Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zz0Y7mJnucFBEz-uEbyK_eaKNXg.roa
File: zz0Y7mJnucFBEz-uEbyK_eaKNXg.roa (raw, json)
Hash identifier: NHuagzd43yF5dr3e5eJlJ7rjDjJ0G/F0SBl455fQyUM=
Subject key identifier: CF:3D:18:EE:62:67:B9:C1:41:13:3F:AE:11:BC:8A:FD:E6:8A:35:78
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019786E9923E09B54BAB8D846468504EE4B3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zz0Y7mJnucFBEz-uEbyK_eaKNXg.roa
Signing time: Thu 19 Jun 2025 06:39:03 +0000
ROA not before: Thu 19 Jun 2025 06:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jun 2025 07:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:e9:92:3e:09:b5:4b:ab:8d:84:64:68:50:4e:e4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 19 06:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf3d18ee6267b9c141133fae11bc8afde68a3578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:ee:3c:2d:40:9a:54:e2:92:43:fa:cc:3b:
0b:2c:15:6d:66:16:fc:62:7e:de:47:04:04:77:41:
f6:ab:9e:4f:ee:da:3d:f8:4f:40:79:ec:66:11:f3:
ba:25:be:31:60:f5:29:8d:ae:ee:3a:9e:20:c4:63:
e0:45:0b:af:3f:2f:f0:60:c4:9c:5f:4d:1b:f5:d5:
97:b9:ba:a3:6b:08:cf:5b:62:e6:d2:b8:94:7f:98:
28:f6:ff:19:ff:b1:85:1e:96:35:db:b6:3c:f0:2c:
e9:0d:c4:c6:d7:3b:1d:f2:eb:84:be:8e:50:81:9c:
ba:d3:c7:2f:59:73:a9:d7:61:65:57:0f:e1:04:1d:
bb:7c:a1:50:2c:bf:47:27:8d:ba:69:df:a0:02:da:
22:cb:46:21:cb:e3:6f:00:c7:4e:93:21:7a:83:18:
7f:dd:7d:71:48:b5:8f:39:78:88:c6:bf:46:be:5e:
3d:5b:8a:fd:a1:3f:01:96:09:52:d9:6e:e4:e3:38:
35:e7:02:4b:bc:7a:98:ed:fe:6c:6d:0d:97:47:de:
ec:7c:93:b6:23:73:06:42:b2:1b:23:7a:5f:7d:36:
77:cc:ae:68:d9:ea:ab:77:f8:f4:f6:e3:69:d6:59:
b5:84:82:be:82:de:e8:a7:1f:ed:d6:af:aa:20:1f:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3D:18:EE:62:67:B9:C1:41:13:3F:AE:11:BC:8A:FD:E6:8A:35:78
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zz0Y7mJnucFBEz-uEbyK_eaKNXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.40.0/24
151.242.64.0/24
151.242.242.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
17:5b:8f:2a:26:79:90:6d:14:29:71:a1:8b:82:1c:7b:99:51:
14:e7:45:1e:12:7c:7d:bc:ed:ec:31:65:cc:57:6c:4a:fb:13:
5a:51:a1:92:fa:cd:f5:94:eb:e8:29:01:21:4f:99:5b:6c:78:
46:19:5d:6f:8d:ad:61:ef:99:d9:18:c5:69:3c:c2:c3:15:a3:
ec:3f:be:08:a8:dc:d7:17:2a:99:70:09:89:bd:ec:65:68:f0:
53:71:11:61:bb:26:e4:b4:66:2b:7f:39:0d:d2:87:c7:a7:48:
11:fa:c1:9b:8c:29:1c:27:6c:6c:68:29:e4:b6:a2:59:0c:f8:
f2:91:3d:2c:1c:e1:44:a7:86:dd:98:54:76:08:97:84:6c:f5:
5f:e7:50:fe:bb:ef:c5:52:37:a4:c8:dd:cf:83:f9:d1:01:81:
65:17:5c:8c:3c:af:ae:49:a5:59:65:6b:39:00:53:2e:7b:28:
5f:60:bd:f6:98:4c:80:b3:24:2d:ba:35:7b:b7:01:5a:bc:24:
75:7f:bd:81:2c:de:9b:33:37:8e:8d:34:54:9f:cb:fb:0d:25:
0c:77:77:c9:08:f9:a7:e2:9b:13:77:48:55:b6:f7:2c:5d:c8:
00:48:61:9f:c2:34:b4:d5:7f:ee:15:60:c7:fb:3b:65:ed:cc:
a5:c5:11:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:36:23 2025 by rpki-client