Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eYMdyr_vncEcj0Tvug2T0DyhtKo.roa
File: eYMdyr_vncEcj0Tvug2T0DyhtKo.roa (raw, json)
Hash identifier: T5I+bcjO6mR1gBhWZ7753bYNME6QGysHJsW31JUoLrY=
Subject key identifier: 79:83:1D:CA:BF:EF:9D:C1:1C:8F:44:EF:BA:0D:93:D0:3C:A1:B4:AA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01969E86B67ADA130804A416E791E7F8AEE1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eYMdyr_vncEcj0Tvug2T0DyhtKo.roa
Signing time: Mon 05 May 2025 03:39:10 +0000
ROA not before: Mon 05 May 2025 03:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.242.15.0/24 maxlen: 24
151.242.23.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.75.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.80.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.170.0/24 maxlen: 24
151.242.171.0/24 maxlen: 24
151.242.172.0/24 maxlen: 24
151.242.173.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.4.0/24 maxlen: 24
151.243.5.0/24 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.38.0/24 maxlen: 24
151.243.41.0/24 maxlen: 24
151.243.52.0/24 maxlen: 24
151.243.53.0/24 maxlen: 24
151.243.61.0/24 maxlen: 24
151.243.62.0/24 maxlen: 24
151.243.63.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 06:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:86:b6:7a:da:13:08:04:a4:16:e7:91:e7:f8:ae:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 5 03:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79831dcabfef9dc11c8f44efba0d93d03ca1b4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:2d:19:a9:49:f9:51:9c:31:25:39:f4:cc:
ec:d5:f0:3b:aa:e4:c1:3e:1a:11:bb:ea:b0:1a:67:
fc:52:af:e2:b1:4c:e2:91:e9:40:bb:9c:0a:89:88:
c5:5c:23:f1:3e:e2:d7:b3:0f:1d:c4:4e:0c:16:f3:
b8:79:1d:f4:04:00:3d:e6:7e:a4:ab:ed:97:56:31:
c1:a7:92:c5:e4:96:b1:72:54:17:1f:97:ec:d9:0b:
41:0c:9c:b0:72:ee:3e:b0:29:94:32:34:41:67:89:
a4:6c:26:18:33:ee:90:fd:06:1d:1f:a0:c3:08:1b:
e7:55:c3:4a:d6:a5:a3:be:7e:3a:ff:0b:1a:1f:50:
06:21:c7:75:89:33:86:02:c2:53:89:f3:6a:c0:ab:
0a:b9:77:a4:0f:23:da:cb:ce:e2:6d:97:4d:a7:5b:
2b:74:e2:14:e4:cc:07:41:12:74:a5:19:db:31:c0:
0a:5b:c4:3c:cb:0e:8e:0b:f1:bf:c3:6b:ab:9b:a0:
14:9d:85:af:19:36:d5:e6:a9:6a:3b:1e:99:d8:e8:
2b:e8:99:50:69:c8:32:2f:5c:63:73:77:3c:8f:b8:
ae:11:00:23:0b:a2:a1:99:50:6f:00:3b:27:ed:a1:
14:48:07:9e:5d:41:63:09:7d:d2:90:e8:a9:2a:0d:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:83:1D:CA:BF:EF:9D:C1:1C:8F:44:EF:BA:0D:93:D0:3C:A1:B4:AA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eYMdyr_vncEcj0Tvug2T0DyhtKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.15.0/24
151.242.23.0/24
151.242.40.0/24
