Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QiQt22gqY-3UpnByJbD3Lyv1svU.roa
File: QiQt22gqY-3UpnByJbD3Lyv1svU.roa (raw, json)
Hash identifier: N9Ll86jWibbx4LcAnJLlMxNEsAuoIm7DiOEz5BLi/PY=
Subject key identifier: 42:24:2D:DB:68:2A:63:ED:D4:A6:70:72:25:B0:F7:2F:2B:F5:B2:F5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01977E2A699C68A353E7B24D9ACB4711BD47
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QiQt22gqY-3UpnByJbD3Lyv1svU.roa
Signing time: Tue 17 Jun 2025 13:53:18 +0000
ROA not before: Tue 17 Jun 2025 13:53:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.240.45.0/24 maxlen: 24
151.240.120.0/23 maxlen: 23
151.242.45.0/24 maxlen: 24
151.242.57.0/24 maxlen: 24
151.242.136.0/23 maxlen: 23
151.242.144.0/23 maxlen: 23
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
151.243.248.0/22 maxlen: 22
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.245.116.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 30 Jun 2025 10:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:2a:69:9c:68:a3:53:e7:b2:4d:9a:cb:47:11:bd:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 17 13:53:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42242ddb682a63edd4a6707225b0f72f2bf5b2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ea:e9:c7:58:10:9c:dc:49:53:89:5d:f0:d6:
14:36:0b:48:8c:09:eb:88:63:42:77:1b:fa:d0:0f:
e5:b6:18:e0:b7:e9:ac:95:7c:e3:da:87:f5:99:91:
6b:2a:f3:c9:09:9b:0b:d4:21:76:66:64:3b:de:f3:
ff:3b:46:b3:0d:f2:d5:24:06:d7:5f:a2:c4:27:5a:
ff:4f:c5:2e:13:97:c8:6d:b3:12:35:24:82:78:8a:
6f:3b:54:21:36:3c:ea:f9:6c:89:dd:6c:79:13:46:
6f:46:10:e2:61:0f:12:e7:23:b7:3a:ce:98:08:89:
ed:3f:25:f4:79:00:1c:97:69:7e:0e:d7:9c:c0:67:
4d:01:a6:09:b7:ec:34:b4:33:7c:29:de:a6:3e:b9:
19:1b:5e:9e:bf:10:1d:c4:cd:6c:12:8e:61:c9:ca:
37:87:9b:e3:92:80:f7:eb:46:06:50:d9:10:66:e6:
c6:a0:de:94:7f:a7:6f:3f:ff:8a:d9:6d:2f:c5:02:
f7:77:85:88:11:35:1f:3a:34:2f:96:b5:99:34:59:
56:ee:52:8e:4b:ef:22:e5:27:2f:60:e4:27:bd:c4:
e2:f4:17:5a:75:92:53:d8:46:47:8d:6d:60:95:31:
76:e0:50:3f:4a:46:9d:e1:37:dd:72:74:c3:36:89:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:24:2D:DB:68:2A:63:ED:D4:A6:70:72:25:B0:F7:2F:2B:F5:B2:F5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QiQt22gqY-3UpnByJbD3Lyv1svU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.45.0/24
151.240.120.0/23
151.242.45.0/24
151.242.57.0/24
151.242.136.0/23
151.242.144.0/23
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.159.0/24
151.243.248.0/22
151.244.57.0/24
151.244.111.0/24
151.244.115.0/24
151.245.116.0/22
Signature Algorithm: sha256WithRSAEncryption
41:e7:53:d7:02:49:ea:73:ba:66:69:a1:ca:8e:a5:11:d0:70:
e4:4f:22:4d:61:49:fd:9d:d5:cf:2f:e7:59:d4:6d:e8:fd:e2:
45:4e:d9:1f:a6:65:e9:54:c9:d9:27:a8:6d:27:bc:45:08:c6:
a1:39:6d:c6:59:11:2a:60:19:03:76:64:6e:ae:d5:80:0b:53:
3b:54:d1:2c:6c:bf:91:a1:51:f8:38:e7:03:1b:3a:ac:a5:57:
f5:ed:aa:68:5e:a5:da:2d:74:c6:9b:dc:7c:07:5b:2f:fb:34:
34:d6:df:69:a7:b1:2d:96:f2:44:1f:09:3c:e6:d3:b6:dc:ae:
f1:55:09:67:c3:fa:69:76:88:49:56:d1:83:a1:bb:7d:31:2d:
60:b0:d9:95:29:91:e5:48:32:d8:2b:70:b7:84:85:fc:0c:be:
1b:61:98:8e:f1:77:86:7c:24:e1:dd:b1:49:0b:ec:c3:0e:5d:
f4:f8:fc:13:4c:af:ad:5b:7b:86:ed:9c:f3:0e:21:77:a4:da:
e6:76:95:43:09:88:f6:51:99:1b:c6:9a:fb:c1:ec:48:42:aa:
33:8b:43:74:30:94:2e:93:cf:81:56:47:38:e4:a4:97:93:a0:
f4:59:06:5d:a7:b7:10:22:1a:00:37:86:a6:2e:44:ae:d7:87:
f2:a5:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:06:58 2025 by rpki-client