Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/T18EheXdYHoXf8Dy4ggmOB71Kn0.roa
File: T18EheXdYHoXf8Dy4ggmOB71Kn0.roa (raw, json)
Hash identifier: TjFlm9Z/+2aZIeKxJ/CWwXmmmCZ1cC7OteptWbj8/xU=
Subject key identifier: 4F:5F:04:85:E5:DD:60:7A:17:7F:C0:F2:E2:08:26:38:1E:F5:2A:7D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B1C05C16A5E45C5E0C8DD64322E5C22E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/T18EheXdYHoXf8Dy4ggmOB71Kn0.roa
Signing time: Fri 27 Jun 2025 14:17:43 +0000
ROA not before: Fri 27 Jun 2025 14:17:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.241.132.0/22 maxlen: 22
151.241.232.0/21 maxlen: 24
151.242.56.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.16.0/21 maxlen: 21
151.245.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 28 Jun 2025 04:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:c0:5c:16:a5:e4:5c:5e:0c:8d:d6:43:22:e5:c2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 27 14:17:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f5f0485e5dd607a177fc0f2e20826381ef52a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:88:0d:36:45:04:68:e4:3c:7e:76:fd:0f:
df:cb:30:7a:a3:da:07:4d:83:a2:35:ba:37:3f:16:
64:36:11:c7:94:f4:1d:df:37:46:e8:0b:ad:4d:27:
61:bc:ea:f1:e9:a7:69:80:4b:24:f4:ab:b3:dc:ec:
5c:69:50:3a:17:c2:4b:9f:0e:1f:7b:cd:fc:5e:bd:
6c:ff:6a:80:82:b1:fb:11:c2:e5:ca:c4:e0:ba:8b:
c6:45:46:cf:07:98:89:16:a9:bf:1e:c6:ef:c9:d6:
ba:a1:85:fa:c1:82:46:e9:3e:2a:94:f7:05:bb:16:
68:27:4f:e1:89:a4:3f:e4:f6:9d:72:9b:fc:31:bd:
83:31:25:04:0e:c0:ba:72:f8:68:ff:8c:6f:90:c8:
2e:de:43:b5:56:81:5d:10:b9:df:60:48:d7:62:fc:
c3:0f:6c:02:b9:ee:88:4a:bd:e7:f1:5a:a9:c8:44:
cf:b6:82:af:03:81:cd:51:fb:0a:bf:b2:4f:61:f3:
0c:b6:33:b0:fb:0e:46:23:a3:13:27:bf:5f:9f:6f:
5a:a7:5d:72:b5:6b:85:37:7c:37:6e:fe:b4:46:72:
9f:aa:1f:30:0c:50:6d:a5:ff:b5:81:03:66:c0:cf:
a6:52:f2:f7:87:1d:e9:9f:a6:5f:0d:2a:9a:b2:35:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5F:04:85:E5:DD:60:7A:17:7F:C0:F2:E2:08:26:38:1E:F5:2A:7D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/T18EheXdYHoXf8Dy4ggmOB71Kn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.241.132.0/22
151.241.232.0/21
151.242.56.0/24
151.243.8.0/23
151.243.204.0/23
151.244.16.0/21
151.245.56.0/22
Signature Algorithm: sha256WithRSAEncryption
31:c5:e6:f4:0b:6a:e2:b6:7a:f1:2d:c0:1c:0a:c7:08:a7:9f:
c7:bc:47:b9:16:7d:58:ef:f5:66:13:6f:de:cb:a5:c2:f4:28:
14:11:19:72:56:7c:8a:f3:95:e4:58:ea:98:f5:33:dc:cc:b4:
d5:0f:a5:e0:4f:a8:c9:c3:20:ef:14:a4:c1:c4:05:f5:44:5d:
a7:a2:d0:81:b3:10:06:48:0f:89:2b:6a:be:57:02:02:74:1a:
f6:de:e9:e7:81:f7:10:7d:11:ae:8b:23:70:1a:f8:ec:c6:e7:
1a:98:e4:94:fd:d9:b9:9d:91:e5:8b:27:73:b2:4d:35:78:5e:
32:71:fc:74:88:a0:f7:b4:93:55:d7:63:25:01:8b:55:6a:d2:
2d:63:3d:78:a2:f5:d1:68:a7:d4:ce:b3:4e:f4:98:f3:7f:b9:
15:02:4e:cd:0a:63:35:af:d6:bd:59:6c:46:da:3b:99:12:9e:
6f:69:d9:f2:91:68:dd:bd:27:92:5c:6f:80:16:ed:3c:73:e3:
0e:f6:a9:ee:fe:b1:0b:74:5d:cb:c7:7d:ea:b5:1e:0e:cb:c2:
fd:e7:0d:33:80:df:6a:a1:4c:66:b3:e7:3c:b8:92:9b:0e:82:
c2:0f:4d:b1:c6:9a:f6:7d:c3:59:0a:da:11:a9:d6:8e:2e:dc:
2a:75:d6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:35:26 2025 by rpki-client