Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jqYEQj1hds5e9ykOojbSRnBXw0Y.roa
File: jqYEQj1hds5e9ykOojbSRnBXw0Y.roa (raw, json)
Hash identifier: CP7+h1duSls4hrHJTmfLBjDVs7HW1RK7QmESL/IMBtw=
Subject key identifier: 8E:A6:04:42:3D:61:76:CE:5E:F7:29:0E:A2:36:D2:46:70:57:C3:46
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01965D7DD910FB268713C8437626AD8413A5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jqYEQj1hds5e9ykOojbSRnBXw0Y.roa
Signing time: Tue 22 Apr 2025 12:34:10 +0000
ROA not before: Tue 22 Apr 2025 12:34:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 397630
IP address blocks: 151.240.25.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.241.32.0/24 maxlen: 24
151.241.36.0/24 maxlen: 24
151.241.40.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.245.199.0/24 maxlen: 24
151.245.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Apr 2025 12:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:7d:d9:10:fb:26:87:13:c8:43:76:26:ad:84:13:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 22 12:34:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ea604423d6176ce5ef7290ea236d2467057c346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:31:77:74:06:3e:53:28:b6:c4:59:2e:02:
6c:1a:63:75:8e:2a:c9:a3:de:b5:2b:08:f3:57:60:
85:49:00:c3:96:43:a1:22:e3:e9:04:e9:91:fe:bf:
30:bb:21:6c:7b:de:d9:4c:9a:d4:d0:e9:3c:b2:09:
3d:f9:73:32:cf:0a:88:aa:48:19:a3:9f:ae:ff:28:
4f:2f:b6:e2:22:74:5b:5d:65:59:8b:5b:b9:18:ee:
23:f5:77:95:63:f8:04:a3:07:5e:7d:ea:74:27:02:
7e:ed:4f:90:83:26:9d:87:25:cc:69:ec:0c:77:d3:
d5:60:8b:66:38:6b:f0:a3:bc:7a:f5:4a:20:c9:a5:
c2:ea:88:01:55:be:59:ae:db:88:31:ff:29:39:53:
5c:f2:ce:bd:c0:02:f4:e6:5e:d7:39:41:a9:e0:0f:
7b:58:ab:72:7c:d3:72:eb:42:b9:99:2e:19:53:4b:
10:f6:ce:8f:74:c6:d1:15:63:20:c5:c8:97:6e:96:
b8:d1:cf:1d:ca:84:d0:ea:33:49:46:b7:e3:ce:c0:
67:9d:fe:01:64:60:05:b3:08:47:5d:54:a3:df:42:
13:43:46:1d:f5:67:10:65:51:43:46:2f:24:95:33:
1f:e1:86:83:1c:33:02:e3:68:40:2a:b4:43:ce:28:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A6:04:42:3D:61:76:CE:5E:F7:29:0E:A2:36:D2:46:70:57:C3:46
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jqYEQj1hds5e9ykOojbSRnBXw0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.25.0/24
151.240.179.0/24
151.241.32.0/24
151.241.36.0/24
151.241.40.0/24
151.241.43.0/24
151.245.199.0/24
151.245.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:93:fa:0e:bd:93:4c:c2:25:e0:31:82:78:09:8b:60:36:e2:
53:b7:14:0a:9e:09:ea:4e:08:a1:c3:bf:45:64:e4:5b:3d:e2:
25:88:9e:ec:4a:59:7b:62:63:b9:bf:1b:f7:2d:3a:c7:d1:ea:
5f:a9:85:a4:af:be:77:e1:f2:33:b9:86:f3:5d:1d:e1:73:c8:
7a:a5:67:e9:15:f8:d9:a9:0a:6f:8e:df:9b:be:05:6b:b1:a4:
86:29:33:db:d4:63:79:0f:00:cd:f9:d6:b6:22:93:2a:2f:4c:
44:09:fe:bf:83:87:14:b8:40:1c:a1:38:73:22:77:7e:ae:5a:
ef:ac:34:1b:22:3b:18:17:c3:96:99:91:48:59:fe:3a:30:b5:
4b:9e:a0:70:94:8b:fb:12:5a:93:e8:05:30:cc:2d:c6:87:ad:
c4:47:6c:b6:de:62:c7:5d:12:20:9a:a1:7c:1e:17:52:a2:c2:
7a:10:3c:54:b0:20:ef:16:1b:84:51:ab:f2:cc:38:4a:e7:46:
17:3d:54:a9:74:33:05:d7:3d:0d:37:35:c3:ba:72:00:a1:ac:
74:b3:c7:d6:15:8b:5d:1d:18:0f:98:9a:31:a6:4e:53:d0:c2:
40:bf:9d:c4:bd:fe:16:0a:cf:0f:79:54:f4:25:0c:6b:56:c6:
18:11:8c:9a
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZZdfdkQ+yaHE8hDdiathBOlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDIyMTIzNDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWE2MDQ0MjNkNjE3NmNlNWVmNzI5MGVhMjM2ZDI0NjcwNTdjMzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqExd3QGPlMotsRZLgJsGmN1jirJ
o961KwjzV2CFSQDDlkOhIuPpBOmR/r8wuyFse97ZTJrU0Ok8sgk9+XMyzwqIqkgZ
o5+u/yhPL7biInRbXWVZi1u5GO4j9XeVY/gEowdefep0JwJ+7U+QgyadhyXMaewM
d9PVYItmOGvwo7x69UogyaXC6ogBVb5ZrtuIMf8pOVNc8s69wAL05l7XOUGp4A97
WKtyfNNy60K5mS4ZU0sQ9s6PdMbRFWMgxciXbpa40c8dyoTQ6jNJRrfjzsBnnf4B
ZGAFswhHXVSj30ITQ0Yd9WcQZVFDRi8klTMf4YaDHDMC42hAKrRDzijLkwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFI6mBEI9YXbOXvcpDqI20kZwV8NGMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvanFZRVFqMWhkczVlOXlrT29qYlNSbkJYdzBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAl/AZAwQA
l/CzAwQAl/EgAwQAl/EkAwQAl/EoAwQAl/ErAwQAl/XHAwQAl/XLMA0GCSqGSIb3
DQEBCwUAA4IBAQCek/oOvZNMwiXgMYJ4CYtgNuJTtxQKngnqTgihw79FZORbPeIl
iJ7sSll7YmO5vxv3LTrH0epfqYWkr7534fIzuYbzXR3hc8h6pWfpFfjZqQpvjt+b
vgVrsaSGKTPb1GN5DwDN+da2IpMqL0xECf6/g4cUuEAcoThzInd+rlrvrDQbIjsY
F8OWmZFIWf46MLVLnqBwlIv7ElqT6AUwzC3Gh63ER2y23mLHXRIgmqF8HhdSosJ6
EDxUsCDvFhuEUavyzDhK50YXPVSpdDMF1z0NNzXDunIAoax0s8fWFYtdHRgPmJox
pk5T0MJAv53Evf4WCs8PeVT0JQxrVsYYEYya
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:39:01 2025 by rpki-client