Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wePBS-n8btrt-O_GY-5oKgGde5o.roa
File: wePBS-n8btrt-O_GY-5oKgGde5o.roa (raw, json)
Hash identifier: wnjRUjJNqO0mFo5M+zfwP3RFWXHjTLO8761CpED8pv8=
Subject key identifier: C1:E3:C1:4B:E9:FC:6E:DA:ED:F8:EF:C6:63:EE:68:2A:01:9D:7B:9A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D952AAA4413A1E337F0EEEDE0FABF711
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wePBS-n8btrt-O_GY-5oKgGde5o.roa
Signing time: Sat 05 Jul 2025 06:42:42 +0000
ROA not before: Sat 05 Jul 2025 06:42:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.240.45.0/24 maxlen: 24
151.240.120.0/23 maxlen: 23
151.240.163.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.160.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.57.0/24 maxlen: 24
151.242.136.0/23 maxlen: 23
151.242.144.0/23 maxlen: 23
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.132.0/24 maxlen: 24
151.244.133.0/24 maxlen: 24
151.244.198.0/24 maxlen: 24
151.244.201.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.70.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.201.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Jul 2025 06:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:52:aa:a4:41:3a:1e:33:7f:0e:ee:de:0f:ab:f7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 5 06:42:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1e3c14be9fc6edaedf8efc663ee682a019d7b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:08:71:2c:44:e7:a0:1d:a9:45:3d:82:8b:
1c:0f:63:bb:1f:fe:49:0f:c0:52:9d:f6:ae:48:b2:
5c:8b:03:95:68:99:90:53:2c:ca:bf:fe:ce:2b:42:
bd:b4:20:f9:31:50:32:bc:42:77:33:a1:3c:bd:13:
00:b0:2d:90:3b:b6:0c:a4:2f:3a:e2:78:f3:9a:8e:
30:6b:fd:05:77:28:dc:77:62:7b:cc:38:0c:21:1e:
87:1f:8e:92:90:a0:c7:4d:11:44:3a:d7:27:bb:0a:
95:57:2b:22:9f:c2:78:62:7e:eb:a1:fd:9c:62:f2:
9d:73:08:57:9e:a5:8d:49:a9:77:25:29:14:de:db:
05:8c:11:c0:2c:6c:22:5a:bb:6a:98:9f:ca:df:79:
ec:72:1f:dc:dc:bd:db:e0:e0:25:c1:5e:33:e5:56:
87:70:f3:b4:02:aa:b6:cd:64:a2:f2:a7:5e:f4:76:
54:b7:6a:f0:40:48:72:df:cd:67:54:4e:00:d4:d6:
9d:4b:ba:6d:8d:b4:61:b2:e5:fa:3f:54:12:60:3b:
c4:ca:cc:d5:d2:15:4c:eb:21:6a:09:86:ef:9b:f9:
a0:2b:43:44:ca:74:4a:a4:42:ff:f5:62:13:38:a3:
db:b5:aa:eb:52:72:e3:a7:81:c6:cf:fa:ef:41:1d:
75:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E3:C1:4B:E9:FC:6E:DA:ED:F8:EF:C6:63:EE:68:2A:01:9D:7B:9A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wePBS-n8btrt-O_GY-5oKgGde5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.45.0/24
151.240.120.0/23
151.240.163.0/24
151.240.173.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.160.0/24
151.241.204.0/24
151.242.45.0/24
151.242.57.0/24
151.242.136.0/23
151.242.144.0/23
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.159.0/24
151.244.57.0/24
151.244.111.0/24
151.244.115.0/24
151.244.131.0-151.244.133.255
151.244.198.0/24
151.244.201.0/24
151.244.212.0/24
151.245.70.0/24
151.245.78.0/24
151.245.201.0/24
151.245.212.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:60:e2:09:ac:03:e7:0b:7e:7b:e9:b0:f4:1b:fe:a8:77:7e:
83:e2:05:8d:57:56:a6:f5:64:14:a7:33:30:d5:eb:05:ae:87:
2e:e0:1f:a3:17:e0:9a:1f:87:d6:22:aa:6f:31:71:cf:ad:5c:
e8:21:6c:9f:e8:43:6f:dd:6b:c3:b3:7c:65:0b:3a:20:c3:11:
ee:41:60:af:63:ef:c1:42:8b:cd:5b:21:03:52:88:62:b6:ec:
f7:d5:44:3f:d0:00:84:3d:81:90:dd:b7:bf:50:60:5e:a8:49:
d9:0c:a2:d8:f6:2e:54:4a:1a:75:13:13:f1:e4:ec:f9:81:8f:
bb:c6:75:2c:e4:1e:5c:15:5e:34:d5:3f:63:d7:ce:bc:75:84:
aa:61:65:20:ee:a2:aa:0d:60:dd:5f:bc:b2:a8:b0:9d:f8:1d:
c8:b9:4a:9f:7e:e4:ce:69:7b:f8:35:65:cb:fd:9e:ad:2a:8c:
3f:7d:cc:e7:a2:fa:be:da:5b:38:b8:2d:0d:80:dd:5b:61:08:
dc:da:da:81:55:53:a7:e2:93:29:6c:c5:19:78:3e:d5:cc:d8:
71:fc:c5:f9:2b:c0:27:96:1d:71:ae:47:8f:03:16:d9:af:4d:
43:2d:0b:75:b0:4b:26:64:cc:c1:85:df:20:74:52:e6:b3:43:
78:92:6c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:16:15 2025 by rpki-client