Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LgNtn56b6p0n4EOM_JMr7N80kXE.roa
File: LgNtn56b6p0n4EOM_JMr7N80kXE.roa (raw, json)
Hash identifier: XMF5NdzTJieezCjW88puQoanpU/JuGLqbaTzvXO3AcE=
Subject key identifier: 2E:03:6D:9F:9E:9B:EA:9D:27:E0:43:8C:FC:93:2B:EC:DF:34:91:71
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197E3AE09ED107EE1ED25A6733BFDECCD2D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LgNtn56b6p0n4EOM_JMr7N80kXE.roa
Signing time: Mon 07 Jul 2025 06:58:43 +0000
ROA not before: Mon 07 Jul 2025 06:58:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.240.45.0/24 maxlen: 24
151.240.120.0/23 maxlen: 23
151.240.163.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.160.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.57.0/24 maxlen: 24
151.242.136.0/23 maxlen: 23
151.242.144.0/23 maxlen: 23
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.132.0/24 maxlen: 24
151.244.133.0/24 maxlen: 24
151.244.198.0/24 maxlen: 24
151.244.201.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.70.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.201.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Jul 2025 13:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e3:ae:09:ed:10:7e:e1:ed:25:a6:73:3b:fd:ec:cd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 7 06:58:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e036d9f9e9bea9d27e0438cfc932becdf349171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2a:00:16:46:4c:52:9b:93:33:25:7d:06:6a:
7c:fb:56:9b:0e:2b:08:e8:c0:2e:50:28:33:5b:30:
ed:11:60:c2:64:52:c6:21:56:26:6a:53:80:db:93:
c3:85:35:b8:98:56:61:b8:bf:fe:17:c4:f0:c7:6f:
66:d6:ef:45:56:e8:ed:df:b1:90:03:08:ac:c8:aa:
2e:6f:d1:cf:33:50:d4:73:49:b2:4b:a5:7d:b8:48:
ce:78:f4:9f:90:f2:59:e3:f9:da:06:f0:58:38:2b:
78:0e:0d:85:26:c2:29:1f:d2:90:7f:1d:62:41:6d:
17:74:b4:89:76:c5:f7:a6:7d:3d:4a:eb:5f:93:81:
83:21:2e:82:55:91:4a:54:f2:76:a1:17:b3:96:9c:
61:95:32:21:10:55:1e:70:f7:6b:a1:b9:be:53:6a:
65:d2:19:2c:6a:db:70:9e:88:76:5f:5a:05:41:81:
5a:c9:e6:02:ad:28:92:c1:e4:44:01:25:5e:33:12:
18:6e:71:94:be:fe:d0:62:c8:9a:c2:6e:ba:e9:b3:
a5:72:35:7b:af:ca:62:66:0f:03:ce:00:3f:2d:e0:
49:f9:a8:28:2e:04:f4:1a:0a:f9:66:9e:fc:a9:7d:
10:bb:91:0d:9c:40:9a:28:45:c8:39:a9:21:5b:24:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:03:6D:9F:9E:9B:EA:9D:27:E0:43:8C:FC:93:2B:EC:DF:34:91:71
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LgNtn56b6p0n4EOM_JMr7N80kXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.45.0/24
151.240.120.0/23
151.240.163.0/24
151.240.173.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.160.0/24
151.241.204.0/24
151.242.45.0/24
151.242.57.0/24
151.242.136.0/23
151.242.144.0/23
