Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VO_6y4CK8f8-__51rthkXjCcL6s.roa
File: VO_6y4CK8f8-__51rthkXjCcL6s.roa (raw, json)
Hash identifier: 4BeRvAGiBOPnTT35sVQRHdYFLc69aHHrAoJh+CPumZY=
Subject key identifier: 54:EF:FA:CB:80:8A:F1:FF:3E:FF:FE:75:AE:D8:64:5E:30:9C:2F:AB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D4A09431E20CD07802BEBC0824D7D7E7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VO_6y4CK8f8-__51rthkXjCcL6s.roa
Signing time: Fri 04 Jul 2025 08:49:42 +0000
ROA not before: Fri 04 Jul 2025 08:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 151.241.119.0/24 maxlen: 24
151.241.122.0/24 maxlen: 24
151.241.123.0/24 maxlen: 24
151.241.125.0/24 maxlen: 24
151.243.176.0/21 maxlen: 24
151.243.192.0/21 maxlen: 24
151.243.225.0/24 maxlen: 24
151.243.227.0/24 maxlen: 24
151.243.235.0/24 maxlen: 24
151.243.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Jul 2025 06:53:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:a0:94:31:e2:0c:d0:78:02:be:bc:08:24:d7:d7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 4 08:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54effacb808af1ff3efffe75aed8645e309c2fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:45:03:8a:65:da:ce:8a:14:d2:ee:86:3f:50:
95:7f:f3:20:70:87:52:28:5b:46:c8:0b:be:63:68:
a8:11:dc:23:5c:de:47:95:c4:2e:e0:77:1b:fb:e5:
ec:d2:54:43:db:a2:0b:45:1f:1e:85:20:6b:23:32:
3b:a2:fa:d2:e0:83:8e:4d:70:f1:97:90:25:7a:28:
dd:bd:1a:38:9e:ca:35:39:2f:18:34:35:10:2b:e0:
e2:ef:60:57:c9:99:c9:d5:46:d2:00:96:10:bc:96:
d2:8c:b6:c6:fb:22:69:0f:ee:a2:1d:33:31:32:7d:
cb:cb:21:3f:4c:d2:5c:f4:9a:cc:3f:0c:6f:61:90:
f4:34:56:ec:3a:e9:40:a9:8f:76:2c:b4:75:dc:bb:
37:67:55:10:a0:3d:77:a1:bb:be:9a:99:1d:10:21:
e1:42:09:39:c5:39:ae:c5:bd:26:07:aa:83:87:4c:
08:ae:14:bc:a5:fb:90:f2:ee:12:0c:28:34:b8:3a:
ba:b5:08:7c:a3:df:90:ae:e1:f4:7c:9f:1a:cf:ad:
eb:14:48:24:ca:ed:2b:dd:9b:bf:c9:01:e7:0c:51:
aa:1a:41:69:cb:54:d6:72:83:d1:ef:f0:8d:b9:69:
88:29:96:99:48:e3:99:4a:86:4b:15:aa:27:48:c1:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EF:FA:CB:80:8A:F1:FF:3E:FF:FE:75:AE:D8:64:5E:30:9C:2F:AB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VO_6y4CK8f8-__51rthkXjCcL6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.119.0/24
151.241.122.0/23
151.241.125.0/24
151.243.176.0/21
151.243.192.0/21
151.243.225.0/24
151.243.227.0/24
151.243.235.0/24
151.243.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:64:5b:67:f5:5e:d0:34:11:9d:e3:13:0b:19:86:1c:3f:82:
ab:45:fa:02:d8:20:1c:c4:bc:9f:61:94:9f:cf:19:55:4a:01:
9b:f9:d3:36:87:5c:00:2f:32:58:c5:f0:ae:89:41:2e:88:7e:
2d:59:29:b4:d3:da:61:f3:2d:25:c1:26:90:67:53:e5:be:8b:
72:6f:d4:74:0f:08:ea:bf:52:d0:91:12:a0:33:f9:ba:0e:71:
c7:44:c9:a9:12:e7:ca:eb:e1:71:71:e4:1a:79:8d:59:64:46:
77:ed:e1:0a:61:66:45:dc:ea:c1:95:f1:e8:45:d9:55:6a:f3:
e8:34:5f:10:56:41:56:96:97:a9:55:db:ad:24:e9:4a:4a:25:
61:bd:7d:2c:a6:f6:82:8f:0f:9b:cf:66:f2:ab:02:1a:de:3c:
fd:ff:82:a1:db:e7:50:46:f6:38:35:60:c0:41:7c:81:09:28:
0e:95:8e:ff:d0:8b:69:f8:5d:51:6a:09:ec:75:5c:8a:1b:dc:
39:bf:d0:17:c8:b8:e8:b1:7f:04:7e:12:52:98:40:ae:d8:a9:
0d:38:b4:7b:39:71:61:be:e5:e6:26:09:42:a5:62:ea:be:0c:
4f:c8:ca:83:86:cc:2f:bb:06:fb:88:89:eb:df:bf:9d:88:fa:
69:3d:e5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:11:30 2025 by rpki-client