Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CbNQz_ep3DgRM7Hjfc-WGf6E6cU.roa
File: CbNQz_ep3DgRM7Hjfc-WGf6E6cU.roa (raw, json)
Hash identifier: qcfrXRvRvd6pqykwx3oVj07WdcqKZ0VbTNq2NpkFxZQ=
Subject key identifier: 09:B3:50:CF:F7:A9:DC:38:11:33:B1:E3:7D:CF:96:19:FE:84:E9:C5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196F92F1970EA1B2A0580385EB989DB6088
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CbNQz_ep3DgRM7Hjfc-WGf6E6cU.roa
Signing time: Thu 22 May 2025 18:08:55 +0000
ROA not before: Thu 22 May 2025 18:08:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 151.240.75.0/24 maxlen: 24
151.242.108.0/24 maxlen: 24
151.243.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 08:25:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:2f:19:70:ea:1b:2a:05:80:38:5e:b9:89:db:60:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 18:08:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09b350cff7a9dc381133b1e37dcf9619fe84e9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ef:36:00:1c:66:93:92:0b:8a:33:52:24:cd:
62:47:63:81:79:f3:76:ef:43:f9:45:11:10:cf:6b:
09:18:b4:fa:32:fe:aa:70:97:46:7d:9b:f0:80:bd:
99:3e:2a:67:7d:c5:34:48:c7:4e:fc:f2:2a:ad:c3:
1c:af:c6:fe:96:47:39:9a:d3:a6:ac:14:fd:c6:6c:
52:16:9d:2b:c9:eb:aa:6b:41:a8:82:59:d3:45:7e:
ec:fd:28:fb:c9:d7:83:35:1c:c7:36:84:56:3c:d3:
3e:51:91:ea:17:c3:61:f7:6c:31:b1:c4:b2:e4:56:
8c:b1:b5:db:ec:81:dd:ed:f5:84:b5:2d:05:a6:cc:
9a:eb:43:bd:f6:54:9c:39:c2:52:5a:b5:3a:c0:08:
6e:13:1d:f0:b3:39:76:d3:2c:10:6e:7c:7a:ca:71:
6e:81:c1:27:49:2d:af:6e:e5:47:e2:b6:0b:79:e6:
41:9e:f6:db:7a:e4:ed:d1:98:83:24:6e:0e:72:88:
fc:c3:2f:62:54:23:db:b6:9f:a9:ef:3c:46:04:93:
31:7b:85:33:e7:5a:eb:21:2e:a7:de:12:59:f2:c4:
97:94:a7:dc:7e:b1:6d:0d:a0:df:b2:10:2c:3d:91:
bd:15:be:a6:af:46:2b:d3:6c:fe:8e:e0:96:26:c0:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B3:50:CF:F7:A9:DC:38:11:33:B1:E3:7D:CF:96:19:FE:84:E9:C5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CbNQz_ep3DgRM7Hjfc-WGf6E6cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.75.0/24
151.242.108.0/24
151.243.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:66:a2:ea:98:31:b1:e4:5d:49:53:c9:87:e3:79:a5:3e:4b:
f8:1a:5d:d2:f5:d9:a4:66:ae:2e:0d:53:f2:d9:a0:99:e8:3e:
40:93:34:e0:b4:21:f1:63:6a:8c:0a:d3:c4:4d:81:89:a5:ad:
7a:e9:47:f8:40:4f:09:30:ef:9e:be:92:04:af:c8:cb:df:36:
67:fc:bb:58:92:d0:57:4f:20:50:08:67:fd:82:70:3e:9e:c8:
e5:87:c9:9a:0d:7e:04:da:f2:99:cf:20:71:57:12:34:c9:6c:
fa:08:11:f3:9d:b1:26:d6:92:50:5f:36:17:3c:2d:6a:92:e1:
15:26:98:8c:6e:c8:77:40:0d:1a:ed:02:c7:65:e5:13:77:21:
e8:03:77:17:9f:11:ff:6b:be:99:9e:2b:64:0f:1b:07:9c:ab:
0b:3a:6f:d9:b7:6f:61:e0:a3:26:a3:98:fc:19:e1:fa:2b:62:
81:5c:88:e5:e5:63:37:e7:e0:60:ed:8c:ef:12:db:37:52:53:
0f:1c:94:f2:5a:31:d2:ac:4d:43:12:b7:47:59:5a:1b:87:d5:
0c:c3:cd:51:1c:90:b6:87:83:bd:c2:f2:59:14:f9:02:30:12:
e5:66:a6:0b:e6:75:59:71:b6:bd:c4:eb:e1:ca:e3:9d:08:17:
8c:41:32:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:02:07 2025 by rpki-client