Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8bwCWjPPt5KvGN-jHZSInkXn_zo.roa
File: 8bwCWjPPt5KvGN-jHZSInkXn_zo.roa (raw, json)
Hash identifier: bAkShYsgwAALGCZaywXU/4fVYjk3xkyUbHTEY9S1fko=
Subject key identifier: F1:BC:02:5A:33:CF:B7:92:AF:18:DF:A3:1D:94:88:9E:45:E7:FF:3A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196F12E63DDFC2EF39DBFA1C50D4DCDAC1E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8bwCWjPPt5KvGN-jHZSInkXn_zo.roa
Signing time: Wed 21 May 2025 04:51:11 +0000
ROA not before: Wed 21 May 2025 04:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.15.0/24 maxlen: 24
151.242.23.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.75.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.80.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.170.0/24 maxlen: 24
151.242.171.0/24 maxlen: 24
151.242.172.0/24 maxlen: 24
151.242.173.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.38.0/24 maxlen: 24
151.243.41.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 18:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f1:2e:63:dd:fc:2e:f3:9d:bf:a1:c5:0d:4d:cd:ac:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 21 04:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1bc025a33cfb792af18dfa31d94889e45e7ff3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:8a:d2:1e:55:aa:d3:0d:a6:aa:02:bd:1e:
7d:c1:d3:da:e5:a2:c9:1c:41:fa:fe:6c:79:a1:a4:
ad:4b:36:24:31:c2:7e:c1:23:07:31:4a:94:8d:9a:
80:83:61:cc:43:46:0c:25:3b:5f:59:c5:d3:e9:bd:
45:66:69:0b:b8:b7:9f:ca:bb:1e:e6:22:41:35:03:
02:b9:22:3c:e2:19:34:90:11:0c:90:e8:46:9d:a3:
96:73:e7:29:c1:38:53:32:95:d2:6e:c6:0a:b6:1b:
54:38:cb:25:8b:7f:f7:cd:a7:5d:f9:2a:e5:e2:25:
97:80:3a:c7:ad:bf:9c:f4:c8:89:fb:1f:27:f0:5b:
e4:4b:59:1b:c5:9e:6e:74:5c:00:23:ec:b5:a0:61:
b3:55:9c:60:9a:2b:cf:42:3f:56:71:a3:9a:d4:49:
b3:03:7c:b5:7b:8d:38:b6:9a:58:4f:59:17:1b:04:
54:ec:47:f1:90:0c:f9:ac:dd:d1:92:36:98:9d:45:
89:1e:1d:d4:f6:b1:bb:61:df:3d:f3:cf:d5:06:8b:
61:f6:99:57:9a:66:2a:f6:d9:20:0b:02:02:2b:59:
57:51:90:10:85:ee:f0:b6:4d:2c:7a:97:83:04:2e:
ac:ed:2f:37:89:9d:34:aa:9b:d5:5d:49:22:5e:23:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BC:02:5A:33:CF:B7:92:AF:18:DF:A3:1D:94:88:9E:45:E7:FF:3A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8bwCWjPPt5KvGN-jHZSInkXn_zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.15.0/24
151.242.23.0/24
151.242.40.0/24
151.242.73.0-151.242.82.255
151.242.170.0-151.242.173.255
151.242.242.0/24
151.243.35.0/24
151.243.38.0/24
151.243.41.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:87:f7:35:42:1f:db:ac:81:87:97:94:70:e0:99:2b:6d:02:
6f:81:dc:5b:74:bd:e4:45:03:e4:1e:f5:b0:94:6f:9a:9d:b7:
68:9c:3b:b9:74:80:0c:84:81:ee:55:28:32:0a:e7:b8:f9:56:
f6:05:98:1b:b7:d7:11:6f:8c:f6:80:a9:79:33:e4:c4:0b:75:
3a:dd:69:48:dd:c8:5e:03:d1:36:32:3b:c2:5f:e7:a3:6e:bf:
6a:2d:08:59:0f:d7:6a:05:dc:9c:03:ed:f4:02:11:23:d9:bd:
52:d8:88:e2:2a:73:e3:f1:3f:e3:71:de:80:56:13:fc:ff:36:
fa:63:4e:54:19:ea:e1:d4:85:3e:64:2f:cb:1a:aa:eb:a5:a2:
02:1a:27:46:51:21:0a:ac:6d:ef:18:53:0a:78:6f:84:b4:f9:
46:ed:29:2d:bd:ac:51:e3:31:41:97:7e:b0:b6:4a:83:24:f7:
ab:f2:17:70:06:4a:49:b5:ae:2c:3c:af:af:3e:47:f1:33:03:
8a:4c:55:96:f3:1e:83:6f:72:9d:8e:b5:e3:78:eb:ac:34:ab:
f8:3b:b1:12:7a:ca:81:be:f7:bf:d2:07:1b:55:55:ed:f9:10:
e4:f7:6a:12:5b:78:4f:e5:30:0b:57:d5:38:cb:31:eb:ad:cc:
e5:fc:6a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:41:51 2025 by rpki-client