Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Fv7MMMULwD6ZjFBI_Tdk2iNqvho.roa
File: Fv7MMMULwD6ZjFBI_Tdk2iNqvho.roa (raw, json)
Hash identifier: QGq+8kShXrRGZdO0nNuA7eXhHRTFc3oRqBBX4Be3yvw=
Subject key identifier: 16:FE:CC:30:C5:0B:C0:3E:99:8C:50:48:FD:37:64:DA:23:6A:BE:1A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019699CE37EF1E44346A11F94167513F2641
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Fv7MMMULwD6ZjFBI_Tdk2iNqvho.roa
Signing time: Sun 04 May 2025 05:39:10 +0000
ROA not before: Sun 04 May 2025 05:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.242.15.0/24 maxlen: 24
151.242.23.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.75.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.80.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.170.0/24 maxlen: 24
151.242.171.0/24 maxlen: 24
151.242.172.0/24 maxlen: 24
151.242.173.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.4.0/24 maxlen: 24
151.243.5.0/24 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.38.0/24 maxlen: 24
151.243.41.0/24 maxlen: 24
151.243.52.0/24 maxlen: 24
151.243.53.0/24 maxlen: 24
151.243.60.0/24 maxlen: 24
151.243.61.0/24 maxlen: 24
151.243.62.0/24 maxlen: 24
151.243.63.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 03:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:99:ce:37:ef:1e:44:34:6a:11:f9:41:67:51:3f:26:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 4 05:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16fecc30c50bc03e998c5048fd3764da236abe1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:5c:27:6f:76:a2:8f:e2:1e:8e:cb:55:cc:
4b:6f:fc:e3:9e:72:d4:fd:85:64:ed:63:d2:65:37:
fe:c4:d6:50:71:19:56:1d:1f:89:8f:21:f2:bb:fc:
8c:25:5b:d2:7d:4c:92:0c:16:a7:74:f0:bf:df:6a:
ed:f6:30:56:a9:58:3f:5b:16:6c:9c:dd:01:dd:a6:
36:c0:fe:62:2d:5b:a4:be:8e:62:40:44:ec:82:90:
42:f3:9b:91:6d:a3:81:09:fe:52:3f:24:b8:5d:58:
59:1b:23:0d:27:18:64:d6:9c:8d:93:56:03:76:1a:
c5:1b:10:a4:6b:60:89:39:71:95:de:de:d0:9e:c3:
48:d1:03:1e:45:0b:95:bf:ac:f5:02:31:2d:32:ad:
3e:55:4d:41:14:92:62:a6:2b:d7:f8:7e:20:1f:22:
13:f2:17:d3:30:0e:49:2f:45:da:6d:e1:ef:f6:65:
f3:5e:c9:db:93:e5:a4:2a:3d:9a:c4:29:8e:1d:e8:
94:bf:e2:82:e1:6e:5f:69:bc:f2:95:84:67:25:6c:
34:2f:f4:ec:14:eb:0e:24:8e:74:25:37:3b:8d:12:
5d:aa:64:b1:af:b4:9f:74:5f:76:76:51:85:48:1c:
9e:36:4d:72:3e:c2:00:a8:de:df:00:ba:c7:f2:23:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FE:CC:30:C5:0B:C0:3E:99:8C:50:48:FD:37:64:DA:23:6A:BE:1A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Fv7MMMULwD6ZjFBI_Tdk2iNqvho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.15.0/24
151.242.23.0/24
151.242.40.0/24
151.242.73.0-151.242.82.255
151.242.170.0-151.242.173.255
151.242.242.0/24
151.243.4.0/23
151.243.35.0/24
151.243.38.0/24
151.243.41.0/24
151.243.52.0/23
151.243.60.0/22
151.243.88.0/23
151.243.115.0/24
151.243.120.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a8:82:4a:60:a0:6b:61:7b:ae:39:99:23:71:e2:ed:ba:f9:
b1:d1:b9:f7:01:5f:3b:8c:8a:87:d2:5f:05:0c:3c:4b:6f:78:
ca:4b:76:05:6d:47:62:68:85:33:6c:8b:fe:6a:a3:b4:a0:14:
63:87:5c:b5:97:64:b1:63:fe:e4:a2:6c:b4:fa:5b:26:7a:d6:
b8:cb:b9:83:a0:37:d2:f5:43:77:bf:77:4c:6b:4c:4f:17:d0:
4d:44:75:b5:8d:71:4a:81:86:b3:a6:2c:57:42:77:4c:a1:8e:
13:91:f8:22:27:1a:f1:50:33:eb:f4:1d:92:a1:ec:e2:1d:b3:
57:85:d3:33:3b:96:ba:a0:9f:13:78:6c:fe:c8:88:f3:3f:45:
84:63:57:e2:04:d0:23:12:5a:ef:64:44:55:ca:f3:dc:57:a5:
aa:07:f5:32:8c:a2:9e:62:1c:c0:f2:22:75:8c:30:2b:54:ca:
c4:44:48:30:dd:6d:79:55:ad:1c:0e:26:24:46:78:21:ae:0d:
23:08:c0:46:31:5d:e5:57:40:e5:65:f5:58:57:83:0e:3a:bb:
6c:5c:ff:88:89:e3:9f:63:22:df:98:d1:f3:cd:86:82:12:bd:
39:e3:b1:aa:a3:d4:e8:a1:4d:94:44:07:44:43:cd:67:c3:e9:
22:9d:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:35:40 2025 by rpki-client