Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4-yEtG8dKAfgkBmKDw5_o7DRQOs.roa
File: 4-yEtG8dKAfgkBmKDw5_o7DRQOs.roa (raw, json)
Hash identifier: nyK1rUY1gSDg9U971iMbRlL3Ce0v3w3VsUy8BPz5qeQ=
Subject key identifier: E3:EC:84:B4:6F:1D:28:07:E0:90:19:8A:0F:0E:7F:A3:B0:D1:40:EB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196A054228669B444E530F5ECB06EB60833
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4-yEtG8dKAfgkBmKDw5_o7DRQOs.roa
Signing time: Mon 05 May 2025 12:03:10 +0000
ROA not before: Mon 05 May 2025 12:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.240.45.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.57.0/24 maxlen: 24
151.242.158.0/24 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 22
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 06:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:54:22:86:69:b4:44:e5:30:f5:ec:b0:6e:b6:08:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 5 12:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3ec84b46f1d2807e090198a0f0e7fa3b0d140eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ec:d6:5b:6b:12:59:03:65:62:b7:8a:7a:05:
0b:a4:4b:f9:f0:00:8d:b1:57:1e:1d:cf:8a:21:41:
7d:b1:a0:04:37:10:92:f6:97:80:d9:51:12:3d:af:
66:21:7c:ba:7e:f0:3f:91:ee:81:b5:cb:00:8e:e9:
85:57:f8:74:ea:bd:0b:12:0c:bc:a2:e6:a4:12:c5:
b9:5e:f6:0f:d7:5a:a0:4e:cf:f0:9b:ea:a3:6a:10:
68:eb:fe:9b:30:1f:c5:89:fa:eb:bd:7f:3a:e9:e4:
ee:a4:dc:d3:89:d4:34:78:79:43:8e:e5:57:97:e5:
2f:71:4e:49:24:03:8e:4d:3f:8d:21:a4:b9:c5:4d:
af:65:59:12:a8:34:a7:ee:04:d0:d1:db:7d:9b:d4:
30:06:a5:4b:0c:48:a4:f5:cc:f0:9e:ac:d4:e1:12:
5d:89:70:4b:70:c3:b0:ca:4b:23:35:9b:a2:04:d0:
e9:a7:87:13:11:01:87:66:7f:37:50:70:a8:65:d3:
57:02:d3:45:69:4c:50:f5:db:a8:83:30:74:0a:a0:
c1:52:f6:68:8e:87:35:49:36:17:73:65:94:f1:30:
1f:16:1b:35:ca:9e:dc:d3:49:29:7d:c0:12:66:71:
14:3b:db:5b:d9:37:98:73:36:07:32:1a:58:55:a4:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EC:84:B4:6F:1D:28:07:E0:90:19:8A:0F:0E:7F:A3:B0:D1:40:EB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4-yEtG8dKAfgkBmKDw5_o7DRQOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.45.0/24
151.242.45.0/24
151.242.57.0/24
151.242.158.0/24
151.242.200.0/21
151.243.105.0/24
151.243.159.0/24
151.244.57.0/24
151.244.111.0/24
151.244.115.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:33:99:3f:a3:ce:9a:fa:f9:7d:07:bc:bb:48:a0:a3:f3:f1:
85:c1:f4:bb:c6:13:ec:cc:ac:46:a0:3a:1b:70:4d:be:5c:d2:
10:13:2b:03:69:e9:eb:bc:0f:00:b9:74:5c:98:a1:09:d6:82:
99:74:6c:96:79:e3:8d:f8:76:c8:6c:a3:f7:48:81:f7:99:30:
06:84:a7:46:c8:57:55:6e:65:8a:2f:d3:6a:95:21:9d:a1:55:
f0:9d:f9:67:64:b5:3f:08:b0:d1:de:a0:59:cd:bd:e2:7c:de:
9f:46:db:bb:ac:73:7f:92:68:01:8d:09:05:33:ba:35:10:36:
da:96:67:c2:f4:2c:9d:a0:dc:2f:37:cd:4e:03:ab:36:b4:27:
7e:56:6d:c4:3d:37:33:b3:4b:a9:f1:2e:ff:1c:e2:22:5e:30:
dc:5f:8b:5a:b2:1f:80:37:b6:ad:69:81:4a:1a:3b:23:0c:d4:
f6:95:f9:91:2c:cd:fd:f9:5f:84:5e:e4:93:39:60:cb:8c:91:
9f:c8:00:ae:8c:85:fe:aa:80:86:52:28:62:48:02:02:e7:eb:
29:71:21:16:d2:49:62:36:2b:d4:38:d2:dd:d5:53:3d:f0:04:
60:a4:1c:ce:a8:7b:c3:8d:ea:8a:96:1c:12:15:43:f9:08:75:
3c:b7:2b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:38:43 2025 by rpki-client