Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/liF7EWv20p6pwAr0mo1ilOoFbAs.roa
File: liF7EWv20p6pwAr0mo1ilOoFbAs.roa (raw, json)
Hash identifier: vS2/2Mi77+IvjzUO/V65cUBnvxUrc62/4BzzHVri09k=
Subject key identifier: 96:21:7B:11:6B:F6:D2:9E:A9:C0:0A:F4:9A:8D:62:94:EA:05:6C:0B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197CF3BF647FE4C1D4A87DEBCBE8D753D15
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/liF7EWv20p6pwAr0mo1ilOoFbAs.roa
Signing time: Thu 03 Jul 2025 07:41:42 +0000
ROA not before: Thu 03 Jul 2025 07:41:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.240.45.0/24 maxlen: 24
151.240.120.0/23 maxlen: 23
151.240.163.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.160.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.57.0/24 maxlen: 24
151.242.136.0/23 maxlen: 23
151.242.144.0/23 maxlen: 23
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
151.243.248.0/22 maxlen: 22
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.132.0/24 maxlen: 24
151.244.133.0/24 maxlen: 24
151.244.198.0/24 maxlen: 24
151.244.201.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.70.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.116.0/22 maxlen: 22
151.245.201.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Jul 2025 06:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:3b:f6:47:fe:4c:1d:4a:87:de:bc:be:8d:75:3d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 3 07:41:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96217b116bf6d29ea9c00af49a8d6294ea056c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a0:74:85:2f:0e:9f:bb:8d:13:73:c6:09:e6:
cf:00:1f:7b:31:2a:c1:03:90:93:04:ca:16:61:64:
78:b0:86:90:6b:d9:ec:b1:f2:b6:0b:24:0b:00:20:
e4:87:a2:d6:95:ff:a0:90:c6:b9:23:76:b0:e4:75:
09:87:b7:7b:dc:c2:c3:d3:60:cf:a4:66:e4:30:67:
06:e1:de:f9:1e:8c:dc:2f:31:3b:32:3f:48:1e:e3:
e0:8f:bf:54:92:b0:19:b3:d3:1a:26:2e:14:9f:7c:
9d:f2:20:7e:e8:62:2a:26:0b:3c:e7:5b:10:1d:16:
af:6d:f3:3d:7f:e1:fd:f5:e2:25:b3:e4:70:da:a0:
aa:89:cd:56:61:9d:d6:87:a6:36:70:f8:00:ce:e2:
76:be:a4:c9:85:8f:e5:57:3d:f9:fb:76:d2:11:5d:
71:9b:66:8b:f1:36:b2:19:fd:c7:9f:c1:93:be:99:
63:56:ee:31:08:5b:ca:05:52:28:cd:27:70:a2:9b:
f4:55:94:63:68:b6:4f:64:6e:87:9c:85:e8:53:bb:
e1:f5:b0:ac:85:4e:bc:88:73:ac:4c:80:09:b2:0f:
b1:b1:6c:0b:01:34:e7:de:8b:9a:23:ee:ef:9d:43:
45:1c:a1:94:85:8c:18:ae:1c:c4:53:65:eb:20:c2:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:21:7B:11:6B:F6:D2:9E:A9:C0:0A:F4:9A:8D:62:94:EA:05:6C:0B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/liF7EWv20p6pwAr0mo1ilOoFbAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.45.0/24
151.240.120.0/23
151.240.163.0/24
151.240.173.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.160.0/24
151.241.204.0/24
151.242.45.0/24
151.242.57.0/24
151.242.136.0/23
151.242.144.0/23
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.159.0/24
151.243.248.0/22
151.244.57.0/24
151.244.111.0/24
151.244.115.0/24
151.244.131.0-151.244.133.255
151.244.198.0/24
151.244.201.0/24
151.244.212.0/24
151.245.70.0/24
151.245.78.0/24
151.245.116.0/22
151.245.201.0/24
151.245.212.0/24
Signature Algorithm: sha256WithRSAEncryption
29:37:af:9c:1f:c4:99:59:81:fc:81:87:6d:53:dc:be:c3:ae:
11:f1:cc:a7:da:66:f7:fd:c8:65:15:bb:f9:31:f4:51:18:50:
03:29:db:a7:73:81:ab:97:e2:42:7f:71:2d:1d:26:58:5d:84:
e5:86:11:77:eb:fc:37:be:07:a0:12:26:74:12:73:2a:a3:ef:
d1:99:da:18:2a:72:cd:92:ed:4e:f0:d8:83:53:4d:68:b6:6d:
c5:07:30:7c:bc:14:bf:2c:ec:5f:ea:68:9a:5e:4f:17:00:3c:
fd:cf:bf:12:a1:53:e2:dd:27:5e:e9:4a:09:a0:5c:3a:51:b4:
67:87:c3:62:e9:e9:92:92:c0:c5:c7:9e:ae:1a:15:13:89:99:
a3:7c:5e:0d:a6:72:8c:02:53:50:a1:76:12:2f:a6:88:29:d3:
30:b3:b8:d9:19:ac:f6:d0:2b:bd:89:74:a9:ec:de:d7:e1:9b:
df:1d:50:bd:64:91:da:45:15:86:25:e9:d1:39:1d:59:13:d9:
02:c5:f3:29:36:01:09:07:0b:a0:ab:2e:a5:db:05:bd:d0:76:
d8:6f:7c:7c:d8:44:b4:0c:f1:bc:96:2b:ab:a3:42:56:e0:de:
09:58:ef:29:5a:2f:00:c6:e4:12:94:4f:51:55:61:a7:75:5b:
60:11:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:01:48 2025 by rpki-client