Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aqNC3t_qsZLEx7gVZnJnAG2Yw6Y.roa
File: aqNC3t_qsZLEx7gVZnJnAG2Yw6Y.roa (raw, json)
Hash identifier: 3oFJXmKARWjWvMtkx+2s3e+OT6XeM4MlUmwhezOMS8Q=
Subject key identifier: 6A:A3:42:DE:DF:EA:B1:92:C4:C7:B8:15:66:72:67:00:6D:98:C3:A6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197417E7D24040F212D238796F0C9E9663A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aqNC3t_qsZLEx7gVZnJnAG2Yw6Y.roa
Signing time: Thu 05 Jun 2025 19:08:18 +0000
ROA not before: Thu 05 Jun 2025 19:08:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36530
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.170.0/24 maxlen: 24
151.242.171.0/24 maxlen: 24
151.242.172.0/24 maxlen: 24
151.242.173.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.245.120.0/21 maxlen: 21
Validation: Failed, certificate revoked on Fri 06 Jun 2025 07:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:41:7e:7d:24:04:0f:21:2d:23:87:96:f0:c9:e9:66:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 5 19:08:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aa342dedfeab192c4c7b815667267006d98c3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:b0:50:4c:b0:83:e9:64:07:03:36:a2:24:
9f:bd:89:ea:8e:7b:fe:6b:2c:6d:bc:fe:aa:9d:8c:
7c:b5:e5:37:66:25:6b:53:f3:09:c8:ff:6e:7d:17:
a1:33:c1:bf:32:c9:27:3c:d5:f1:10:bf:60:cc:b4:
b2:f7:43:01:6e:a4:e1:1c:f3:3a:bb:e7:87:aa:8b:
53:bf:ba:19:e2:85:60:e0:4c:a5:99:47:cd:39:c0:
6e:71:6b:2e:aa:5b:1a:5c:2d:45:28:bb:0a:e3:08:
98:c2:e5:61:42:98:f4:c9:e8:76:db:bc:f0:69:37:
15:1a:74:35:6f:dd:69:8b:d2:69:24:e5:e1:6b:78:
21:29:a7:f1:20:2c:8f:e7:39:72:df:50:df:91:c8:
fd:a5:5e:9d:ae:23:8a:38:9d:10:4b:d9:2c:ae:59:
01:4b:2b:52:89:a2:4d:2c:dc:0f:7f:22:a5:8b:66:
5c:d0:ca:ac:92:df:2b:fe:68:57:cd:d4:01:ac:c0:
00:c3:d3:1b:78:f7:3c:cd:c6:74:80:9b:0e:fc:17:
31:a2:82:c4:4e:8d:bf:57:62:84:e2:07:20:14:31:
0c:38:81:7d:55:29:8d:bc:a9:14:ab:72:93:48:1b:
3e:84:58:15:ed:f1:5c:81:75:fd:b7:8b:87:07:c6:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A3:42:DE:DF:EA:B1:92:C4:C7:B8:15:66:72:67:00:6D:98:C3:A6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aqNC3t_qsZLEx7gVZnJnAG2Yw6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.40.0/24
151.242.64.0/24
151.242.170.0-151.242.173.255
151.242.242.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:3b:a6:8b:f7:a0:8d:e1:f1:ac:cc:ee:89:90:0e:c5:d5:59:
2c:2d:1c:50:77:94:e0:e7:22:42:6a:d4:63:18:0e:3d:a5:a9:
5b:b6:eb:b8:7e:8e:87:00:c5:c1:50:1e:6e:8f:b3:46:b9:9b:
ec:80:e2:63:be:db:c8:80:ac:83:fc:0c:dc:cb:11:32:68:8e:
88:34:32:fe:fc:12:03:f1:71:22:02:93:3b:d7:71:16:8e:a9:
2f:c2:d4:9a:2e:33:c0:42:4c:42:0b:ea:3f:70:8c:08:8e:80:
2e:ee:25:5b:14:b5:6f:1f:aa:08:9a:5c:99:4c:2c:14:c8:0b:
08:58:18:59:89:78:6b:6c:4c:1a:b1:66:26:16:95:c8:17:4b:
a1:64:4f:6b:0c:43:8f:74:4b:5a:01:e2:16:0c:cd:5d:0d:8f:
25:d4:20:43:14:c1:9e:9f:4a:7c:5f:a4:6d:8f:1e:e6:5b:0f:
eb:d6:ea:85:fa:6d:b7:1f:f8:cb:5e:e2:b2:7c:1a:3a:25:02:
20:aa:18:ec:62:f4:34:16:b2:e3:4d:bb:c6:30:05:50:51:2b:
1a:9c:d9:92:1f:7d:c8:cc:bc:c1:ae:19:76:92:bd:59:4a:ef:
65:a9:bc:1b:07:c1:b5:3e:a4:18:51:b8:a3:b5:3f:6f:57:a8:
e8:fa:f8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:38:42 2025 by rpki-client