Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XLV6RPhzNFi5oeRdZaZPtUWqqkg.roa
File: XLV6RPhzNFi5oeRdZaZPtUWqqkg.roa (raw, json)
Hash identifier: M0qjUUHTlNgf5vmJuqzaxsSXSs1NzJPHBpD320cfZ/E=
Subject key identifier: 5C:B5:7A:44:F8:73:34:58:B9:A1:E4:5D:65:A6:4F:B5:45:AA:AA:48
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197BA5949E32E1ABD6420167C4EB520849E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XLV6RPhzNFi5oeRdZaZPtUWqqkg.roa
Signing time: Sun 29 Jun 2025 06:21:43 +0000
ROA not before: Sun 29 Jun 2025 06:21:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Jul 2025 19:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:59:49:e3:2e:1a:bd:64:20:16:7c:4e:b5:20:84:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 29 06:21:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cb57a44f8733458b9a1e45d65a64fb545aaaa48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:44:de:51:75:31:f0:fa:22:7a:ef:21:a0:
2b:f7:31:b5:29:59:0a:4a:5c:0f:b8:d9:f7:59:ed:
22:fe:22:97:53:f0:ac:de:4d:10:bd:7f:a6:25:d6:
d5:59:a8:9f:f6:ce:93:a3:a8:47:df:c9:d9:66:f3:
69:6d:8f:2b:8a:7c:36:c1:6d:4d:4b:cb:93:ec:45:
8a:c7:f3:69:e8:1a:c7:82:d6:04:d3:64:74:a0:18:
bb:f9:eb:36:c2:cf:35:fa:a9:05:15:ce:21:38:ef:
b4:f4:f5:85:00:dd:ca:52:b7:d5:5c:1a:db:d6:8e:
f9:99:19:32:d5:23:54:35:56:27:f7:4a:71:db:8d:
df:25:86:df:e0:86:76:e4:e5:a3:a1:65:aa:c6:66:
67:c3:2e:7c:18:e5:66:14:b8:a4:b2:c5:60:c7:b4:
da:5b:a5:c5:99:eb:2a:59:5e:8f:e2:d6:53:30:be:
1e:be:22:9b:ae:c5:83:28:ff:5e:d1:fe:a9:5a:26:
f4:93:a5:6c:01:fe:b5:0d:a3:01:13:62:bc:27:f4:
6f:ea:75:d1:0b:f1:9e:b0:ee:87:bc:ca:a2:5b:7d:
5d:62:9b:33:c2:3b:87:0d:96:84:b9:76:c2:26:c2:
f3:5c:5c:e1:5c:11:92:4c:4b:89:6a:2d:a9:10:b2:
52:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B5:7A:44:F8:73:34:58:B9:A1:E4:5D:65:A6:4F:B5:45:AA:AA:48
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XLV6RPhzNFi5oeRdZaZPtUWqqkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.40.0/24
151.242.64.0/24
151.242.242.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:05:d6:a0:fa:3b:a8:ac:f9:e2:36:4f:85:1e:26:8f:3a:a4:
90:15:c3:f5:85:ca:48:5b:b8:92:a0:ff:d0:4a:f0:80:56:9b:
7c:51:10:23:66:4d:3f:c7:ed:25:d2:b3:d0:91:ff:48:26:55:
97:1a:f2:e6:d4:0f:8d:5b:3e:26:2b:62:34:e0:c9:39:64:1d:
14:6c:3d:39:be:cf:0f:86:fb:1b:f5:fe:7c:df:ed:50:ab:12:
b2:b4:1c:cb:24:27:7d:6e:b5:7d:93:91:1b:ec:d1:53:46:40:
1f:e5:98:3a:ff:33:ad:dd:17:d6:79:a7:55:5a:d1:b5:8d:a0:
8b:7e:51:b3:79:da:64:ab:63:49:f0:10:d0:c1:2f:fa:ae:cb:
31:c9:43:ce:0d:08:9e:98:46:d1:d7:ba:73:eb:f2:06:08:f2:
17:ee:47:c5:af:33:17:46:6c:36:1a:3a:22:ae:b1:ed:8d:b8:
f7:3e:74:a4:1d:7a:b8:71:f9:6b:85:4d:3a:99:1b:e4:ae:ad:
61:7d:01:7e:c0:94:64:81:b9:74:93:5d:fd:6d:6f:f8:4f:f7:
b4:a7:87:24:80:71:11:15:c5:53:b1:c2:2a:45:20:57:c9:5b:
87:9e:57:14:dd:ec:86:90:c8:3e:7a:f8:58:8e:ec:4e:2e:13:
01:2f:0e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:12:00 2025 by rpki-client