Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/T7xkJoVYDM_w_sRME-jfScIMJYQ.roa
File: T7xkJoVYDM_w_sRME-jfScIMJYQ.roa (raw, json)
Hash identifier: PdEIXvSOz1f96mt9uu92uKRB0f4F62QAAbYyFshdB3Q=
Subject key identifier: 4F:BC:64:26:85:58:0C:CF:F0:FE:C4:4C:13:E8:DF:49:C2:0C:25:84
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D49C0145F313CCE9E2013B884C13C812
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/T7xkJoVYDM_w_sRME-jfScIMJYQ.roa
Signing time: Fri 04 Jul 2025 08:44:43 +0000
ROA not before: Fri 04 Jul 2025 08:44:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 151.242.41.0/24 maxlen: 24
151.242.58.0/24 maxlen: 24
151.242.200.0/24 maxlen: 24
151.242.201.0/24 maxlen: 24
151.243.164.0/22 maxlen: 22
151.245.168.0/21 maxlen: 21
151.245.176.0/21 maxlen: 21
151.245.224.0/21 maxlen: 21
151.245.232.0/21 maxlen: 21
151.245.248.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sat 05 Jul 2025 06:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:9c:01:45:f3:13:cc:e9:e2:01:3b:88:4c:13:c8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 4 08:44:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fbc642685580ccff0fec44c13e8df49c20c2584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:46:1f:cb:ac:e4:c3:08:b7:08:9a:55:c1:ab:
5c:17:24:f3:a2:83:80:e5:7d:99:2c:11:9b:33:7e:
2f:52:ba:54:a8:46:a4:a1:c4:60:95:18:c1:59:de:
bc:f8:ae:ae:e6:6f:6b:5e:b9:7c:60:d3:7f:49:dc:
cb:aa:00:e6:06:9c:19:80:23:eb:9f:70:93:ad:09:
e0:26:4e:e8:7e:79:05:b8:ff:d8:1a:a8:d9:31:ca:
fa:78:65:38:f3:a3:8d:58:ed:cd:dc:e8:34:ca:fd:
58:ab:12:78:0f:29:50:6b:3e:ff:49:da:d3:c3:c6:
d0:92:ed:31:26:42:be:26:33:ff:5e:3c:d3:d1:84:
a5:15:f1:2c:0e:a6:3f:62:4a:a9:7d:ed:98:52:68:
8b:eb:4d:c9:19:9d:8b:e5:e7:bd:cb:74:1a:90:c4:
65:1c:88:28:ef:ea:c9:07:58:73:06:c0:0f:37:9f:
c2:3a:09:0a:dc:db:e8:4f:00:24:53:4e:ed:7e:f7:
51:86:f2:1e:86:f9:24:f3:ea:fb:2f:62:b6:0a:01:
e8:47:6f:34:d3:ed:ce:4a:ce:7a:d4:5c:65:fa:a9:
86:4a:5c:35:2e:39:ea:32:74:d6:39:46:2e:45:45:
89:1d:49:2f:40:84:6e:3d:cb:67:42:97:0e:df:24:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:64:26:85:58:0C:CF:F0:FE:C4:4C:13:E8:DF:49:C2:0C:25:84
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/T7xkJoVYDM_w_sRME-jfScIMJYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.41.0/24
151.242.58.0/24
151.242.200.0/23
151.243.164.0/22
151.245.168.0-151.245.183.255
151.245.224.0/20
151.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:eb:1f:27:95:9f:05:02:be:06:38:45:ca:4c:cb:3f:d2:ce:
f8:43:04:2c:c9:47:d3:81:71:4e:8d:bb:1e:72:60:6a:71:13:
20:91:d1:65:21:2b:5d:fe:99:de:63:a7:42:f9:29:b2:fb:d4:
b3:19:75:1d:cc:55:96:c2:57:47:5a:4b:1a:49:b7:15:23:0b:
22:b8:08:65:cc:18:ed:eb:28:75:79:d9:1b:62:85:0d:3d:bd:
42:40:21:73:26:88:13:ae:6e:9c:a2:23:5c:90:6c:a3:16:26:
16:44:e1:37:f0:c1:b1:26:8b:d5:b2:f4:e2:06:68:0b:e2:07:
93:4c:2d:7e:99:8e:3f:3e:56:a7:80:9a:a1:21:e7:9f:40:54:
d8:d7:87:f4:06:de:56:46:23:4b:77:ec:03:ed:07:63:0f:03:
cf:5b:91:8d:14:31:86:b0:68:6e:7e:bd:de:eb:74:b0:5e:2e:
b3:e8:d2:41:3d:31:80:f5:7a:22:5a:67:24:a6:a9:0f:2f:66:
27:e1:c3:b5:c1:7c:e2:b4:37:46:1c:8c:db:f0:9e:e4:1b:74:
95:c2:12:66:ac:0c:22:94:77:c2:90:8d:d7:f6:f3:fd:a1:cb:
0d:da:32:7c:46:9f:96:a4:a1:88:be:f5:ac:70:97:48:63:d6:
15:08:27:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:35:34 2025 by rpki-client