Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EXim4eIRGir4s2P2-YqQc7ocI3E.roa
File: EXim4eIRGir4s2P2-YqQc7ocI3E.roa (raw, json)
Hash identifier: VsWgxSTRWM5zpeQyJZD/ed30OIEbrYzrsGaubH2GFXs=
Subject key identifier: 11:78:A6:E1:E2:11:1A:2A:F8:B3:63:F6:F9:8A:90:73:BA:1C:23:71
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01969E84E0854520AF19E2DC1D95DA80E859
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EXim4eIRGir4s2P2-YqQc7ocI3E.roa
Signing time: Mon 05 May 2025 03:37:10 +0000
ROA not before: Mon 05 May 2025 03:37:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.240.45.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.57.0/24 maxlen: 24
151.242.158.0/24 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 22
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 12:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:84:e0:85:45:20:af:19:e2:dc:1d:95:da:80:e8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 5 03:37:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1178a6e1e2111a2af8b363f6f98a9073ba1c2371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:44:9a:a9:66:94:c5:97:8c:eb:e3:e5:4a:
f5:f8:1c:43:05:db:3b:39:ba:97:2e:0e:46:04:c4:
b7:32:c5:7c:cf:e2:44:c9:b8:30:f2:30:c0:7b:cd:
15:be:07:c4:f4:88:c2:6c:35:44:9b:2b:e3:5b:fe:
a1:f7:9e:02:88:f1:ed:72:9a:30:6b:08:62:ac:6e:
29:71:1f:9f:c3:c3:e7:b5:73:ad:eb:0e:23:39:14:
be:6c:85:70:c3:07:f6:4c:ad:c9:cf:c4:33:40:13:
e6:f8:12:76:54:35:41:e8:e4:14:dc:37:8a:4f:30:
88:74:56:d8:38:be:98:5f:a1:12:ca:01:dd:60:62:
14:f1:da:c7:c6:79:92:fe:0b:67:b5:f8:46:a0:25:
5b:e5:e6:d4:6d:a7:9a:91:58:64:65:0c:78:d7:9f:
5f:70:bb:f7:04:ef:49:cc:47:1d:a9:5e:55:6e:08:
6f:8f:15:f6:e3:ff:32:d2:c9:4e:67:3d:ab:6c:32:
eb:ae:2f:24:5c:d5:a0:dc:f0:4f:e3:58:42:f2:a9:
d2:b3:61:9d:ef:4e:69:2a:e3:b4:55:04:0f:75:c1:
ca:38:b5:1c:ff:ba:40:f9:ae:48:f1:a6:c2:9a:5b:
d1:51:3c:3a:45:fa:9c:31:75:bb:bb:2e:75:17:eb:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:78:A6:E1:E2:11:1A:2A:F8:B3:63:F6:F9:8A:90:73:BA:1C:23:71
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EXim4eIRGir4s2P2-YqQc7ocI3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.45.0/24
151.242.45.0/24
151.242.57.0/24
151.242.158.0/24
151.242.200.0/21
151.243.105.0/24
151.243.159.0/24
151.244.57.0/24
151.244.111.0/24
Signature Algorithm: sha256WithRSAEncryption
49:8d:ee:98:b8:a8:5f:fd:e9:87:c1:25:2f:d6:d8:4d:f5:da:
de:6d:dc:9f:30:42:1d:c9:cb:d9:52:db:88:53:14:ac:1d:53:
c2:39:80:4e:7c:2e:43:3e:da:5c:c3:72:8f:a3:1a:fd:f3:3d:
37:d5:c6:2d:64:d1:72:82:9f:f5:cb:9e:7e:ab:77:55:d9:07:
e5:d6:cf:79:64:ed:9a:98:87:c1:34:8c:50:6b:08:31:d0:35:
42:00:fb:d1:49:42:75:9f:4d:5e:bf:19:38:90:d7:a5:42:a2:
6a:42:90:c3:8e:4e:9f:45:81:c4:69:e3:65:f2:32:20:0c:02:
b5:23:ac:45:f3:36:18:3a:d7:63:b4:90:0d:f0:62:e9:82:b8:
0c:b4:a4:3c:8f:85:72:94:9f:ea:6d:85:a0:93:af:d6:9f:81:
7f:52:23:90:bb:75:83:f9:3a:5d:88:f5:b1:79:97:04:0a:c8:
29:bf:dc:76:ff:f7:63:fe:bc:09:29:6e:19:f4:aa:38:98:d9:
8f:67:5f:53:de:07:51:6f:88:a2:c5:53:b7:94:1c:da:34:af:
9b:5e:5b:bf:53:8f:9d:88:cc:42:88:41:0e:d8:0f:65:c3:76:
f9:f4:bb:32:e4:bd:78:f3:58:e6:5b:7f:19:51:3f:35:4c:b8:
07:18:94:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:23:08 2025 by rpki-client