Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AuLPYrg7MgzrKLiWT8uNiBn0xA8.roa
File: AuLPYrg7MgzrKLiWT8uNiBn0xA8.roa (raw, json)
Hash identifier: Hj5B+VEjSDIajHAAn5sfdvC/7rL92V2VpYZCzyNaO/Y=
Subject key identifier: 02:E2:CF:62:B8:3B:32:0C:EB:28:B8:96:4F:CB:8D:88:19:F4:C4:0F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01979CC58752750D9DE8D16C6289C5D9D880
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AuLPYrg7MgzrKLiWT8uNiBn0xA8.roa
Signing time: Mon 23 Jun 2025 12:31:20 +0000
ROA not before: Mon 23 Jun 2025 12:31:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.15.0/24 maxlen: 24
151.242.23.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.75.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.80.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.38.0/24 maxlen: 24
151.243.41.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jun 2025 09:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:c5:87:52:75:0d:9d:e8:d1:6c:62:89:c5:d9:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 23 12:31:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02e2cf62b83b320ceb28b8964fcb8d8819f4c40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:4f:ed:bd:92:d1:34:34:cf:81:98:40:ea:
c5:4c:ca:d3:68:e7:e1:e0:f8:93:10:26:4b:35:61:
ab:a2:39:cd:ac:12:35:a9:9e:86:68:ea:2b:70:74:
99:47:ae:8c:9b:e2:c4:a8:de:2c:94:8f:1c:a0:f3:
7b:e3:e9:02:9e:df:91:8a:76:d1:9f:51:36:ef:cc:
b1:e9:cb:9c:76:98:2b:cb:57:a3:ad:a3:06:a0:11:
74:a4:3b:be:f8:bb:ab:d0:81:4b:3e:cf:51:f9:ef:
88:0b:f0:db:fb:4f:1e:87:0d:f4:36:df:9d:5e:6a:
7e:12:4d:cd:32:c6:ac:8e:ec:ff:b9:0a:2c:3e:b5:
a6:92:0f:35:36:e5:a9:41:08:8e:d3:40:98:26:2b:
5d:c7:ed:ce:25:01:b7:24:22:a7:27:08:17:bd:8e:
8c:f5:c5:e4:e1:4c:21:0d:41:bc:70:aa:af:6b:2b:
ec:14:5e:e6:44:ce:47:6f:f8:f2:e3:02:67:6a:04:
2e:2f:3f:bf:c8:f3:8e:6f:df:0a:55:ba:9a:50:33:
86:98:c1:e5:4e:b3:d6:4c:e6:19:c0:48:8b:2f:90:
60:78:2c:bb:dc:12:83:df:c1:e1:3a:c6:ed:01:6f:
51:b6:6f:be:74:ea:ed:d3:c5:83:78:f8:41:9a:72:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E2:CF:62:B8:3B:32:0C:EB:28:B8:96:4F:CB:8D:88:19:F4:C4:0F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AuLPYrg7MgzrKLiWT8uNiBn0xA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.15.0/24
151.242.23.0/24
151.242.40.0/24
151.242.64.0/24
151.242.73.0-151.242.82.255
151.242.242.0/24
151.243.35.0/24
151.243.38.0/24
151.243.41.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
85:4a:97:a4:1c:2f:2c:16:a6:00:5a:2a:f4:1a:17:d0:d8:9d:
2f:3d:cc:db:2e:6d:e2:c2:95:70:38:7b:b7:c6:74:50:9f:1c:
90:bd:c1:e6:00:52:6c:49:2d:22:a2:1c:7c:d9:1b:c7:5e:8f:
bd:84:8d:ae:4a:23:bb:85:67:c4:3b:b6:55:1a:c8:1b:6a:b1:
5d:e8:0c:3c:5d:36:15:cf:c7:75:df:a5:25:80:48:92:92:5f:
3c:db:b9:94:c3:48:fe:4c:b6:33:f2:96:10:51:f0:45:91:04:
89:e1:1a:43:26:74:f0:73:ad:bf:c6:69:e0:a7:f2:6e:79:f7:
05:13:53:ee:93:03:c1:0f:73:57:58:ad:13:b5:9f:f4:24:a3:
e4:ee:70:25:f4:2d:69:ee:4a:30:f8:ec:c0:a3:20:02:21:50:
fe:f0:3d:73:cf:4d:96:1d:b8:44:0f:2b:e5:76:a8:38:71:4c:
11:41:26:73:b6:f0:00:85:8d:cd:fe:72:cd:79:99:50:b9:7d:
5e:82:28:6d:1e:e0:34:ba:83:8b:33:f3:21:66:f7:27:ef:c4:
22:b0:db:9c:43:a8:23:d9:99:20:ea:e7:a7:24:ee:d6:58:87:
45:99:f1:c5:26:61:67:0c:1d:81:43:2e:da:32:5b:c6:5e:a3:
ed:f6:69:5d
-----BEGIN CERTIFICATE-----
MIIFbzCCBFegAwIBAgISAZecxYdSdQ2d6NFsYonF2diAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjIzMTIzMTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmUyY2Y2MmI4M2IzMjBjZWIyOGI4OTY0ZmNiOGQ4ODE5ZjRjNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YZP7b2S0TQ0z4GYQOrFTMrTaOfh
4PiTECZLNWGrojnNrBI1qZ6GaOorcHSZR66Mm+LEqN4slI8coPN74+kCnt+RinbR
n1E278yx6cucdpgry1ejraMGoBF0pDu++Lur0IFLPs9R+e+IC/Db+08ehw30Nt+d
Xmp+Ek3NMsasjuz/uQosPrWmkg81NuWpQQiO00CYJitdx+3OJQG3JCKnJwgXvY6M
9cXk4UwhDUG8cKqvayvsFF7mRM5Hb/jy4wJnagQuLz+/yPOOb98KVbqaUDOGmMHl
TrPWTOYZwEiLL5BgeCy73BKD38HhOsbtAW9Rtm++dOrt08WDePhBmnJ/bwIDAQAB
o4ICezCCAncwHQYDVR0OBBYEFALiz2K4OzIM6yi4lk/LjYgZ9MQPMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQXVMUFlyZzdNZ3pyS0xpV1Q4dU5pQm4weEE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBAKX8YAD
BACX8g8DBACX8hcDBACX8igDBACX8kAwDAMEAJfySQMEAJfyUgMEAJfy8gMEAJfz
IwMEAJfzJgMEAJfzKQMEAJfzcwMEAJfzeAMEAJfz1jAMAwQCl/QEAwQAl/QGAwQA
l/Q4AwQAl/Q6AwQDl/V4MA0GCSqGSIb3DQEBCwUAA4IBAQCFSpekHC8sFqYAWir0
GhfQ2J0vPczbLm3iwpVwOHu3xnRQnxyQvcHmAFJsSS0iohx82RvHXo+9hI2uSiO7
hWfEO7ZVGsgbarFd6Aw8XTYVz8d136UlgEiSkl8827mUw0j+TLYz8pYQUfBFkQSJ
4RpDJnTwc62/xmngp/JuefcFE1PukwPBD3NXWK0TtZ/0JKPk7nAl9C1p7kow+OzA
oyACIVD+8D1zz02WHbhEDyvldqg4cUwRQSZztvAAhY3N/nLNeZlQuX1egihtHuA0
uoOLM/MhZvcn78QisNucQ6gj2Zkg6uenJO7WWIdFmfHFJmFnDB2BQy7aMlvGXqPt
9mld
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:37:04 2025 by rpki-client