Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tZe4lQ5bxUh2o_9eA4Kef02uFTQ.roa
File: tZe4lQ5bxUh2o_9eA4Kef02uFTQ.roa (raw, json)
Hash identifier: UV952AGTpUJHcOhEhRrCi+NNMiPN7S/J4oJ0294L9YQ=
Subject key identifier: B5:97:B8:95:0E:5B:C5:48:76:A3:FF:5E:03:82:9E:7F:4D:AE:15:34
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D951C22E79B34852E63E7D9BBA64096E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tZe4lQ5bxUh2o_9eA4Kef02uFTQ.roa
Signing time: Sat 05 Jul 2025 06:41:43 +0000
ROA not before: Sat 05 Jul 2025 06:41:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.128.0/24 maxlen: 24
151.244.129.0/24 maxlen: 24
151.244.130.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Jul 2025 11:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:51:c2:2e:79:b3:48:52:e6:3e:7d:9b:ba:64:09:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 5 06:41:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b597b8950e5bc54876a3ff5e03829e7f4dae1534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:25:09:63:57:25:c5:dd:62:55:ad:61:ad:
bb:77:b5:dd:c2:a1:bf:06:59:cf:cd:3f:3c:0e:32:
64:70:0b:0b:e9:7d:2f:7f:5e:35:fd:20:bc:e8:2b:
b8:83:56:cb:d7:b5:0f:4d:a9:f0:3c:56:e8:3d:9a:
0b:69:fd:e6:15:4e:b5:8f:47:43:1a:a3:a0:da:07:
f1:8e:bd:31:de:7f:fd:5a:79:e4:db:19:5f:ff:e2:
a2:61:f5:c4:6c:85:9c:c2:f6:2b:ed:eb:08:23:38:
3a:57:ff:c7:c4:3e:f2:09:81:e0:60:40:f2:47:60:
fe:b9:63:c4:37:04:0f:6c:46:10:aa:7b:a4:ba:cb:
cc:82:ce:bd:fe:86:61:60:02:c5:1d:6d:39:05:dc:
52:f9:5a:11:a1:34:3f:b8:74:9f:31:68:c5:05:86:
d5:e8:d6:95:0a:16:7b:14:e8:60:27:d7:61:6b:64:
b4:ff:54:ca:19:4a:03:f0:48:fb:ae:15:85:44:8f:
8f:08:eb:50:42:a3:d3:ce:a3:9c:93:fb:bf:51:03:
ac:39:95:56:63:ec:e6:86:9f:c6:06:59:4a:af:bb:
5d:0f:63:3d:3a:52:50:3e:66:88:ec:46:f0:01:25:
7b:9d:60:8b:a9:3f:74:04:88:73:e9:b8:6c:38:06:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:97:B8:95:0E:5B:C5:48:76:A3:FF:5E:03:82:9E:7F:4D:AE:15:34
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tZe4lQ5bxUh2o_9eA4Kef02uFTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.4.0/24
151.242.14.0/24
151.242.17.0/24
151.242.32.0/24
151.242.40.0/24
151.242.64.0/24
151.242.78.0/23
151.242.82.0/24
151.242.139.0/24
151.242.242.0/24
151.243.44.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.128.0-151.244.130.255
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
18:a9:29:74:b5:f5:6c:0b:3f:92:57:d8:e4:b0:6b:56:b3:ee:
11:64:88:cc:e7:8e:20:4e:a0:24:65:6e:fa:98:74:e5:8f:29:
2b:8b:c0:d4:c2:3c:b8:48:18:83:05:76:6c:07:62:29:07:b3:
05:ca:fd:63:2b:5c:fe:f7:ed:49:25:a6:09:64:1c:8a:cd:6b:
d0:53:35:3f:ea:99:c5:6b:f4:74:52:9d:ac:40:4e:05:15:22:
d8:9f:40:fa:86:86:62:99:c1:a1:ed:36:c1:65:aa:99:f7:92:
df:cd:c9:69:83:cf:fc:e3:bd:49:20:b1:c6:08:36:00:4c:d0:
21:9d:7c:a0:fd:1b:cb:57:f7:6d:14:2b:b2:e7:f4:5e:db:c1:
e5:0e:2b:8e:9c:50:dd:6b:5c:ba:21:ba:9a:83:8e:ec:84:ae:
f4:d6:7b:f9:d8:8f:30:d4:16:f5:0f:42:5e:9d:16:f2:5d:7c:
00:e5:a9:00:43:82:8e:12:15:26:d4:cb:92:2b:45:bc:cb:3b:
99:50:94:2c:2f:94:13:09:26:9f:66:15:74:79:3c:d3:ce:ad:
43:68:9f:b3:6a:55:2b:1a:a2:b7:8a:05:79:1e:68:a7:7c:46:
2c:b9:1a:a1:96:78:97:8c:53:da:f4:1f:6e:55:c9:67:50:a8:
c2:4f:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:07:50 2025 by rpki-client