Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5xGz3vvJtnUHsS5nTGCzJ_O5n3s.roa
File: 5xGz3vvJtnUHsS5nTGCzJ_O5n3s.roa (raw, json)
Hash identifier: diWzOXOyHC5+YMHqkSlfxCt/7frIDxX0Zpg4jEA00xs=
Subject key identifier: E7:11:B3:DE:FB:C9:B6:75:07:B1:2E:67:4C:60:B3:27:F3:B9:9F:7B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B1C05B75AD80E3F790D002E964DE3390
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5xGz3vvJtnUHsS5nTGCzJ_O5n3s.roa
Signing time: Fri 27 Jun 2025 14:17:42 +0000
ROA not before: Fri 27 Jun 2025 14:17:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.241.132.0/22 maxlen: 22
151.241.232.0/21 maxlen: 24
151.242.56.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.16.0/21 maxlen: 21
151.245.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 28 Jun 2025 04:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:c0:5b:75:ad:80:e3:f7:90:d0:02:e9:64:de:33:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 27 14:17:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e711b3defbc9b67507b12e674c60b327f3b99f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dc:b8:f1:97:a8:9e:fb:fb:63:67:0f:7b:73:
72:99:1e:ab:e0:7a:3e:95:46:71:8e:77:4c:36:45:
c9:c2:ac:d6:bb:25:6a:f5:d6:8c:56:17:5f:eb:44:
4e:78:bc:a4:40:5a:1d:14:b7:44:d6:fe:ae:3e:8d:
b5:27:dc:07:9d:f3:5d:44:0f:4c:41:a9:87:43:ea:
60:5d:4f:19:38:d4:d2:7c:74:2e:25:6f:1f:f7:3e:
78:3f:ce:d2:fe:49:4f:51:aa:cd:e4:58:07:02:cb:
e3:68:de:9b:74:ec:bb:bc:e8:6b:5d:f9:e7:fa:ff:
1c:ee:26:36:1e:6e:ad:4f:bd:31:f3:bf:88:b5:6f:
99:34:5b:4e:22:43:e2:45:1c:c9:6f:e5:02:40:09:
81:0a:5b:91:51:f6:21:74:93:79:23:a4:1a:af:d9:
60:c1:2d:37:84:c0:6f:aa:1c:c2:61:29:54:9b:c0:
92:28:36:6d:c4:c0:83:6d:3c:76:ff:f6:7f:5e:c2:
8e:89:a2:e7:2a:a2:f2:52:3b:59:83:b0:97:3a:8e:
ce:79:de:a9:90:75:09:b7:91:93:6b:16:74:24:07:
53:ad:e8:cd:75:ec:97:4f:c9:c9:9d:79:70:1e:3c:
43:51:f5:20:4c:43:be:e1:ff:db:81:64:61:de:5e:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:11:B3:DE:FB:C9:B6:75:07:B1:2E:67:4C:60:B3:27:F3:B9:9F:7B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5xGz3vvJtnUHsS5nTGCzJ_O5n3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.241.132.0/22
151.241.232.0/21
151.242.56.0/24
151.243.8.0/23
151.243.204.0/23
151.244.16.0/21
151.245.56.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:f3:bd:fe:4e:54:76:f4:9f:d5:63:de:cd:32:fb:c8:23:c5:
63:12:2e:9e:a0:56:3a:23:35:ca:3f:33:50:bb:31:95:8e:d0:
16:e0:97:46:95:f0:34:50:47:70:90:cf:4a:55:dc:59:2b:a8:
9f:0c:59:30:0b:1e:7e:fd:cc:8d:48:a3:0f:1f:ac:70:d6:b1:
26:ee:e5:4c:d8:e1:46:0a:81:72:8e:6c:cb:4d:db:32:5c:41:
ef:64:0a:29:52:af:c2:68:29:82:50:be:fd:34:33:46:4e:04:
e3:39:56:aa:3b:94:70:45:38:fa:59:f7:23:9c:6f:d0:d0:e9:
20:aa:0e:0a:72:d5:3b:3f:65:36:f0:e6:3a:70:a3:08:b6:dc:
5d:98:07:5d:15:47:9b:d9:2d:11:44:a5:23:6f:b5:8f:16:a4:
d2:f4:a5:5c:3e:28:5f:51:19:f9:19:7b:ab:ef:15:9f:f6:b1:
54:e0:a5:44:84:9f:ae:d6:41:39:ab:61:9a:6b:e2:f3:b6:10:
af:f0:31:f6:dc:bc:ea:e9:a2:d3:c1:8d:fa:b0:8b:c0:8a:ec:
5f:86:88:46:f9:19:b9:04:c7:c8:05:f8:83:46:fd:2f:11:ed:
a4:79:fb:43:68:fc:45:77:dd:38:c2:d3:8d:4b:54:9c:51:04:
64:89:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:11:58 2025 by rpki-client