Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BZqGuczUxAGi4dojoi1KO7NNREk.roa
File: BZqGuczUxAGi4dojoi1KO7NNREk.roa (raw, json)
Hash identifier: vWXkOoKcR5xqANBp+G4qgJqpnoASriCQKIEa6RgwLRs=
Subject key identifier: 05:9A:86:B9:CC:D4:C4:01:A2:E1:DA:23:A2:2D:4A:3B:B3:4D:44:49
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019699CE371A87ECE538E8F7EF7CAA23E52C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BZqGuczUxAGi4dojoi1KO7NNREk.roa
Signing time: Sun 04 May 2025 05:39:10 +0000
ROA not before: Sun 04 May 2025 05:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 151.242.40.0/24 maxlen: 24
151.242.170.0/24 maxlen: 24
151.242.171.0/24 maxlen: 24
151.242.172.0/24 maxlen: 24
151.242.173.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.60.0/24 maxlen: 24
151.243.61.0/24 maxlen: 24
151.243.62.0/24 maxlen: 24
151.243.63.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 03:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:ce:37:1a:87:ec:e5:38:e8:f7:ef:7c:aa:23:e5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 4 05:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=059a86b9ccd4c401a2e1da23a22d4a3bb34d4449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:f6:3b:9a:e1:e0:04:bd:8f:2f:53:99:b4:
f7:f6:13:4f:97:bf:eb:42:eb:a0:6c:fd:b5:0f:cd:
ca:08:92:1c:e6:3e:8d:af:4d:b2:f0:b1:4d:c7:96:
b0:14:a7:81:2f:10:2c:0c:f8:99:b8:c8:1a:40:93:
48:de:aa:58:bf:eb:92:c7:65:5a:d1:67:5e:f4:06:
ef:4a:6f:3b:cf:5b:71:b3:61:91:74:29:a3:22:5b:
aa:c5:0c:84:9b:fa:3e:7b:83:73:61:a2:33:09:bd:
30:4f:08:8e:24:1e:c1:fd:c3:aa:79:ed:20:1b:5c:
13:fb:0b:ee:cf:94:1d:66:86:29:1a:bc:08:d6:35:
e6:0a:34:c8:56:d3:5b:d1:29:6e:2a:98:49:6a:4e:
90:3d:93:28:b0:84:a3:30:ee:69:33:e3:37:08:83:
b2:93:ad:80:03:f9:3d:c1:8d:12:eb:4a:6d:d8:3b:
cf:62:50:6f:a4:42:20:0a:6b:2e:f8:bc:b5:8b:ae:
08:93:6a:d1:08:a5:8d:3b:5c:0e:45:3c:ae:db:03:
eb:cd:37:1a:d8:74:c0:8c:a1:99:bd:9a:bb:3e:4c:
7d:6f:ba:6a:82:15:f6:b9:ca:5f:ab:96:cc:93:bb:
c7:61:e1:d5:69:24:49:9c:19:55:b5:c6:2e:47:97:
0f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9A:86:B9:CC:D4:C4:01:A2:E1:DA:23:A2:2D:4A:3B:B3:4D:44:49
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BZqGuczUxAGi4dojoi1KO7NNREk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.40.0/24
151.242.170.0-151.242.173.255
151.242.242.0/24
151.243.60.0/22
151.243.88.0/23
151.243.115.0/24
151.243.120.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
Signature Algorithm: sha256WithRSAEncryption
04:8c:5b:0e:5e:1a:92:4e:47:c2:9d:ae:02:9a:23:8d:17:84:
ac:34:9a:99:1f:1d:a5:39:2c:d9:2e:4e:5a:72:d6:08:78:d5:
16:0c:6c:0f:4f:fe:4c:9b:0f:2b:de:6a:54:93:86:15:ae:cd:
d2:bf:3e:6a:78:f8:4b:c6:75:58:99:3d:a1:da:cb:99:51:35:
8a:1b:4d:3e:70:16:ac:d9:48:87:82:86:20:81:70:26:8c:b2:
80:bb:5e:d5:f9:90:cd:19:a4:30:26:e2:41:7d:1d:42:0c:70:
bc:11:4d:db:f5:76:95:6e:21:d7:7c:07:56:f7:b5:a6:3b:83:
62:87:49:99:97:ae:aa:18:51:b7:37:f9:16:29:bd:c1:9e:9d:
ef:a2:58:cb:75:46:aa:2a:e2:cc:c9:f9:4b:bd:0d:bb:04:05:
b1:29:62:d2:d7:ad:d7:35:b8:1e:a7:91:8b:ad:14:69:e9:71:
4f:66:5b:5c:f5:cc:9d:60:d0:f2:7c:7b:76:52:02:ad:f2:63:
a8:82:af:0a:f8:36:58:6d:f0:13:53:21:e8:5b:a1:44:8e:cb:
ba:88:aa:1d:23:cd:60:43:78:03:35:d5:15:e4:c5:28:36:ea:
16:2a:4e:44:09:e7:2a:0f:7d:b8:af:7c:3a:6e:5c:bc:ee:d7:
4c:1b:3b:88
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZaZzjcah+zlOOj373yqI+UsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTA0MDUzOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTlhODZiOWNjZDRjNDAxYTJlMWRhMjNhMjJkNGEzYmIzNGQ0NDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmv2O5rh4AS9jy9TmbT39hNPl7/r
QuugbP21D83KCJIc5j6Nr02y8LFNx5awFKeBLxAsDPiZuMgaQJNI3qpYv+uSx2Va
0Wde9AbvSm87z1txs2GRdCmjIluqxQyEm/o+e4NzYaIzCb0wTwiOJB7B/cOqee0g
G1wT+wvuz5QdZoYpGrwI1jXmCjTIVtNb0SluKphJak6QPZMosISjMO5pM+M3CIOy
k62AA/k9wY0S60pt2DvPYlBvpEIgCmsu+Ly1i64Ik2rRCKWNO1wORTyu2wPrzTca
2HTAjKGZvZq7Pkx9b7pqghX2ucpfq5bMk7vHYeHVaSRJnBlVtcYuR5cPgQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFAWahrnM1MQBouHaI6ItSjuzTURJMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQlpxR3VjelV4QUdpNGRvam9pMUtPN05OUkVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQAl/IoMAwD
BAGX8qoDBAGX8qwDBACX8vIDBAKX8zwDBAGX81gDBACX83MDBACX83gwDAMEApf0
BAMEAJf0BgMEAJf0OAMEAJf0OjANBgkqhkiG9w0BAQsFAAOCAQEABIxbDl4akk5H
wp2uApojjReErDSamR8dpTks2S5OWnLWCHjVFgxsD0/+TJsPK95qVJOGFa7N0r8+
anj4S8Z1WJk9odrLmVE1ihtNPnAWrNlIh4KGIIFwJoyygLte1fmQzRmkMCbiQX0d
QgxwvBFN2/V2lW4h13wHVve1pjuDYodJmZeuqhhRtzf5Fim9wZ6d76JYy3VGqiri
zMn5S70NuwQFsSli0tet1zW4HqeRi60UaelxT2ZbXPXMnWDQ8nx7dlICrfJjqIKv
Cvg2WG3wE1Mh6FuhRI7LuoiqHSPNYEN4AzXVFeTFKDbqFipORAnnKg99uK98Om5c
vO7XTBs7iA==
-----END CERTIFICATE-----
Generated at Thu Jun 12 09:19:01 2025 by rpki-client