Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AfmEUXm6a5ux6WX4fUvaQWxx_1k.roa
File: AfmEUXm6a5ux6WX4fUvaQWxx_1k.roa (raw, json)
Hash identifier: Rwicc8/uMxo5geXOx5n9dRI04rPkOpQ+O0M/9hQ0LwE=
Subject key identifier: 01:F9:84:51:79:BA:6B:9B:B1:E9:65:F8:7D:4B:DA:41:6C:71:FF:59
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197ED624257955C61D37FB65FEFF92190D9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AfmEUXm6a5ux6WX4fUvaQWxx_1k.roa
Signing time: Wed 09 Jul 2025 04:12:09 +0000
ROA not before: Wed 09 Jul 2025 04:12:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.240.45.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.160.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.57.0/24 maxlen: 24
151.242.136.0/23 maxlen: 23
151.242.144.0/23 maxlen: 23
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.132.0/24 maxlen: 24
151.244.133.0/24 maxlen: 24
151.244.182.0/23 maxlen: 24
151.244.191.0/24 maxlen: 24
151.244.193.0/24 maxlen: 24
151.244.198.0/24 maxlen: 24
151.244.201.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.70.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.201.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Jul 2025 17:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ed:62:42:57:95:5c:61:d3:7f:b6:5f:ef:f9:21:90:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 9 04:12:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01f9845179ba6b9bb1e965f87d4bda416c71ff59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:17:e1:58:0d:e1:3e:96:71:35:7c:d6:10:
6f:84:e6:de:d6:24:84:09:7a:c7:36:8d:08:5d:6c:
ab:9a:fa:72:97:bb:12:6f:2e:65:63:41:22:1f:47:
a7:ee:bc:c5:b5:8a:36:e7:8d:af:47:65:f0:e6:0c:
91:09:4d:82:01:ae:bb:9a:dd:f4:28:b0:95:7d:cb:
7e:c8:f3:25:17:7c:ed:3e:97:eb:d1:88:25:64:ab:
60:e2:84:da:12:0f:ba:e4:1c:56:2e:bd:33:79:dc:
23:4e:7c:4b:10:48:3e:6b:a5:27:e8:81:fc:2c:e2:
c6:04:48:e2:1f:be:2c:b9:d3:8a:7f:2f:51:fd:4d:
20:04:fe:96:db:a8:ed:5d:ef:99:73:87:a2:23:ff:
67:ca:56:d6:da:56:d2:08:71:1b:5e:bb:7a:f7:16:
61:1b:97:bb:8c:7b:14:76:80:01:7a:18:c7:7f:87:
66:13:b1:7f:cf:f8:5c:2b:e1:a0:d6:4a:cf:b8:ab:
f1:c5:2b:c9:b0:81:79:29:7e:74:b2:d8:af:39:25:
3f:41:09:91:de:63:05:22:aa:11:a3:c5:a3:71:99:
51:30:c6:67:0d:2d:13:a1:a6:9f:0d:80:62:02:6c:
f2:16:ef:d2:f8:37:0c:e5:a5:06:89:37:86:e2:b4:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F9:84:51:79:BA:6B:9B:B1:E9:65:F8:7D:4B:DA:41:6C:71:FF:59
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AfmEUXm6a5ux6WX4fUvaQWxx_1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.45.0/24
151.240.163.0/24
151.240.173.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.160.0/24
151.241.204.0/24
151.242.45.0/24
151.242.57.0/24
151.242.136.0/23
151.242.144.0/23
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.159.0/24
