Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N9qsNm4sZ-hwjef2lovnOy6QgKM.roa
File: N9qsNm4sZ-hwjef2lovnOy6QgKM.roa (raw, json)
Hash identifier: FjbMgYT6hPMEnRjzFq0jTEu86fKoWaVTbMl6czUu+44=
Subject key identifier: 37:DA:AC:36:6E:2C:67:E8:70:8D:E7:F6:96:8B:E7:3B:2E:90:80:A3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197AB7B72152C530FE288877C54B22C1AE5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N9qsNm4sZ-hwjef2lovnOy6QgKM.roa
Signing time: Thu 26 Jun 2025 09:04:43 +0000
ROA not before: Thu 26 Jun 2025 09:04:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.15.0/24 maxlen: 24
151.242.23.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.75.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.80.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.41.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Jun 2025 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ab:7b:72:15:2c:53:0f:e2:88:87:7c:54:b2:2c:1a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 26 09:04:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37daac366e2c67e8708de7f6968be73b2e9080a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b4:8c:3c:83:63:54:93:8d:f9:9d:20:05:92:
a0:4e:07:f2:1a:07:e0:d1:4b:7e:f8:98:3f:d3:aa:
46:72:be:9a:b8:d4:56:4e:8a:82:5d:28:96:04:77:
70:7d:0b:24:32:bd:71:44:3c:57:e5:f0:0d:22:13:
84:00:95:36:80:75:bb:19:a0:d3:5e:2e:ae:dc:c5:
ea:0b:52:3a:d7:58:30:8d:42:2a:80:16:f0:21:22:
90:63:a2:0d:fe:c8:37:01:44:91:3d:0a:42:7f:01:
fe:44:36:47:26:f3:af:38:fb:f6:12:ff:e7:91:c5:
5e:7d:c0:7f:47:cf:88:a8:f4:8e:24:73:b3:bb:ee:
48:a4:01:3c:ec:df:88:c5:15:5f:ba:d1:b2:8e:04:
8a:21:ec:60:e4:6b:0a:71:55:6f:cf:bd:87:63:cd:
ca:2e:7f:60:92:00:a2:fb:fa:df:16:94:a5:fa:63:
35:d4:5c:2a:2a:c3:eb:87:6e:30:ca:78:e0:08:09:
52:4d:86:fd:04:33:d0:38:61:b4:b3:74:e4:fd:f3:
7e:0f:e7:cf:75:7f:f6:6e:08:5c:f9:c3:1f:ab:5f:
2a:f5:27:fa:9c:65:97:41:cb:ec:d1:68:21:25:fe:
c2:86:b4:12:1d:3e:d9:0d:b8:bb:47:f0:77:f6:5c:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DA:AC:36:6E:2C:67:E8:70:8D:E7:F6:96:8B:E7:3B:2E:90:80:A3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N9qsNm4sZ-hwjef2lovnOy6QgKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.15.0/24
151.242.23.0/24
151.242.40.0/24
151.242.64.0/24
151.242.73.0-151.242.82.255
151.242.242.0/24
151.243.35.0/24
151.243.41.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:06:86:b8:f9:45:e9:61:1a:dc:59:a8:e2:2a:0f:e3:34:7e:
93:a1:86:2c:d7:2d:57:2c:05:8a:45:47:79:75:97:29:8a:39:
3b:1f:e1:0f:c9:a4:ff:5a:5d:a9:19:f8:ff:84:f8:dc:8f:a3:
22:89:e6:57:03:80:bd:70:29:bc:16:cb:a8:cc:2b:35:a5:63:
7a:e7:e7:bc:88:0e:66:05:eb:55:e7:25:8d:f6:e0:b4:03:13:
c1:e4:47:92:66:6d:b7:c4:88:02:f6:69:8c:18:9c:d1:cb:13:
bb:67:fc:6a:7f:d0:72:9c:df:b6:9e:05:66:3e:f3:97:45:73:
bf:85:59:07:92:6d:dd:11:f2:1d:3b:ab:7e:4e:50:8f:25:8d:
e0:ec:14:91:e5:f5:95:27:74:5c:73:0e:41:52:3c:3d:9b:66:
c1:53:6f:ea:17:4a:04:8a:02:2a:1e:49:4c:6c:c0:82:87:be:
46:af:10:8b:a1:98:44:a2:d6:19:75:d0:75:dc:13:9b:9d:c8:
3d:ea:96:89:16:37:78:b0:1a:38:6e:52:5f:f6:94:f4:b1:d5:
3b:42:85:41:f9:e1:49:41:c7:ff:4b:32:b7:58:f6:70:e8:16:
be:3e:1c:9f:64:3c:08:e1:f6:d6:25:ec:98:d6:04:9e:55:76:
7c:6a:5d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:38:33 2025 by rpki-client