Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OVAU7hlbzDjHZAbSkREU4gHyFxo.roa
File: OVAU7hlbzDjHZAbSkREU4gHyFxo.roa (raw, json)
Hash identifier: E5J1qett6P7yHpe+F24EbgZDWSvc4JrwUBgrYIJhVoA=
Subject key identifier: 39:50:14:EE:19:5B:CC:38:C7:64:06:D2:91:11:14:E2:01:F2:17:1A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01987DA60B390959DD2316A7B2736F748F57
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OVAU7hlbzDjHZAbSkREU4gHyFxo.roa
Signing time: Wed 06 Aug 2025 04:31:30 +0000
ROA not before: Wed 06 Aug 2025 04:31:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.241.232.0/21 maxlen: 24
151.242.56.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.16.0/21 maxlen: 21
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Aug 2025 05:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:a6:0b:39:09:59:dd:23:16:a7:b2:73:6f:74:8f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 6 04:31:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=395014ee195bcc38c76406d2911114e201f2171a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:a4:5a:ec:7a:ef:19:c0:4b:5c:54:5f:7d:
36:38:42:6a:ab:91:d8:cc:06:67:ad:35:85:34:98:
96:5b:d8:90:fe:76:6e:b4:0e:27:14:c9:86:c1:fa:
a8:7e:8f:8f:40:6e:87:7b:c0:cb:6e:8e:78:57:77:
81:47:0c:18:0e:2d:7b:fc:bd:30:97:98:cf:e2:2d:
86:c1:93:ab:f5:11:59:b9:b4:c7:70:13:44:8c:06:
7b:6c:0c:65:43:2d:f9:1d:de:24:96:bf:ac:c4:87:
17:c6:a5:2b:3f:16:1d:c9:c6:e0:eb:8d:a8:54:2d:
56:9d:12:0b:1b:6a:83:05:b0:b6:12:22:c9:9d:b1:
e7:ea:c0:7f:1e:df:42:f4:f8:98:e7:ba:bc:e5:8b:
0e:a9:ed:9f:d4:39:cd:a5:5e:4a:62:10:b0:c3:96:
cf:90:b6:b0:a0:be:3e:2e:3f:0c:15:17:f0:e5:ba:
fe:d1:62:35:df:75:fd:8e:45:6a:77:fe:8a:40:c5:
30:01:ab:3c:1a:7f:c4:4f:43:4d:ee:3f:f6:8b:7f:
c0:aa:9f:5f:78:36:3c:35:06:8b:6f:de:db:60:7d:
79:84:b3:df:7d:f3:4b:94:8d:95:19:a4:11:ce:3b:
d6:a2:16:79:e4:8b:e6:b0:af:7d:20:6c:b2:fd:f6:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:50:14:EE:19:5B:CC:38:C7:64:06:D2:91:11:14:E2:01:F2:17:1A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OVAU7hlbzDjHZAbSkREU4gHyFxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.171.0/24
151.241.132.0/22
151.241.232.0/21
151.242.56.0/24
151.243.8.0/23
151.243.204.0/23
151.244.16.0/21
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
Signature Algorithm: sha256WithRSAEncryption
a5:0a:ab:49:66:a2:b2:d7:f5:66:0f:95:ed:e2:72:2d:15:36:
63:18:ff:c1:73:e5:99:2e:65:af:4c:b4:19:3a:07:0c:ec:be:
ea:99:97:09:f2:bb:20:0c:68:d2:46:73:c7:c6:1e:04:54:ef:
e9:74:93:ad:4b:dd:51:46:f5:e7:f7:c1:df:06:60:e3:5a:86:
29:07:b3:09:4c:8c:11:35:a5:ca:7e:cd:1d:e6:7d:08:69:d2:
a8:1d:64:5f:2f:79:ca:81:c9:c2:38:f7:e6:8d:e4:0f:63:a3:
dc:ec:44:3b:8b:6d:a5:68:de:1a:e0:3a:d3:c4:87:c4:23:a6:
e5:e2:0e:f3:a7:3c:2c:3b:f5:72:a8:d5:ed:8f:17:ea:9d:5b:
93:1b:7a:56:a7:60:15:aa:8c:60:a0:6e:93:a4:fd:c8:75:03:
64:6a:2b:9b:63:d9:95:56:72:5d:39:56:c1:a3:f4:e0:ac:ca:
12:61:3e:bd:11:ce:30:9c:50:7a:3c:97:e3:89:7c:ea:48:45:
f8:62:02:16:31:5c:94:20:df:40:65:a0:1c:d8:ed:70:9a:f9:
a3:91:60:9a:a2:34:3c:0e:7d:7d:b2:f9:e9:33:2c:29:10:28:
dd:7d:14:d6:fb:12:e3:cf:b5:fb:e6:51:82:a7:e4:cd:98:80:
fc:d5:00:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 22:11:12 2025 by rpki-client