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.159.0/24
151.244.5.0/24
151.244.57.0/24
151.244.111.0/24
151.244.115.0/24
151.244.131.0-151.244.133.255
151.244.198.0/24
151.244.201.0/24
151.244.212.0/24
151.245.70.0/24
151.245.78.0/24
151.245.201.0/24
151.245.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:53:c0:65:de:e5:77:b8:f5:a3:7e:d1:9f:0d:80:1d:57:5e:
07:56:08:f2:46:42:63:7a:cb:dd:8c:20:33:27:a9:4c:4e:85:
ca:76:98:bb:55:79:b8:84:40:66:c4:42:39:b5:5b:cc:2c:32:
bf:8e:09:c7:15:e9:de:ce:79:e0:1e:48:b1:1b:fd:49:29:7e:
bc:f9:82:cc:4f:6a:40:fd:da:fd:2f:19:fa:2c:15:28:52:60:
6a:a1:1e:6f:5b:54:4b:32:7d:53:20:9a:54:60:85:1b:b2:0c:
c5:97:c9:bf:ad:24:e7:34:8d:de:89:d8:4a:d8:37:1a:8e:c9:
e5:99:72:c1:e2:75:94:6f:5d:81:fd:29:79:84:2b:8c:05:2f:
bd:40:4e:b8:f1:a7:3d:78:77:1b:00:2c:ec:df:d5:11:3e:30:
18:82:27:57:73:77:03:ad:83:32:7d:a8:55:88:6e:6c:ae:80:
3e:27:9e:90:2e:47:67:ef:df:57:8f:ec:ba:6b:9a:fe:43:23:
0c:e1:93:46:39:f3:aa:6b:09:63:da:d5:ae:c2:d1:76:61:a1:
73:d6:5e:dc:a9:ed:11:24:1f:73:a5:d1:95:a2:74:d1:8f:26:
e3:c3:7b:8f:57:b6:fa:ad:c5:f3:9c:95:2e:d4:5f:91:3f:05:
e3:29:c9:64
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgISAZfjrgntEH7h7SWmczv97M0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzA3MDY1ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTAzNmQ5ZjllOWJlYTlkMjdlMDQzOGNmYzkzMmJlY2RmMzQ5MTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCoAFkZMUpuTMyV9Bmp8+1abDisI
6MAuUCgzWzDtEWDCZFLGIVYmalOA25PDhTW4mFZhuL/+F8Twx29m1u9FVujt37GQ
AwisyKoub9HPM1DUc0myS6V9uEjOePSfkPJZ4/naBvBYOCt4Dg2FJsIpH9KQfx1i
QW0XdLSJdsX3pn09Sutfk4GDIS6CVZFKVPJ2oRezlpxhlTIhEFUecPdrobm+U2pl
0hksattwnoh2X1oFQYFayeYCrSiSweREASVeMxIYbnGUvv7QYsiawm666bOlcjV7
r8piZg8DzgA/LeBJ+agoLgT0Ggr5Zp78qX0Qu5ENnECaKEXIOakhWyQq8QIDAQAB
o4ICyjCCAsYwHQYDVR0OBBYEFC4DbZ+em+qdJ+BDjPyTK+zfNJFxMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvTGdOdG41NmI2cDBuNEVPTV9KTXI3Tjgwa1hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHfBggrBgEFBQcBBwEB/wSBzzCBzDCByQQCAAEwgcIDBACX
8C0DBAGX8HgDBACX8KMDBACX8K0DBACX8TIDBACX8UADBACX8UMDBAGX8UYDBACX
8UkDBACX8aADBACX8cwDBACX8i0DBACX8jkDBAGX8ogDBAGX8pADBACX8p4DBACX
8wIDBACX82kDBACX858DBACX9AUDBACX9DkDBACX9G8DBACX9HMwDAMEAJf0gwME
AZf0hAMEAJf0xgMEAJf0yQMEAJf01AMEAJf1RgMEAJf1TgMEAJf1yQMEAJf11DAN
BgkqhkiG9w0BAQsFAAOCAQEAW1PAZd7ld7j1o37Rnw2AHVdeB1YI8kZCY3rL3Ywg
MyepTE6FynaYu1V5uIRAZsRCObVbzCwyv44JxxXp3s554B5IsRv9SSl+vPmCzE9q
QP3a/S8Z+iwVKFJgaqEeb1tUSzJ9UyCaVGCFG7IMxZfJv60k5zSN3onYStg3Go7J
5ZlyweJ1lG9dgf0peYQrjAUvvUBOuPGnPXh3GwAs7N/VET4wGIInV3N3A62DMn2o
VYhubK6APieekC5HZ+/fV4/sumua/kMjDOGTRjnzqmsJY9rVrsLRdmGhc9Ze3Knt
ESQfc6XRlaJ00Y8m48N7j1e2+q3F85yVLtRfkT8F4ynJZA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:46:02 2025 by rpki-client