Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/s-o9fQtQX5io0XZcnf0kVPvz5tI.roa
File: s-o9fQtQX5io0XZcnf0kVPvz5tI.roa (raw, json)
Hash identifier: WLQfEH2wtpf6xFHV9G8uo6eOcoKqSprJlIgWQl6KGOk=
Subject key identifier: B3:EA:3D:7D:0B:50:5F:98:A8:D1:76:5C:9D:FD:24:54:FB:F3:E6:D2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D24195914BF7B9FDD08105D21226AB2C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/s-o9fQtQX5io0XZcnf0kVPvz5tI.roa
Signing time: Thu 03 Jul 2025 21:46:42 +0000
ROA not before: Thu 03 Jul 2025 21:46:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19318
IP address blocks: 151.242.41.0/24 maxlen: 24
151.242.58.0/24 maxlen: 24
151.242.200.0/24 maxlen: 24
151.242.201.0/24 maxlen: 24
151.243.164.0/22 maxlen: 22
151.245.176.0/21 maxlen: 21
151.245.224.0/21 maxlen: 21
151.245.232.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 04 Jul 2025 08:33:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:41:95:91:4b:f7:b9:fd:d0:81:05:d2:12:26:ab:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 3 21:46:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3ea3d7d0b505f98a8d1765c9dfd2454fbf3e6d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:78:d6:e0:29:08:a6:a1:20:f5:3d:51:43:
c5:6c:ae:14:d3:d3:f9:cc:7f:fb:4f:06:ab:4d:04:
8a:9e:48:ad:10:be:b5:29:f7:2a:29:48:fe:94:64:
d6:95:29:e1:9f:5d:85:ef:0d:18:75:1e:9c:dd:b1:
c3:a9:ea:ba:0d:5f:b0:f8:85:4f:29:b6:ca:59:66:
16:4f:dc:28:66:95:7c:e4:56:c8:7e:dd:ae:8b:45:
89:b1:98:b3:16:33:c6:dd:46:5a:4b:1e:5a:66:ac:
4d:72:69:80:00:65:0b:3c:1b:34:88:b5:6b:78:ab:
2e:20:ee:c4:48:6c:31:f5:32:83:da:db:50:b5:a5:
73:16:5a:30:e6:f9:59:eb:eb:dd:c5:0e:bc:96:ef:
89:07:a5:0f:15:f8:28:d8:28:e6:8c:e2:50:40:c7:
69:4c:85:4e:cb:fd:28:56:31:5d:d7:51:7c:b7:f3:
b7:f9:67:9d:04:94:5c:30:19:44:d6:cc:b4:59:bf:
b0:e2:41:07:34:47:64:13:58:86:19:65:62:9d:2a:
a1:92:38:09:41:b4:43:b6:cd:d1:61:5a:14:1f:0a:
c0:99:3f:70:0e:c9:31:f6:3f:10:af:8d:d3:6b:0e:
1d:09:ea:15:1f:6d:a0:d8:2c:48:8b:92:44:73:69:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EA:3D:7D:0B:50:5F:98:A8:D1:76:5C:9D:FD:24:54:FB:F3:E6:D2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/s-o9fQtQX5io0XZcnf0kVPvz5tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.41.0/24
151.242.58.0/24
151.242.200.0/23
151.243.164.0/22
151.245.176.0/21
151.245.224.0/20
Signature Algorithm: sha256WithRSAEncryption
80:71:f3:97:3e:eb:c9:85:1c:c0:1c:d3:7e:8b:29:79:1e:48:
79:4d:c2:80:b6:5b:c0:4b:c3:f0:a4:89:8f:6b:4c:11:09:57:
46:30:72:7c:19:ee:78:b3:79:aa:be:16:37:35:9e:8d:57:a7:
c7:f2:58:02:a5:42:63:12:a4:d7:3b:fb:09:a8:dc:93:89:c6:
66:6f:5a:48:53:2f:d0:bd:0c:0a:f3:65:33:3b:41:49:75:7d:
ab:f2:9c:6c:40:21:43:5c:c8:f7:dc:d0:ef:7a:48:12:47:50:
1f:bd:82:30:fa:d8:0e:f8:e9:4e:85:6c:83:fe:51:8a:32:8b:
cf:2a:1b:c9:f4:6b:62:a8:27:10:f0:85:f7:f2:3f:cd:11:5a:
ba:12:08:88:bd:3a:ad:d4:32:f5:d5:8c:21:77:1c:33:e5:15:
be:66:06:7c:e7:28:ec:ae:c5:2a:0a:29:58:cd:ac:b0:b5:04:
fb:c2:27:f3:37:20:e8:4f:80:a0:5c:1c:27:b8:85:96:a0:c5:
6f:6f:58:79:2c:2f:5b:7c:d4:28:ae:2e:ac:70:47:a9:25:a1:
d6:70:18:b1:97:c7:09:b3:d7:2c:57:db:aa:4c:83:4d:3c:e8:
57:aa:5e:6f:0f:32:d4:b5:e0:01:3b:84:77:c7:04:65:ea:ff:
7a:91:4d:0f
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZfSQZWRS/e5/dCBBdISJqssMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzAzMjE0NjQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2VhM2Q3ZDBiNTA1Zjk4YThkMTc2NWM5ZGZkMjQ1NGZiZjNlNmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYd41uApCKahIPU9UUPFbK4U09P5
zH/7TwarTQSKnkitEL61KfcqKUj+lGTWlSnhn12F7w0YdR6c3bHDqeq6DV+w+IVP
KbbKWWYWT9woZpV85FbIft2ui0WJsZizFjPG3UZaSx5aZqxNcmmAAGULPBs0iLVr
eKsuIO7ESGwx9TKD2ttQtaVzFlow5vlZ6+vdxQ68lu+JB6UPFfgo2CjmjOJQQMdp
TIVOy/0oVjFd11F8t/O3+WedBJRcMBlE1sy0Wb+w4kEHNEdkE1iGGWVinSqhkjgJ
QbRDts3RYVoUHwrAmT9wDskx9j8Qr43Taw4dCeoVH22g2CxIi5JEc2lmQQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFLPqPX0LUF+YqNF2XJ39JFT78+bSMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvcy1vOWZRdFFYNWlvMFhaY25mMGtWUHZ6NXRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAl/IpAwQA
l/I6AwQBl/LIAwQCl/OkAwQDl/WwAwQEl/XgMA0GCSqGSIb3DQEBCwUAA4IBAQCA
cfOXPuvJhRzAHNN+iyl5Hkh5TcKAtlvAS8PwpImPa0wRCVdGMHJ8Ge54s3mqvhY3
NZ6NV6fH8lgCpUJjEqTXO/sJqNyTicZmb1pIUy/QvQwK82UzO0FJdX2r8pxsQCFD
XMj33NDvekgSR1AfvYIw+tgO+OlOhWyD/lGKMovPKhvJ9GtiqCcQ8IX38j/NEVq6
EgiIvTqt1DL11Ywhdxwz5RW+ZgZ85yjsrsUqCilYzaywtQT7wifzNyDoT4CgXBwn
uIWWoMVvb1h5LC9bfNQori6scEepJaHWcBixl8cJs9csV9uqTINNPOhXql5vDzLU
teABO4R3xwRl6v96kU0P
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:38:03 2025 by rpki-client