Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N4bI1ABVB0YI51fBQea6Q4tIJ5E.roa
File: N4bI1ABVB0YI51fBQea6Q4tIJ5E.roa (raw, json)
Hash identifier: 9YSAvNtrsMEh2PljtJuO2RwDrFaXKUoHnHTAb4BZQSI=
Subject key identifier: 37:86:C8:D4:00:55:07:46:08:E7:57:C1:41:E6:BA:43:8B:48:27:91
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197FA8B663FF5008CE9ECCB423D2EA1225D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N4bI1ABVB0YI51fBQea6Q4tIJ5E.roa
Signing time: Fri 11 Jul 2025 17:32:09 +0000
ROA not before: Fri 11 Jul 2025 17:32:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.244.3.0/24 maxlen: 24
151.244.128.0/24 maxlen: 24
151.244.129.0/24 maxlen: 24
151.244.130.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Jul 2025 05:59:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:8b:66:3f:f5:00:8c:e9:ec:cb:42:3d:2e:a1:22:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 11 17:32:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3786c8d40055074608e757c141e6ba438b482791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:cf:b1:2b:b8:46:e0:83:ad:10:f5:5d:0e:
0b:18:39:59:96:9c:80:64:77:8f:98:be:7f:b9:70:
0a:b5:fa:ae:35:27:64:2c:2c:f4:e8:a2:f8:45:f9:
68:59:6f:b1:43:44:4f:dc:15:6f:12:2c:dd:20:c9:
c2:bd:de:db:87:2e:e2:6a:e4:ab:f6:d0:c8:4d:8c:
4e:21:c4:09:6a:77:e8:df:1c:6b:b8:32:7f:86:8a:
3d:a9:ec:6d:1c:7a:6b:6f:4c:aa:11:0f:bc:6c:39:
cd:92:54:62:6c:ac:d3:74:c0:bc:ea:56:2a:41:68:
f2:87:99:f3:89:7e:ce:d1:d4:e7:e6:41:ae:85:27:
2f:b8:44:72:30:a7:05:02:1e:96:2a:3b:f3:5c:c8:
14:05:28:c1:7a:97:24:c5:72:1d:5d:a5:1b:ff:d7:
f0:24:e8:69:47:38:47:83:d9:fb:08:15:d9:06:2b:
d7:f6:e7:c4:63:fd:4d:6f:7c:e4:7c:b5:e0:a8:26:
01:cd:aa:68:25:b4:00:37:3b:5a:c8:e2:47:27:2f:
59:34:fe:50:8d:5a:60:e5:41:52:84:38:1d:6c:a4:
e0:9c:fc:34:23:40:e2:11:1e:56:3e:10:db:03:06:
9d:52:a0:04:e4:63:8e:2e:d1:aa:09:dc:1a:0c:2f:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:86:C8:D4:00:55:07:46:08:E7:57:C1:41:E6:BA:43:8B:48:27:91
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N4bI1ABVB0YI51fBQea6Q4tIJ5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.4.0/24
151.242.14.0/24
151.242.17.0/24
151.242.27.0/24
151.242.32.0/24
151.242.40.0/24
151.242.64.0/24
151.242.78.0/23
151.242.82.0/24
151.242.139.0/24
151.242.242.0/24
151.243.44.0/24
151.243.115.0/24
151.243.120.0/24
151.244.3.0/24
151.244.128.0-151.244.130.255
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:eb:d9:49:1d:29:cf:e8:dd:b6:f2:49:6a:d5:7f:be:13:48:
3d:5d:81:ef:2f:53:87:8d:1b:f4:f0:5a:a6:9d:51:b5:61:9e:
84:ab:00:70:38:9c:e4:4c:63:15:91:97:96:10:69:e0:b9:58:
ff:d1:08:fa:c8:3c:b3:47:a4:d9:7e:27:a4:8c:f8:b6:92:b6:
28:91:74:17:8e:0a:a1:a0:d9:d3:40:1f:71:15:dd:a5:75:d1:
92:44:1e:48:c1:7e:68:9b:08:8b:15:cb:c1:d6:3b:40:ac:e9:
93:5f:aa:22:0d:73:80:38:bf:69:4b:b9:96:4d:2e:6f:97:a8:
3d:8b:87:63:1f:c8:7a:3e:a2:57:c5:75:d6:dc:83:76:c0:cf:
f3:ab:9f:f8:ca:45:08:3f:29:44:0e:e4:dc:4f:3c:9e:ae:00:
7a:3d:a3:31:56:22:96:8d:fe:c5:42:56:c8:d3:79:5d:9f:08:
2e:b9:49:a4:55:ce:a4:e2:74:34:1d:83:fc:eb:69:02:88:ae:
51:14:67:85:d4:7c:d8:dd:c0:68:44:a3:55:1a:70:eb:f5:bf:
53:ac:80:84:d3:09:40:96:bb:ed:aa:ad:39:64:12:2e:81:99:
35:a3:54:f1:9d:04:a5:b8:4f:d8:66:8a:66:78:61:24:85:d2:
49:47:e9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:25:48 2025 by rpki-client