Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yxe00N5v6MVaWgvZp8XBA85JKiw.roa
File: yxe00N5v6MVaWgvZp8XBA85JKiw.roa (raw, json)
Hash identifier: 7IAyXhdq5R53Bnh0SB7PAOW8qUZLeBqgjmiUDA8qzqg=
Subject key identifier: CB:17:B4:D0:DE:6F:E8:C5:5A:5A:0B:D9:A7:C5:C1:03:CE:49:2A:2C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B6BBB06CBC24BB9D347F16592AE22D42
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yxe00N5v6MVaWgvZp8XBA85JKiw.roa
Signing time: Sat 28 Jun 2025 13:30:42 +0000
ROA not before: Sat 28 Jun 2025 13:30:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.241.128.0/22 maxlen: 24
151.242.15.0/24 maxlen: 24
151.242.23.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.75.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.80.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.214.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.56.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.245.120.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Jun 2025 06:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:bb:b0:6c:bc:24:bb:9d:34:7f:16:59:2a:e2:2d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 28 13:30:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb17b4d0de6fe8c55a5a0bd9a7c5c103ce492a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:9f:72:98:2b:63:c0:f4:7e:a5:5a:96:05:
5c:43:de:92:dd:d3:54:f7:b0:98:38:0c:81:d1:1f:
42:bd:ea:c0:8b:f4:c6:f9:b7:84:14:01:05:c1:ec:
a6:67:83:ab:ce:47:35:94:a9:5e:cd:24:32:25:80:
a7:b7:70:78:47:80:8e:77:a8:ba:a7:f2:ea:3b:6a:
4f:89:89:3a:70:19:90:4c:86:57:fe:cc:45:f3:e2:
5e:3c:e2:31:4a:7a:44:ca:60:b8:d7:fb:77:fe:75:
0c:94:c9:2a:d2:6f:9f:be:d9:cb:ba:94:cd:68:ff:
19:46:af:98:73:d6:d7:99:83:b3:ce:de:fd:67:dd:
ea:97:15:87:4e:fc:d9:cd:1d:d0:e2:5e:c0:08:88:
19:b9:1d:21:18:a4:d6:57:cf:f1:6b:6a:71:73:b5:
61:b6:5e:c9:bd:a7:5d:ca:e4:a6:54:16:d0:72:93:
fd:40:35:39:43:aa:3d:03:27:4d:2c:68:3d:54:35:
5e:b3:8a:6c:6e:ab:aa:ae:71:77:98:45:3a:b8:77:
cc:dd:6e:18:9d:55:d8:9d:0e:1f:e2:80:72:44:46:
0c:15:00:f4:fd:20:59:c5:ef:03:44:10:08:b2:e5:
8d:1f:8b:ba:7d:e7:4b:50:8b:8b:a9:01:c4:20:ea:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:17:B4:D0:DE:6F:E8:C5:5A:5A:0B:D9:A7:C5:C1:03:CE:49:2A:2C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yxe00N5v6MVaWgvZp8XBA85JKiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.242.15.0/24
151.242.23.0/24
151.242.40.0/24
151.242.64.0/24
151.242.73.0-151.242.82.255
151.242.242.0/24
151.243.115.0/24
151.243.120.0/24
151.243.214.0/24
151.244.4.0-151.244.6.255
151.244.56.0/24
151.244.58.0/24
151.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:bd:31:25:f8:27:30:ed:00:99:fa:09:c7:2e:e1:38:1a:e1:
43:c7:ef:b3:16:e9:a1:6b:66:47:10:fa:2c:90:9a:a3:d8:21:
c0:fe:26:9e:73:8f:92:0a:33:e3:9d:45:fd:c3:17:b6:ff:48:
b8:93:99:e7:9e:12:70:20:d5:d5:d7:17:8f:e6:8e:08:67:39:
4a:7b:0e:14:be:93:d0:b7:88:39:c7:24:7b:6f:80:56:e4:68:
9f:bd:42:e3:0b:cd:7a:26:96:22:66:8a:2d:0d:2d:6c:ff:78:
6b:51:27:6b:5c:2c:11:ed:1b:84:ed:23:dd:28:5d:8e:06:74:
3a:cd:93:c1:8e:2e:cf:9b:93:8b:ba:f2:d2:ee:1f:8a:7d:28:
a3:8d:3e:e1:d9:02:3d:60:3e:62:47:28:6c:8f:1b:ea:25:16:
a4:a8:a3:57:f6:32:24:28:70:33:0c:8b:8a:c5:c6:c9:df:76:
6d:7f:30:89:97:64:b8:9b:9b:38:df:c3:b4:1b:86:8e:69:98:
63:80:73:f0:6d:96:d5:4e:30:d7:64:79:63:8e:9a:3f:72:ef:
a3:8d:dc:47:47:14:f5:2a:e0:8e:0d:c7:22:a3:53:31:eb:fb:
8f:6a:ed:27:99:c8:00:b2:c8:4b:f8:d3:f3:f6:e2:df:09:23:
90:52:ee:42
-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgISAZe2u7BsvCS7nTR/Flkq4i1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjI4MTMzMDQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjE3YjRkMGRlNmZlOGM1NWE1YTBiZDlhN2M1YzEwM2NlNDkyYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxCfcpgrY8D0fqValgVcQ96S3dNU
97CYOAyB0R9CverAi/TG+beEFAEFweymZ4Orzkc1lKlezSQyJYCnt3B4R4COd6i6
p/LqO2pPiYk6cBmQTIZX/sxF8+JePOIxSnpEymC41/t3/nUMlMkq0m+fvtnLupTN
aP8ZRq+Yc9bXmYOzzt79Z93qlxWHTvzZzR3Q4l7ACIgZuR0hGKTWV8/xa2pxc7Vh
tl7JvaddyuSmVBbQcpP9QDU5Q6o9AydNLGg9VDVes4psbquqrnF3mEU6uHfM3W4Y
nVXYnQ4f4oByREYMFQD0/SBZxe8DRBAIsuWNH4u6fedLUIuLqQHEIOolvQIDAQAB
o4ICZzCCAmMwHQYDVR0OBBYEFMsXtNDeb+jFWloL2afFwQPOSSosMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEveXhlMDBONXY2TVZhV2d2WnA4WEJBODVKS2l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBqBAIAATBkAwQCl/GAAwQA
l/IPAwQAl/IXAwQAl/IoAwQAl/JAMAwDBACX8kkDBACX8lIDBACX8vIDBACX83MD
BACX83gDBACX89YwDAMEApf0BAMEAJf0BgMEAJf0OAMEAJf0OgMEA5f1eDANBgkq
hkiG9w0BAQsFAAOCAQEAfr0xJfgnMO0AmfoJxy7hOBrhQ8fvsxbpoWtmRxD6LJCa
o9ghwP4mnnOPkgoz451F/cMXtv9IuJOZ554ScCDV1dcXj+aOCGc5SnsOFL6T0LeI
Occke2+AVuRon71C4wvNeiaWImaKLQ0tbP94a1Ena1wsEe0bhO0j3ShdjgZ0Os2T
wY4uz5uTi7ry0u4fin0oo40+4dkCPWA+YkcobI8b6iUWpKijV/YyJChwMwyLisXG
yd92bX8wiZdkuJubON/DtBuGjmmYY4Bz8G2W1U4w12R5Y46aP3Lvo43cR0cU9Srg
jg3HIqNTMev7j2rtJ5nIALLIS/jT8/bi3wkjkFLuQg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 08:28:13 2025 by rpki-client