Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7BbJoc6ol8CRzdlP1ZpihWwj6dw.roa
File: 7BbJoc6ol8CRzdlP1ZpihWwj6dw.roa (raw, json)
Hash identifier: tnntB4i3EfXLRgOnxl1AeVouAnIReYr0X0WQ7wTCCIs=
Subject key identifier: EC:16:C9:A1:CE:A8:97:C0:91:CD:D9:4F:D5:9A:62:85:6C:23:E9:DC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B5578BD323FC2B7B23F42062465D49C8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7BbJoc6ol8CRzdlP1ZpihWwj6dw.roa
Signing time: Sat 28 Jun 2025 07:01:42 +0000
ROA not before: Sat 28 Jun 2025 07:01:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.15.0/24 maxlen: 24
151.242.23.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.75.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.80.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.41.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Jun 2025 13:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:57:8b:d3:23:fc:2b:7b:23:f4:20:62:46:5d:49:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 28 07:01:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec16c9a1cea897c091cdd94fd59a62856c23e9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:35:9b:61:4d:c3:ef:71:3d:cf:f5:44:0b:
15:72:3f:71:9d:6b:da:1b:03:a1:16:09:69:7b:56:
41:92:bb:f6:9b:e6:92:dc:fc:c5:9c:23:0c:bc:39:
42:48:e0:ad:18:9f:c9:0e:58:76:27:d9:a6:43:92:
5e:9d:87:cd:3d:24:d3:2a:df:03:30:28:7b:02:c8:
7d:64:1f:d2:f1:02:d3:ab:67:54:76:dd:9c:d7:81:
28:9a:3a:b4:0c:d0:4c:8e:f6:ad:4b:c4:ef:b2:f2:
81:be:5e:7d:09:e9:3c:49:6b:c4:f1:cd:e3:ad:d1:
75:e9:28:b4:54:d8:68:12:08:28:5d:b5:65:fa:3a:
95:80:2a:e6:fe:9a:52:a4:b6:97:14:4c:69:b4:9d:
9f:7e:c1:cb:7b:cb:9b:91:f5:e9:7b:83:77:f7:db:
bb:67:53:ac:ba:64:9c:a7:6d:c4:d8:57:73:2c:d2:
95:ce:d7:7f:6d:76:39:03:9d:3a:ad:67:49:66:48:
7b:79:a1:95:31:7c:24:8e:b2:77:64:94:ac:44:75:
ea:b8:11:ca:c1:2d:98:3a:19:e7:3b:b8:c0:0e:b5:
a4:28:eb:8d:6f:f7:93:0e:eb:e4:6c:4a:41:5e:da:
85:02:e5:77:8c:c9:57:c8:a0:0c:93:86:5d:5d:0d:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:16:C9:A1:CE:A8:97:C0:91:CD:D9:4F:D5:9A:62:85:6C:23:E9:DC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7BbJoc6ol8CRzdlP1ZpihWwj6dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.15.0/24
151.242.23.0/24
151.242.40.0/24
151.242.64.0/24
151.242.73.0-151.242.82.255
151.242.242.0/24
151.243.41.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:2c:57:b5:6a:04:db:ec:20:5d:74:03:58:74:ba:49:14:37:
e6:91:04:96:09:6a:16:df:0d:96:cc:2d:c1:4e:9c:5d:46:b2:
6a:f4:08:c0:b7:63:67:5d:e3:cc:92:d1:98:c5:96:e1:9a:82:
5d:f2:f7:43:f9:a3:88:3c:ac:a0:87:f4:5d:06:4d:9f:6d:97:
f4:af:de:5a:95:72:fb:eb:47:78:79:42:2d:b9:5f:96:15:3c:
41:04:67:1b:5c:0c:d5:8d:25:74:d5:c0:91:b4:73:22:74:fa:
b7:ce:17:05:a6:6c:1d:e0:1e:4f:b4:53:3f:4a:19:36:e7:35:
91:e5:3d:e5:f6:6b:81:df:7c:67:85:b9:5b:f2:03:17:44:00:
0c:8a:02:4a:32:01:3d:56:88:e5:3c:0a:85:af:9d:ab:2f:b7:
2e:63:90:fa:00:fd:d7:1b:06:56:89:cb:b8:0a:1c:2e:37:17:
04:69:c9:d5:67:cc:f5:73:ba:50:8f:01:ea:c6:4a:16:66:46:
c7:f9:9f:b0:5b:ec:31:69:5e:c0:28:4f:c1:b2:4e:ea:7c:cf:
c2:42:51:df:c6:d5:1b:44:1b:fd:8d:d4:0b:85:e5:a2:21:f9:
12:00:c3:60:c7:b7:94:d7:04:b9:5d:3d:9c:46:7b:2e:00:52:
bc:7b:8c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:35:54 2025 by rpki-client