Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7TB4rj1ywquwz3C183Ra6r70stk.roa
File: 7TB4rj1ywquwz3C183Ra6r70stk.roa (raw, json)
Hash identifier: czC3uo2XuuGL0NYsbOslOeOQbwH3viTl29bGD5h1YAY=
Subject key identifier: ED:30:78:AE:3D:72:C2:AB:B0:CF:70:B5:F3:74:5A:EA:BE:F4:B2:D9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01979BA04E31067AA473060CD1B736377AF5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7TB4rj1ywquwz3C183Ra6r70stk.roa
Signing time: Mon 23 Jun 2025 07:11:03 +0000
ROA not before: Mon 23 Jun 2025 07:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214432
IP address blocks: 151.240.73.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.244.75.0/24 maxlen: 24
151.244.87.0/24 maxlen: 24
151.244.103.0/24 maxlen: 24
151.244.108.0/24 maxlen: 24
151.244.109.0/24 maxlen: 24
151.245.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jun 2025 09:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9b:a0:4e:31:06:7a:a4:73:06:0c:d1:b7:36:37:7a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 23 07:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed3078ae3d72c2abb0cf70b5f3745aeabef4b2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8e:2e:c6:4b:4c:dc:7c:c8:ea:f8:db:1f:78:
93:f0:79:22:ab:cd:01:11:cb:3a:d6:34:8c:c4:f8:
89:d4:b9:66:65:16:a5:c0:56:ac:93:f2:a8:e9:89:
07:db:85:83:36:5e:37:85:4c:0d:57:80:1d:fa:34:
52:3b:48:a5:3d:e4:ce:b8:a4:7c:56:19:07:ad:69:
69:0b:9d:34:68:59:25:76:18:46:22:08:f2:a4:d9:
d8:30:63:3e:1d:b3:22:f8:9e:64:f5:a2:d9:de:eb:
7a:7e:c7:5a:43:7c:47:05:58:2b:d0:26:ae:19:65:
c1:01:d4:25:66:f9:65:a7:09:51:81:b3:ad:5a:62:
c6:b2:9c:f6:e3:89:3e:80:47:fc:91:3c:5e:d0:1c:
bb:c8:24:54:b5:68:eb:a4:20:6c:54:fa:b5:67:09:
65:62:83:60:71:41:22:f1:be:40:b1:2f:bd:08:09:
13:b1:b5:33:ae:3b:bb:8a:fc:1a:9a:18:e9:ca:85:
6c:25:3f:d0:99:9e:9b:fa:1a:32:20:cd:e4:ee:e9:
d7:4d:ec:61:36:61:e9:1d:1f:07:fc:c9:17:ab:70:
d3:bc:9e:4d:0b:49:b3:19:2c:2c:4d:7f:f9:1d:df:
89:42:1d:1a:7d:88:51:51:4e:bb:b3:14:fe:4b:26:
3f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:30:78:AE:3D:72:C2:AB:B0:CF:70:B5:F3:74:5A:EA:BE:F4:B2:D9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7TB4rj1ywquwz3C183Ra6r70stk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.73.0/24
151.240.78.0/24
151.244.75.0/24
151.244.87.0/24
151.244.103.0/24
151.244.108.0/23
151.245.102.0/24
Signature Algorithm: sha256WithRSAEncryption
94:48:3b:5b:1e:28:8c:55:a7:bd:a6:7a:24:6b:ee:5b:ab:b0:
1c:4c:10:06:d6:6c:dd:9a:8c:e3:26:0c:c9:58:31:75:7f:35:
64:9d:b6:80:72:8e:47:80:30:bc:ec:e9:a7:9e:a6:46:4d:21:
81:87:1d:0e:10:34:5c:1a:8c:54:ab:11:e1:06:22:12:e8:a9:
74:4a:0c:4e:e3:80:f9:5a:7a:42:9d:7c:94:c5:21:bf:73:f9:
00:54:b0:bd:1d:1b:00:26:48:f4:88:2b:a0:6b:a0:48:91:14:
b0:e9:3b:cc:0e:96:ee:26:22:45:40:6e:74:f4:bf:52:85:27:
bb:6a:59:3b:25:8f:07:1a:2d:82:4e:b8:50:a0:77:7f:04:87:
6c:4f:a3:b6:5f:c5:6b:f6:21:2a:6c:bd:d9:36:7c:ce:61:df:
77:d1:39:96:65:82:4e:47:f5:c9:08:d5:cd:e1:18:0f:ea:90:
f5:7c:48:fe:3e:41:1f:cb:0f:5b:4c:6e:f6:56:1a:66:46:15:
00:32:a4:5a:f0:45:e7:79:df:8a:98:75:5a:e0:0a:65:41:7f:
a6:ff:61:30:2e:89:02:72:2c:19:54:b9:5d:ea:9e:fb:71:19:
f6:d9:56:a5:24:c7:d0:7f:09:32:e1:d9:da:14:34:c7:6e:6a:
98:7c:00:51
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZeboE4xBnqkcwYM0bc2N3r1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjIzMDcxMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDMwNzhhZTNkNzJjMmFiYjBjZjcwYjVmMzc0NWFlYWJlZjRiMmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+I4uxktM3HzI6vjbH3iT8Hkiq80B
Ecs61jSMxPiJ1LlmZRalwFask/Ko6YkH24WDNl43hUwNV4Ad+jRSO0ilPeTOuKR8
VhkHrWlpC500aFkldhhGIgjypNnYMGM+HbMi+J5k9aLZ3ut6fsdaQ3xHBVgr0Cau
GWXBAdQlZvllpwlRgbOtWmLGspz244k+gEf8kTxe0By7yCRUtWjrpCBsVPq1Zwll
YoNgcUEi8b5AsS+9CAkTsbUzrju7ivwamhjpyoVsJT/QmZ6b+hoyIM3k7unXTexh
NmHpHR8H/MkXq3DTvJ5NC0mzGSwsTX/5Hd+JQh0afYhRUU67sxT+SyY/9QIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFO0weK49csKrsM9wtfN0Wuq+9LLZMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvN1RCNHJqMXl3cXV3ejNDMTgzUmE2cjcwc3RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAl/BJAwQA
l/BOAwQAl/RLAwQAl/RXAwQAl/RnAwQBl/RsAwQAl/VmMA0GCSqGSIb3DQEBCwUA
A4IBAQCUSDtbHiiMVae9pnoka+5bq7AcTBAG1mzdmozjJgzJWDF1fzVknbaAco5H
gDC87OmnnqZGTSGBhx0OEDRcGoxUqxHhBiIS6Kl0SgxO44D5WnpCnXyUxSG/c/kA
VLC9HRsAJkj0iCuga6BIkRSw6TvMDpbuJiJFQG509L9ShSe7alk7JY8HGi2CTrhQ
oHd/BIdsT6O2X8Vr9iEqbL3ZNnzOYd930TmWZYJOR/XJCNXN4RgP6pD1fEj+PkEf
yw9bTG72VhpmRhUAMqRa8EXned+KmHVa4AplQX+m/2EwLokCciwZVLld6p77cRn2
2ValJMfQfwky4dnaFDTHbmqYfABR
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:35:36 2025 by rpki-client