68:bd:8b:3c:d1:
3f:a3:6c:1b:df:64:62:8f:04:9a:79:af:d5:c3:46:b0:90:aa:
72:36:e9:f2:62:fd:f7:62:3a:0a:50:63:78:92:30:f7:c7:f9:
c4:da:58:b2:ab:c5:9f:5b:40:d0:b3:76:78:0c:16:7f:e8:ac:
23:ae:4e:2d:01:42:36:cf:83:59:50:ff:6f:a7:04:ba:52:30:
d2:77:f6:43:b3:34:ca:dd:ca:9e:6a:bb:d1:09:15:46:f1:0a:
6c:8d:96:19:23:a7:8a:d7:56:79:b4:f9:0d:be:59:d3:4c:92:
94:a2:99:e4:1a:45:61:e3:d6:82:dc:09:0d:01:e9:e1:8a:2f:
51:d0:39:ce:b7:2f:a3:b9:da:bc:41:38:5e:0e:16:14:b2:6a:
24:da:be:24:3f:76:6c:36:7d:76:bd:c5:af:d8:a9:de:7c:b6:
3f:55:80:17:8a:d0:d5:b9:ac:75:ae:09:41:e7:da:78:b6:ee:
9a:76:e6:ee:e8:5e:e0:81:44:cb:3d:ca:ef:41:0c:c8:db:15:
c1:3c:82:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:35:01 2025 by rpki-client