Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n5Qxtm633bM-17I4oC3bGWYSe8s.roa
File: n5Qxtm633bM-17I4oC3bGWYSe8s.roa (raw, json)
Hash identifier: fOfxhSbIGtwP71dc8abkpppjR6OQytM//C0sX4K5GuI=
Subject key identifier: 9F:94:31:B6:6E:B7:DD:B3:3E:D7:B2:38:A0:2D:DB:19:66:12:7B:CB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196A57B699FCBE1DBA83CB963FED61120F1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n5Qxtm633bM-17I4oC3bGWYSe8s.roa
Signing time: Tue 06 May 2025 12:04:10 +0000
ROA not before: Tue 06 May 2025 12:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 151.240.60.0/23 maxlen: 24
151.240.74.0/24 maxlen: 24
151.242.134.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.236.0/22 maxlen: 24
151.244.48.0/24 maxlen: 24
151.244.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 May 2025 05:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:7b:69:9f:cb:e1:db:a8:3c:b9:63:fe:d6:11:20:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 6 12:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f9431b66eb7ddb33ed7b238a02ddb1966127bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:19:3a:8b:f1:e0:9b:60:dd:9a:38:4b:e9:
d5:13:99:54:94:51:ea:f9:6d:2f:be:6c:11:54:4f:
30:3e:90:a1:6d:b6:1b:0e:b0:b3:3e:d5:32:c8:92:
c1:2f:32:23:b2:5c:f5:7a:54:7a:75:c3:0f:c5:02:
b0:cf:6b:6f:fe:9d:6a:2a:ac:67:da:6f:58:26:53:
81:2b:14:7c:85:34:a8:d0:0b:53:6a:b2:ef:fe:c7:
a7:ba:b3:0d:d5:1e:b3:fe:ed:49:ad:31:96:9f:8e:
1a:fd:61:00:fc:11:af:39:01:f7:d1:d7:97:77:3c:
a3:3e:6a:01:02:9a:a1:9c:f4:26:29:d2:6d:e7:cf:
ce:4a:24:62:2e:09:03:3a:e6:d9:33:ad:94:9f:8d:
bd:22:85:62:66:9c:80:8f:5b:20:9f:2a:e0:a8:b1:
45:a5:d0:6f:a7:8b:0f:ae:3c:25:f9:ae:52:47:85:
c8:a8:5a:08:bd:07:76:23:81:49:a0:7f:d5:be:69:
e5:c8:5f:90:88:69:47:84:b8:02:1d:b0:b6:ec:d4:
44:d5:0c:95:56:b1:92:dc:91:64:61:1d:3c:83:5a:
27:bb:6b:ca:f4:61:55:7b:30:38:31:02:b5:30:40:
f6:f8:1f:d2:19:fe:9f:34:73:6e:9d:4b:40:ca:2e:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:31:B6:6E:B7:DD:B3:3E:D7:B2:38:A0:2D:DB:19:66:12:7B:CB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n5Qxtm633bM-17I4oC3bGWYSe8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.60.0/23
151.240.74.0/24
151.242.134.0/23
151.242.224.0/22
151.242.236.0/22
151.244.48.0/24
151.244.102.0/24
Signature Algorithm: sha256WithRSAEncryption
16:fb:f8:33:0c:fa:6c:89:f9:c5:c6:42:1f:38:e0:fc:13:46:
e4:ca:6c:30:1e:15:19:cf:dc:eb:ed:28:6e:16:c8:7a:f4:06:
3f:89:28:a6:56:86:9f:8b:74:c1:50:d6:8e:bc:ae:19:66:7e:
8c:40:22:5b:06:06:44:d6:76:86:37:a9:c3:d0:b1:1d:bb:a1:
d6:1b:59:f7:36:f7:01:fd:c2:e6:05:49:31:49:26:c7:ce:20:
5b:9e:b2:26:9d:07:89:aa:bf:ba:cb:a3:59:5f:23:c7:cc:82:
ce:a9:6d:70:7b:df:67:c6:aa:64:ef:bf:68:d0:f8:25:ea:2d:
2d:28:39:0f:09:91:09:60:48:c2:28:60:e3:26:f4:2a:a8:96:
f8:c5:d3:8f:6d:b8:0f:4c:55:8c:d6:04:6a:8c:4d:88:c7:be:
ee:6f:96:9c:15:5c:f1:34:d7:fe:ac:96:be:08:92:a3:a6:f6:
41:57:c9:62:66:30:f5:e4:de:92:12:6b:d5:f5:d7:46:74:35:
d2:86:37:0c:54:b6:b6:5e:50:2b:0e:b4:f8:94:af:e2:fe:d1:
81:b0:73:9a:d5:c7:23:d3:6e:d1:c3:8d:c9:91:7c:8b:c3:c1:
cc:55:59:54:bd:bb:29:59:42:89:4a:95:a3:66:f8:73:8c:81:
b2:36:8a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:18:11 2025 by rpki-client