151.242.73.0-151.242.82.255
151.242.170.0-151.242.173.255
151.242.242.0/24
151.243.4.0/23
151.243.35.0/24
151.243.38.0/24
151.243.41.0/24
151.243.52.0/23
151.243.61.0-151.243.63.255
151.243.88.0/23
151.243.115.0/24
151.243.120.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
Signature Algorithm: sha256WithRSAEncryption
32:34:d5:62:c2:ff:ef:4c:f2:71:0f:e7:d4:65:19:72:95:9a:
91:83:5d:cf:17:f8:0f:a7:16:b3:c8:a1:8b:1f:e2:32:28:b8:
13:46:47:44:44:81:b3:e9:0b:dd:e9:e8:8d:8a:ce:2e:a7:58:
86:e6:66:ed:ed:c2:1a:51:d8:ed:50:fb:0d:ef:92:28:63:ff:
85:7e:d6:05:5a:66:38:fd:33:78:2e:3c:62:8c:f4:df:2b:4f:
d9:11:dc:2d:bd:45:9e:5e:93:cb:aa:0f:0e:0b:a7:de:53:73:
c6:ff:1d:6a:f4:a1:6d:3a:eb:4c:3f:cc:e4:a1:a4:18:ce:62:
51:24:64:ad:8c:01:0f:76:87:6f:e4:b8:c6:3f:bf:31:13:82:
18:9e:4c:b9:bf:38:55:aa:9a:6e:9e:84:ba:da:78:6c:b5:50:
83:f8:51:d3:4a:7f:65:38:ad:ab:ea:29:65:48:53:fa:7a:a2:
89:49:f2:e8:ea:1a:51:1e:ab:59:12:64:56:0e:f1:17:c7:a7:
de:50:1c:6d:d7:f8:72:90:3a:5c:e4:ea:ef:93:db:f0:d5:29:
85:f6:b4:a6:74:ca:67:fe:26:6a:23:a7:ab:94:02:04:b4:c9:
23:70:8b:ed:b2:6e:ba:81:15:fe:13:03:e0:89:3d:4a:c7:5c:
78:d7:79:e6
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAZaehrZ62hMIBKQW55Hn+K7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNTA1MDMzOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTgzMWRjYWJmZWY5ZGMxMWM4ZjQ0ZWZiYTBkOTNkMDNjYTFiNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEQtGalJ+VGcMSU59Mzs1fA7quTB
PhoRu+qwGmf8Uq/isUzikelAu5wKiYjFXCPxPuLXsw8dxE4MFvO4eR30BAA95n6k
q+2XVjHBp5LF5JaxclQXH5fs2QtBDJywcu4+sCmUMjRBZ4mkbCYYM+6Q/QYdH6DD
CBvnVcNK1qWjvn46/wsaH1AGIcd1iTOGAsJTifNqwKsKuXekDyPay87ibZdNp1sr
dOIU5MwHQRJ0pRnbMcAKW8Q8yw6OC/G/w2urm6AUnYWvGTbV5qlqOx6Z2Ogr6JlQ
acgyL1xjc3c8j7iuEQAjC6KhmVBvADsn7aEUSAeeXUFjCX3SkOipKg0UrwIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFHmDHcq/753BHI9E77oNk9A8obSqMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZVlNZHlyX3ZuY0VjajBUdnVnMlQwRHlodEtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBACX
8g8DBACX8hcDBACX8igwDAMEAJfySQMEAJfyUjAMAwQBl/KqAwQBl/KsAwQAl/Ly
AwQBl/MEAwQAl/MjAwQAl/MmAwQAl/MpAwQBl/M0MAwDBACX8z0DBAaX8wADBAGX
81gDBACX83MDBACX83gwDAMEApf0BAMEAJf0BgMEAJf0OAMEAJf0OjANBgkqhkiG
9w0BAQsFAAOCAQEAMjTVYsL/70zycQ/n1GUZcpWakYNdzxf4D6cWs8ihix/iMii4
E0ZHRESBs+kL3enojYrOLqdYhuZm7e3CGlHY7VD7De+SKGP/hX7WBVpmOP0zeC48
Yoz03ytP2RHcLb1Fnl6Ty6oPDgun3lNzxv8davShbTrrTD/M5KGkGM5iUSRkrYwB
D3aHb+S4xj+/MROCGJ5Mub84Vaqabp6Eutp4bLVQg/hR00p/ZTitq+opZUhT+nqi
iUny6OoaUR6rWRJkVg7xF8en3lAcbdf4cpA6XOTq75Pb8NUphfa0pnTKZ/4maiOn
q5QCBLTJI3CL7bJuuoEV/hMD4Ik9SsdceNd55g==
-----END CERTIFICATE-----
Generated at Fri Jun 6 20:57:06 2025 by rpki-client