Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nG_z8roc-sTNFi3lU8R3yE-Xhds.roa
File: nG_z8roc-sTNFi3lU8R3yE-Xhds.roa (raw, json)
Hash identifier: EoC0dxW1DFDvu8JTfnyAnOlS12XDD+WnWY+aaE1e9OM=
Subject key identifier: 9C:6F:F3:F2:BA:1C:FA:C4:CD:16:2D:E5:53:C4:77:C8:4F:97:85:DB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197DF7D0907EB72440600ABC4DF951C34EA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nG_z8roc-sTNFi3lU8R3yE-Xhds.roa
Signing time: Sun 06 Jul 2025 11:26:42 +0000
ROA not before: Sun 06 Jul 2025 11:26:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.3.0/24 maxlen: 24
151.244.128.0/24 maxlen: 24
151.244.129.0/24 maxlen: 24
151.244.130.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Jul 2025 17:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:df:7d:09:07:eb:72:44:06:00:ab:c4:df:95:1c:34:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 6 11:26:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c6ff3f2ba1cfac4cd162de553c477c84f9785db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3b:49:85:b2:30:2d:67:35:d9:b7:20:eb:cb:
04:2e:9d:8f:a1:ae:53:f1:0b:e7:3c:67:b8:2a:1b:
b9:3f:eb:9f:11:c0:9e:0f:07:bf:3f:77:aa:01:40:
26:07:9e:7a:aa:47:73:15:c6:93:15:95:8a:e9:14:
08:c1:37:92:fa:7d:6e:4c:bd:20:00:58:30:16:19:
cd:76:bf:47:16:30:7a:49:40:0b:06:f5:81:93:d8:
49:2c:b9:67:13:4b:6e:12:28:1c:28:df:10:ea:dc:
82:90:6c:84:39:f8:93:13:a1:cf:c3:e9:39:8f:6d:
bd:1c:25:82:9f:ff:12:e4:ed:5b:b4:fa:70:c7:43:
4a:79:fb:57:90:cc:8b:8a:b6:98:4d:d7:72:41:0f:
89:8d:12:cf:95:c2:91:f4:da:4a:5d:7e:e5:ef:7b:
67:8a:83:89:eb:48:db:4e:2d:4c:6a:3d:fc:53:fc:
7d:1b:48:3b:52:ef:f3:0c:b6:25:fa:3f:48:80:65:
c7:16:20:5d:23:b4:3c:53:a2:cd:79:53:fd:d9:54:
04:00:72:e6:7f:46:0a:25:2c:c1:d7:7a:67:7b:9c:
c2:6c:27:e7:d7:8a:cd:50:7a:55:2a:de:de:46:f4:
61:03:c4:13:6a:3d:84:98:a3:9c:5f:65:ab:78:a8:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6F:F3:F2:BA:1C:FA:C4:CD:16:2D:E5:53:C4:77:C8:4F:97:85:DB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nG_z8roc-sTNFi3lU8R3yE-Xhds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.4.0/24
151.242.14.0/24
151.242.17.0/24
151.242.27.0/24
151.242.32.0/24
151.242.40.0/24
151.242.64.0/24
151.242.78.0/23
151.242.82.0/24
151.242.139.0/24
151.242.242.0/24
151.243.44.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.3.0/24
151.244.128.0-151.244.130.255
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
36:6e:01:53:ef:dc:14:a5:6e:76:f7:98:e5:c0:69:e5:ce:0e:
1e:0d:8d:c0:8f:bf:1f:08:5d:c7:c3:1c:57:cc:ae:c0:1f:25:
36:96:7a:82:14:7d:98:d4:7d:48:44:e0:dc:b1:d5:b8:f2:f1:
42:f6:73:6d:33:bb:d2:c4:03:7c:1e:5a:33:65:0a:ac:1b:01:
9a:47:69:46:b4:99:92:32:fd:5a:d4:f6:81:cc:59:04:c0:3a:
c3:c8:e3:e7:62:ae:cd:c8:88:ab:77:57:78:8d:2d:4e:3c:5e:
e1:cb:6d:08:03:f6:d4:38:77:25:f4:9d:9f:35:2b:00:de:f3:
e8:45:91:2d:f6:99:ca:25:66:19:e1:94:2e:c6:7e:15:4d:70:
ed:41:57:5f:48:93:30:5e:18:1a:bd:ed:1f:14:db:51:82:fb:
78:32:a9:1b:43:a7:ef:4c:5f:de:44:26:f0:60:21:38:02:fa:
f1:20:3d:91:2b:b4:e7:7e:65:f5:eb:30:b7:ff:61:4d:8c:1b:
b8:bc:f2:f3:39:1d:3e:6a:b9:9c:7f:f1:cc:83:4b:0c:ee:7f:
95:1d:12:4a:91:30:80:ac:2a:e1:f2:96:39:e5:01:2c:1f:a2:
f2:38:c3:9c:4c:f7:da:78:d5:3a:0d:a1:1d:1f:ce:bb:1a:bd:
53:c8:a7:38
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgISAZfffQkH63JEBgCrxN+VHDTqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzA2MTEyNjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzZmZjNmMmJhMWNmYWM0Y2QxNjJkZTU1M2M0NzdjODRmOTc4NWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTtJhbIwLWc12bcg68sELp2Poa5T
8QvnPGe4Khu5P+ufEcCeDwe/P3eqAUAmB556qkdzFcaTFZWK6RQIwTeS+n1uTL0g
AFgwFhnNdr9HFjB6SUALBvWBk9hJLLlnE0tuEigcKN8Q6tyCkGyEOfiTE6HPw+k5
j229HCWCn/8S5O1btPpwx0NKeftXkMyLiraYTddyQQ+JjRLPlcKR9NpKXX7l73tn
ioOJ60jbTi1Maj38U/x9G0g7Uu/zDLYl+j9IgGXHFiBdI7Q8U6LNeVP92VQEAHLm
f0YKJSzB13pne5zCbCfn14rNUHpVKt7eRvRhA8QTaj2EmKOcX2WreKjVfQIDAQAB
o4ICgTCCAn0wHQYDVR0OBBYEFJxv8/K6HPrEzRYt5VPEd8hPl4XbMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvbkdfejhyb2Mtc1RORmkzbFU4UjN5RS1YaGRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEApfx
gAMEAJfyBAMEAJfyDgMEAJfyEQMEAJfyGwMEAJfyIAMEAJfyKAMEAJfyQAMEAZfy
TgMEAJfyUgMEAJfyiwMEAJfy8gMEAJfzLAMEAJfzcwMEAJfzeAMEAJfz1gMEAJf0
AzAMAwQHl/SAAwQAl/SCAwQDl/V4MA0GCSqGSIb3DQEBCwUAA4IBAQA2bgFT79wU
pW5295jlwGnlzg4eDY3Aj78fCF3HwxxXzK7AHyU2lnqCFH2Y1H1IRODcsdW48vFC
9nNtM7vSxAN8HlozZQqsGwGaR2lGtJmSMv1a1PaBzFkEwDrDyOPnYq7NyIird1d4
jS1OPF7hy20IA/bUOHcl9J2fNSsA3vPoRZEt9pnKJWYZ4ZQuxn4VTXDtQVdfSJMw
Xhgave0fFNtRgvt4MqkbQ6fvTF/eRCbwYCE4AvrxID2RK7TnfmX16zC3/2FNjBu4
vPLzOR0+armcf/HMg0sM7n+VHRJKkTCArCrh8pY55QEsH6LyOMOcTPfaeNU6DaEd
H867Gr1TyKc4
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:10:28 2025 by rpki-client