Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VvtgwMRTrVRaVQIvwZm-q4uLuw4.roa
File: VvtgwMRTrVRaVQIvwZm-q4uLuw4.roa (raw, json)
Hash identifier: c3oeyrvSnYYAeYAgC5+Fpoy0Iof6cQyTiaAwDX4wCvs=
Subject key identifier: 56:FB:60:C0:C4:53:AD:54:5A:55:02:2F:C1:99:BE:AB:8B:8B:BB:0E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197DF7D0A04ED740C3F9E1BFBCE36695680
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VvtgwMRTrVRaVQIvwZm-q4uLuw4.roa
Signing time: Sun 06 Jul 2025 11:26:42 +0000
ROA not before: Sun 06 Jul 2025 11:26:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.3.0/24 maxlen: 24
151.244.128.0/24 maxlen: 24
151.244.129.0/24 maxlen: 24
151.244.130.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Jul 2025 17:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:df:7d:0a:04:ed:74:0c:3f:9e:1b:fb:ce:36:69:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 6 11:26:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56fb60c0c453ad545a55022fc199beab8b8bbb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:9a:c4:68:1c:76:a2:8d:0d:f4:01:68:c0:
15:5c:b9:9e:fb:0f:1c:30:cd:dc:5f:e6:9f:0d:8b:
e2:8d:c3:30:6d:b0:3e:a9:ce:86:35:82:bf:00:93:
db:94:60:7e:9d:e9:39:dd:bc:e8:b8:30:62:3c:ee:
2b:76:0a:a3:d8:40:c4:54:97:68:46:84:83:de:5a:
a6:24:48:90:b2:a4:12:25:9d:be:d9:f3:a6:e8:63:
f2:ad:33:c2:c1:92:10:97:7c:21:b5:66:c7:a1:b2:
21:9b:bb:15:6f:a2:75:f8:c6:01:1d:f3:03:b5:c1:
ce:5d:f1:2d:1f:6c:c1:83:f7:3e:5e:fc:d3:5f:5a:
0c:a8:5d:9f:51:9c:ec:fd:13:f6:52:d1:ce:4b:4f:
12:6c:f5:5a:27:40:cd:55:79:ae:8b:71:1c:89:62:
f0:09:9d:6a:25:81:27:c3:50:a8:10:20:16:30:de:
7f:88:61:1c:e4:30:b1:bf:90:7d:77:40:cf:74:f0:
44:b8:4a:80:42:2b:93:83:47:26:ca:82:2a:02:58:
d3:54:a1:4b:b0:53:36:20:44:b5:ce:9f:4d:fe:0b:
ea:bb:47:bf:32:e5:8e:c0:3d:3e:4b:4e:8e:65:f0:
e0:48:86:9c:a0:86:97:2f:d6:ce:bf:94:e2:17:dc:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FB:60:C0:C4:53:AD:54:5A:55:02:2F:C1:99:BE:AB:8B:8B:BB:0E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VvtgwMRTrVRaVQIvwZm-q4uLuw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.4.0/24
151.242.14.0/24
151.242.17.0/24
151.242.27.0/24
151.242.32.0/24
151.242.40.0/24
151.242.64.0/24
151.242.78.0/23
151.242.82.0/24
151.242.139.0/24
151.242.242.0/24
151.243.44.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.3.0/24
151.244.128.0-151.244.130.255
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
31:be:b9:00:a3:bb:90:0d:45:1a:2c:9b:a1:f9:16:c3:f5:d2:
ba:a1:a0:f4:3c:dd:d0:e1:b0:c5:bd:07:66:68:fa:75:14:a7:
c3:12:49:fd:1a:97:99:62:18:4d:9f:da:3a:3f:44:5a:3e:15:
57:8c:63:40:2d:6e:81:de:ab:6a:21:ed:5e:b1:22:b8:f6:b8:
f9:21:39:06:63:eb:9a:5b:c3:e7:f4:95:5e:b9:2b:71:9e:c1:
b1:5f:51:28:0d:ae:b8:b3:db:1d:19:72:ac:b1:8a:6c:09:2d:
1e:5a:d9:a6:f2:aa:0b:9c:c1:b8:a1:99:7a:ff:06:f4:0a:37:
b8:9f:c3:4b:7d:d2:1f:1d:9b:b6:7b:98:f5:6e:b8:1f:5a:80:
44:5f:92:cc:f1:44:54:7d:05:44:39:d4:32:51:b2:e3:52:3e:
02:93:ae:a8:ad:55:6a:0a:47:c7:b7:b6:55:de:1e:f4:99:e8:
b2:ac:5e:82:5c:38:75:e1:26:06:ef:cd:f5:b7:c6:94:a3:5a:
78:7c:af:1b:34:c1:ef:8e:59:49:95:92:4d:f8:37:36:90:00:
5e:06:39:64:ab:2d:01:ed:53:e8:3d:df:e3:56:b3:9f:74:49:
2c:74:9e:0d:5d:60:e9:dc:43:f3:7b:84:b8:ed:18:c5:6a:b0:
e7:44:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:43:05 2025 by rpki-client