Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fCrlisMgAH2opFnukteE1VWsgqU.roa
File: fCrlisMgAH2opFnukteE1VWsgqU.roa (raw, json)
Hash identifier: 043vvQmTtg12YeHOuu5ARyadM6H6D19pbnHaAQ2kR1U=
Subject key identifier: 7C:2A:E5:8A:C3:20:00:7D:A8:A4:59:EE:92:D7:84:D5:55:AC:82:A5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019637B378156C95B78209AA56E83104A643
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fCrlisMgAH2opFnukteE1VWsgqU.roa
Signing time: Tue 15 Apr 2025 04:27:10 +0000
ROA not before: Tue 15 Apr 2025 04:27:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 151.240.11.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.6.0/24 maxlen: 24
151.244.36.0/24 maxlen: 24
151.244.55.0/24 maxlen: 24
151.244.60.0/24 maxlen: 24
151.244.107.0/24 maxlen: 24
151.244.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Apr 2025 05:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:37:b3:78:15:6c:95:b7:82:09:aa:56:e8:31:04:a6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 15 04:27:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c2ae58ac320007da8a459ee92d784d555ac82a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:73:fe:01:e7:65:1a:8f:c3:4c:54:41:89:
0c:c6:97:af:74:1f:28:c7:51:f0:1f:20:35:fd:05:
3e:a9:20:da:34:d1:bf:98:51:22:7e:85:2d:74:75:
9a:17:56:a1:19:a1:00:f3:40:59:12:af:a7:3d:58:
10:7e:77:62:c7:6f:3a:41:0c:2e:7d:3c:a5:19:af:
27:3d:04:92:37:53:f4:fc:58:8e:4d:c6:ce:4d:28:
eb:39:b9:a3:a7:cc:f2:de:86:91:1d:11:00:28:9e:
c8:08:e4:d7:d6:cc:fa:31:c7:7c:85:47:4b:73:5b:
38:9b:09:bb:0f:65:72:68:1b:bd:28:ac:de:a4:d7:
1c:b1:f2:d7:0c:c2:46:e1:45:86:1f:c5:53:44:4d:
9c:c0:1b:c8:eb:b6:24:67:7b:14:86:21:ce:ca:16:
8b:2c:d9:d5:ec:1e:42:41:14:db:f8:2e:99:b2:e4:
2f:39:5a:0c:ce:6f:fa:69:c4:6c:2f:ea:4a:21:54:
59:de:7f:f2:4b:68:80:05:5b:0b:b5:f6:ad:3c:67:
59:03:a9:23:d0:e4:18:02:7a:00:df:c3:e7:94:6c:
d0:0f:e7:d7:5c:36:16:7c:4f:f7:f5:94:10:07:d2:
14:36:48:c8:2b:20:7a:3d:cd:d1:b5:43:57:5e:29:
97:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2A:E5:8A:C3:20:00:7D:A8:A4:59:EE:92:D7:84:D5:55:AC:82:A5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fCrlisMgAH2opFnukteE1VWsgqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.11.0/24
151.240.32.0-151.240.42.255
151.240.204.0/24
151.240.254.0/24
151.241.6.0/24
151.244.36.0/24
151.244.55.0/24
151.244.60.0/24
151.244.107.0/24
151.244.127.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:48:2e:38:fa:71:67:de:4c:dd:49:58:bb:06:7c:11:9a:3a:
d4:df:bb:21:6a:22:6b:68:b5:b7:8a:d8:13:01:de:aa:4d:50:
85:d6:c3:66:4f:2b:1c:e3:d5:25:91:09:b8:f6:ef:97:52:a3:
91:13:a8:d4:07:a0:e7:4c:2b:5e:41:92:b0:41:fb:05:ea:03:
d3:ee:8a:87:39:79:39:91:4f:c1:94:b4:d6:dc:35:0d:67:86:
03:a6:fd:99:12:f2:29:ce:f8:77:e9:eb:a9:b2:18:26:9d:3f:
a4:e4:db:52:9c:ad:12:df:02:bf:20:5f:e1:ad:fa:37:7e:39:
7b:97:4f:7f:c3:e6:bd:eb:33:4a:84:f3:49:d7:e1:e4:d6:3e:
79:c4:7f:1f:ea:6b:84:69:ec:fb:37:84:5a:e1:31:94:67:67:
79:51:d3:f1:e7:c5:e7:a0:e2:94:5e:58:7d:29:2a:92:6a:3f:
b6:99:ac:19:9e:74:dc:43:43:79:20:f5:9e:3b:08:b8:c9:5b:
a7:b0:a1:da:92:d0:78:83:a4:aa:24:bf:f2:c3:7c:53:6b:e0:
df:c8:f0:0d:d7:0e:20:68:d7:11:86:33:33:a5:2b:f5:6a:41:
92:5b:7a:5d:b1:d4:c6:40:3f:9c:62:eb:ef:88:68:20:15:ba:
4f:75:b8:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:59:33 2025 by rpki-client