Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y7TU5DD4cQBiHcTNP1IogPwzgC0.roa
File: y7TU5DD4cQBiHcTNP1IogPwzgC0.roa (raw, json)
Hash identifier: vP4Lh1uJtnI4F58EfjkgyOpIk79CKMcT+sAR4IJAiAE=
Subject key identifier: CB:B4:D4:E4:30:F8:71:00:62:1D:C4:CD:3F:52:28:80:FC:33:80:2D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019724CB08C487232E511B0243513186AC5A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y7TU5DD4cQBiHcTNP1IogPwzgC0.roa
Signing time: Sat 31 May 2025 05:22:55 +0000
ROA not before: Sat 31 May 2025 05:22:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 151.240.60.0/23 maxlen: 24
151.240.74.0/24 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.13.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.134.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.242.236.0/22 maxlen: 24
151.243.25.0/24 maxlen: 24
151.244.48.0/24 maxlen: 24
151.244.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 05:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:24:cb:08:c4:87:23:2e:51:1b:02:43:51:31:86:ac:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 31 05:22:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbb4d4e430f87100621dc4cd3f522880fc33802d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c0:a5:43:29:17:0f:36:6c:a2:53:fd:59:7b:
09:91:86:da:dc:47:48:a7:29:76:f0:34:84:0e:5a:
fa:f9:23:3c:cf:f2:0c:3b:45:60:86:ab:6c:6c:84:
76:58:95:01:14:5a:cb:a5:44:40:b3:c2:21:23:f9:
c6:3a:fb:5a:68:eb:d7:c9:0b:b7:34:33:1f:41:99:
ed:25:d9:f5:5f:32:9f:c2:af:4f:77:6a:84:a4:40:
07:d3:45:8f:61:1b:b2:28:4d:68:ff:d2:da:94:46:
ed:76:68:7c:02:03:c7:4a:04:04:fb:bd:84:64:8c:
4f:f4:eb:52:6c:72:20:7e:e6:20:77:b4:56:42:60:
ce:6f:cd:86:dd:56:4f:9e:79:1c:3a:2e:b9:53:cc:
78:0f:15:02:79:13:51:36:7a:0d:9d:76:c0:e3:a5:
f3:36:5c:ca:7c:41:1d:0a:65:62:68:c5:25:a8:c3:
ed:aa:b9:f9:0b:8f:45:a3:9e:49:10:a8:b2:43:da:
90:83:da:58:63:88:37:76:a4:10:c4:40:2c:18:32:
74:b5:0f:e1:9b:11:cc:e9:49:a2:1e:1e:08:42:d1:
94:8f:92:53:80:38:48:2f:c6:a5:ab:4d:b7:71:ea:
46:a3:f9:de:0e:88:e6:4b:fa:3a:b1:30:83:ec:c4:
a6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B4:D4:E4:30:F8:71:00:62:1D:C4:CD:3F:52:28:80:FC:33:80:2D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y7TU5DD4cQBiHcTNP1IogPwzgC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.60.0/23
151.240.74.0/24
151.242.4.0/24
151.242.13.0-151.242.14.255
151.242.17.0/24
151.242.27.0/24
151.242.32.0/24
151.242.134.0/23
151.242.236.0/22
151.243.25.0/24
151.244.48.0/24
151.244.102.0/24
Signature Algorithm: sha256WithRSAEncryption
38:23:76:4a:ff:8b:a4:e6:59:33:54:db:08:aa:ae:57:ff:eb:
eb:a1:7a:cb:4c:a6:17:7e:6e:bd:a5:d1:70:27:32:92:d5:73:
71:aa:e1:a4:94:45:43:26:d1:15:71:a6:7e:43:78:aa:fa:ad:
1f:2e:20:5f:7c:f6:70:1f:01:d7:eb:bd:38:68:f9:14:47:8b:
07:f9:6e:d6:a9:77:92:b8:6d:02:96:ba:32:20:20:4a:4e:16:
4b:4e:8e:50:41:dd:a5:70:e4:fb:18:f4:4a:38:dd:c5:fd:ef:
9f:23:7c:4e:c4:79:98:ff:34:3b:f7:26:1f:58:b4:2c:72:6b:
c0:16:8d:8c:14:e9:09:eb:7e:f8:3b:c9:8f:87:0e:5c:ba:0d:
50:de:dc:01:78:20:10:3c:05:0a:5a:fd:85:a3:d0:1e:bd:1a:
f8:08:e5:53:41:71:7a:81:45:56:fa:06:89:21:22:c6:74:f6:
44:95:4b:d7:85:9d:25:a7:d5:7e:38:c7:73:72:39:b7:2f:d1:
e9:33:2d:d8:82:43:f1:d4:05:da:65:a2:68:fb:e8:5d:e5:10:
ea:ef:7d:92:cd:44:6c:17:d0:83:f4:7e:f7:82:02:57:f7:7d:
05:cd:3a:54:e1:d9:9b:27:e4:a6:8b:fd:e7:eb:80:e1:41:63:
32:cc:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:48 2025 by rpki-client