Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uaoovUHJUBLv8JYh9omGP2QJjug.roa
File: uaoovUHJUBLv8JYh9omGP2QJjug.roa (raw, json)
Hash identifier: +sKE7PHzqAcf+LiLj+0h8H8xNi8kbibP/jCr5nU4AJ0=
Subject key identifier: B9:AA:28:BD:41:C9:50:12:EF:F0:96:21:F6:89:86:3F:64:09:8E:E8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D951C14CD6B34EC1DE86AEE643F82335
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uaoovUHJUBLv8JYh9omGP2QJjug.roa
Signing time: Sat 05 Jul 2025 06:41:43 +0000
ROA not before: Sat 05 Jul 2025 06:41:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.128.0/24 maxlen: 24
151.244.129.0/24 maxlen: 24
151.244.130.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Jul 2025 11:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:51:c1:4c:d6:b3:4e:c1:de:86:ae:e6:43:f8:23:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 5 06:41:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9aa28bd41c95012eff09621f689863f64098ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fe:a2:8a:cf:1a:96:88:b9:3c:96:76:6c:28:
ff:c5:2f:80:41:7b:62:74:16:0a:39:e8:fa:a3:12:
96:ba:e2:45:ab:3a:8f:c0:43:74:ac:19:3f:b3:1f:
40:d9:f6:b5:74:ba:fe:93:be:fd:50:b8:51:73:e7:
f9:c9:88:70:18:e6:7a:63:3f:d4:63:7d:e3:69:a8:
f0:66:a2:f9:ae:7d:53:c9:ba:40:6b:e3:d6:c9:f9:
f3:4b:55:6d:9d:46:60:dd:68:2e:73:39:01:1e:fe:
76:b9:94:86:1b:b7:ae:8c:d3:f7:8e:95:3e:55:f0:
77:b8:70:f9:94:fe:00:63:4a:31:8c:3e:47:2f:dc:
55:33:eb:89:89:63:2a:74:d3:b4:39:f9:c8:c9:35:
65:68:86:2e:d3:3b:8e:e5:0b:ec:cd:bd:7e:e0:f5:
fd:39:9b:8b:4d:70:66:08:ec:43:d3:a8:63:ca:45:
4d:20:7c:e6:f6:72:50:c2:ea:d3:fd:85:65:c7:b3:
08:41:02:07:ef:a9:e6:90:e8:a5:9f:d8:b0:6f:f2:
fd:48:e1:3f:ce:40:86:04:23:35:22:75:99:7f:81:
38:e8:23:e1:3e:46:0f:0e:ba:c5:c0:29:48:9b:1d:
72:eb:c8:3f:1f:3e:b8:5c:56:62:1a:ca:b4:8c:88:
68:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AA:28:BD:41:C9:50:12:EF:F0:96:21:F6:89:86:3F:64:09:8E:E8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uaoovUHJUBLv8JYh9omGP2QJjug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.4.0/24
151.242.14.0/24
151.242.17.0/24
151.242.32.0/24
151.242.40.0/24
151.242.64.0/24
151.242.78.0/23
151.242.82.0/24
151.242.139.0/24
151.242.242.0/24
151.243.44.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.128.0-151.244.130.255
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
47:f1:f1:f8:58:0a:e1:01:9b:96:de:52:db:43:fa:3a:aa:06:
54:83:54:b9:09:5a:a4:b4:1b:67:7a:1f:63:8f:91:0b:4c:25:
17:2e:0d:f7:aa:3f:79:a7:2b:33:fc:b8:ed:fb:8c:90:51:90:
23:c8:19:dc:90:62:3d:a9:79:2a:5c:b8:d0:d8:9f:da:d4:93:
49:04:0f:3f:5f:e7:cc:f8:69:9b:3c:7b:d9:3c:b8:75:5f:71:
50:a6:14:3e:c4:2b:e1:a6:95:26:3d:e1:cd:20:b1:35:52:fc:
51:13:77:73:39:68:a8:cc:89:e8:88:85:da:59:8e:4b:ae:e6:
5c:61:da:8d:f1:c5:76:77:01:e0:2a:98:82:80:2a:d0:d1:dc:
0f:0d:d4:33:b2:b7:cd:55:e4:eb:f0:ef:a8:ad:3b:71:b7:72:
89:c6:6e:36:c8:f1:e6:36:fc:d2:f1:48:0b:eb:93:62:cf:1e:
b3:53:3b:83:d2:ef:ed:a6:51:2c:b7:a4:b5:ac:e4:1f:10:27:
b4:f3:26:80:1c:b3:0b:16:b9:f3:79:3e:07:d9:a4:70:5b:4e:
c7:ac:54:cd:97:a5:99:45:26:f7:a1:02:e7:13:3e:bb:68:5c:
3e:d3:16:06:bf:27:aa:a7:26:39:74:39:14:d1:a9:af:58:b6:
7e:05:d4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:33:53 2025 by rpki-client