151.244.5.0/24
151.244.57.0/24
151.244.111.0/24
151.244.115.0/24
151.244.131.0-151.244.133.255
151.244.182.0/23
151.244.191.0/24
151.244.193.0/24
151.244.198.0/24
151.244.201.0/24
151.244.212.0/24
151.245.70.0/24
151.245.78.0/24
151.245.201.0/24
151.245.212.0/24
Signature Algorithm: sha256WithRSAEncryption
44:94:79:b0:c8:6d:eb:40:bc:43:d3:0d:95:a6:ef:b9:7e:75:
33:87:92:3f:64:55:ef:da:fa:17:1b:3b:f8:cf:8f:b8:d8:74:
72:8e:1c:c8:57:08:e6:f2:ea:01:08:bc:fc:dc:99:16:ef:31:
80:b5:0e:db:cd:f9:b0:90:50:27:09:b8:a5:a9:90:54:3b:32:
a3:f8:87:ea:8a:69:71:bd:25:2d:39:af:03:37:c7:81:ec:56:
09:a6:61:52:7b:6a:7c:b7:cf:ae:57:66:fb:8a:c9:ba:20:37:
d8:b6:79:b3:d0:0d:f7:a8:dc:17:bb:fa:39:85:03:a6:26:eb:
a4:7b:d6:86:e1:43:7d:af:4a:b6:c3:0a:cb:7a:83:82:18:1b:
08:f3:ca:5c:15:45:fe:71:82:c2:ef:80:ff:ae:34:45:f0:a8:
3e:88:68:26:9a:50:5c:ba:67:d8:e6:64:15:0d:e6:54:8d:bd:
a7:d4:d9:9c:c7:35:ef:90:03:b1:a8:e5:bd:cd:4b:c4:f3:62:
68:15:43:2a:c2:c7:16:16:0d:7f:fd:3b:63:df:72:17:0d:41:
a9:24:d6:ba:25:65:49:e0:a9:9d:27:de:66:c9:a6:6f:60:72:
3f:50:58:e7:57:e4:40:26:fd:57:33:4c:09:03:a7:d3:cb:dc:
47:9c:eb:5f
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgISAZftYkJXlVxh03+2X+/5IZDZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzA5MDQxMjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWY5ODQ1MTc5YmE2YjliYjFlOTY1Zjg3ZDRiZGE0MTZjNzFmZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQwX4VgN4T6WcTV81hBvhObe1iSE
CXrHNo0IXWyrmvpyl7sSby5lY0EiH0en7rzFtYo2542vR2Xw5gyRCU2CAa67mt30
KLCVfct+yPMlF3ztPpfr0YglZKtg4oTaEg+65BxWLr0zedwjTnxLEEg+a6Un6IH8
LOLGBEjiH74sudOKfy9R/U0gBP6W26jtXe+Zc4eiI/9nylbW2lbSCHEbXrt69xZh
G5e7jHsUdoABehjHf4dmE7F/z/hcK+Gg1krPuKvxxSvJsIF5KX50stivOSU/QQmR
3mMFIqoRo8WjcZlRMMZnDS0ToaafDYBiAmzyFu/S+DcM5aUGiTeG4rQVNwIDAQAB
o4IC1jCCAtIwHQYDVR0OBBYEFAH5hFF5umubsell+H1L2kFscf9ZMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQWZtRVVYbTZhNXV4NldYNGZVdmFRV3h4XzFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHrBggrBgEFBQcBBwEB/wSB2zCB2DCB1QQCAAEwgc4DBACX
8C0DBACX8KMDBACX8K0DBACX8TIDBACX8UADBACX8UMDBAGX8UYDBACX8UkDBACX
8aADBACX8cwDBACX8i0DBACX8jkDBAGX8ogDBAGX8pADBACX8p4DBACX8wIDBACX
82kDBACX858DBACX9AUDBACX9DkDBACX9G8DBACX9HMwDAMEAJf0gwMEAZf0hAME
AZf0tgMEAJf0vwMEAJf0wQMEAJf0xgMEAJf0yQMEAJf01AMEAJf1RgMEAJf1TgME
AJf1yQMEAJf11DANBgkqhkiG9w0BAQsFAAOCAQEARJR5sMht60C8Q9MNlabvuX51
M4eSP2RV79r6Fxs7+M+PuNh0co4cyFcI5vLqAQi8/NyZFu8xgLUO2835sJBQJwm4
pamQVDsyo/iH6oppcb0lLTmvAzfHgexWCaZhUntqfLfPrldm+4rJuiA32LZ5s9AN
96jcF7v6OYUDpibrpHvWhuFDfa9KtsMKy3qDghgbCPPKXBVF/nGCwu+A/640RfCo
PohoJppQXLpn2OZkFQ3mVI29p9TZnMc175ADsajlvc1LxPNiaBVDKsLHFhYNf/07
Y99yFw1BqSTWuiVlSeCpnSfeZsmmb2ByP1BY51fkQCb9VzNMCQOn08vcR5zrXw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:07:01 2025 by rpki-client