Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/As-d5sKh6Wottt5PkZ3EVUD3aKI.roa
File: As-d5sKh6Wottt5PkZ3EVUD3aKI.roa (raw, json)
Hash identifier: dMmdEk1Kp6sTqpkQYApVfTquS4XawaHurKeDt02+qU4=
Subject key identifier: 02:CF:9D:E6:C2:A1:E9:6A:2D:B6:DE:4F:91:9D:C4:55:40:F7:68:A2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A3DE13FEEB31652B0DD8156E0FBCDA2C0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/As-d5sKh6Wottt5PkZ3EVUD3aKI.roa
Signing time: Sat 01 Nov 2025 05:26:03 +0000
ROA not before: Sat 01 Nov 2025 05:26:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 151.241.36.0/24 maxlen: 24
151.241.37.0/24 maxlen: 24
151.242.202.0/24 maxlen: 24
151.242.203.0/24 maxlen: 24
151.242.205.0/24 maxlen: 24
151.243.36.0/24 maxlen: 24
151.243.47.0/24 maxlen: 24
151.243.184.0/22 maxlen: 22
151.244.14.0/24 maxlen: 24
151.244.66.0/24 maxlen: 24
151.244.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Nov 2025 06:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3d:e1:3f:ee:b3:16:52:b0:dd:81:56:e0:fb:cd:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 1 05:26:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02cf9de6c2a1e96a2db6de4f919dc45540f768a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:cf:ec:c6:63:ce:6d:15:d2:03:51:49:d7:
af:65:2e:17:d9:39:cc:90:c5:56:5b:5b:11:9a:a3:
2c:d1:4a:09:1d:a3:9b:47:96:c3:09:49:e9:a3:e1:
8c:60:98:60:18:e7:9f:9e:45:0a:e2:8a:7c:45:92:
d1:d9:a1:b8:e3:bc:be:4f:2e:3f:e5:ed:f2:fa:d8:
7c:c8:ba:a1:48:ea:84:f3:6c:f0:8e:d2:28:cd:c0:
f7:3e:6f:3f:2d:ed:7c:b3:11:08:64:52:77:4e:09:
79:c8:1c:7c:99:50:fd:62:ea:dd:f2:b4:ca:a9:3f:
0d:1a:a3:94:44:a2:86:f4:ca:3d:3e:bf:f6:75:82:
72:6c:fe:e2:b3:cb:cc:aa:af:70:5c:a5:d9:df:f3:
c3:8c:ef:b9:91:c8:55:b8:70:23:89:a6:e3:e9:33:
45:94:51:f8:aa:51:41:2d:0c:7c:c7:e2:cb:bf:ab:
a5:17:5c:88:d5:7a:ff:e4:c6:7d:cc:45:42:2e:c4:
50:b6:14:72:07:e5:ce:df:d3:24:80:0d:15:c0:c3:
62:40:82:e0:26:aa:2f:4b:ba:86:91:4b:19:c3:28:
a4:90:80:7a:23:00:35:c0:fe:15:3e:c3:62:34:78:
02:8f:7a:9a:2a:c0:5a:37:14:47:84:ae:b6:60:30:
f9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CF:9D:E6:C2:A1:E9:6A:2D:B6:DE:4F:91:9D:C4:55:40:F7:68:A2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/As-d5sKh6Wottt5PkZ3EVUD3aKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.36.0/23
151.242.202.0/23
151.242.205.0/24
151.243.36.0/24
151.243.47.0/24
151.243.184.0/22
151.244.14.0/24
151.244.66.0/23
Signature Algorithm: sha256WithRSAEncryption
39:86:b6:fd:f5:8f:88:a3:38:eb:2f:0e:b0:3c:44:a9:4f:1a:
f4:c7:9f:40:22:49:64:bd:6d:6f:aa:87:76:d7:e1:1e:79:cc:
05:22:94:46:7a:65:c8:75:3c:d9:e6:ba:27:6b:de:3d:12:d2:
7a:c4:43:1e:75:bb:3d:62:0c:9e:8b:2c:da:d5:8c:c2:ec:ba:
93:ed:ff:93:de:1b:1e:03:da:8c:70:4c:e7:81:af:e4:8e:8c:
1e:70:73:f5:25:ce:3e:d2:9f:a2:93:ee:55:1c:21:e1:27:eb:
e1:46:28:8e:8e:6f:7b:11:cb:1f:dd:ac:9a:00:90:6e:3e:2f:
27:e8:34:2b:77:d3:af:dd:a4:2b:03:b3:16:6c:22:be:3d:39:
10:26:61:af:b3:e3:08:25:15:0f:23:f5:fd:e7:01:14:71:d4:
6c:db:89:a8:ca:d9:55:e4:dd:de:6a:a4:6f:54:ad:51:56:13:
c5:2f:24:5f:6c:70:fa:4d:58:81:56:f1:ac:ff:76:d6:e8:55:
55:8c:2c:13:a3:af:23:1f:76:37:3a:00:d4:62:c7:87:d3:78:
1c:f1:68:5f:0d:99:92:84:55:30:30:48:9b:c1:fa:e8:4e:32:
fe:60:60:84:49:fe:08:17:7e:0e:28:74:b0:1b:9c:33:71:12:
dd:f9:23:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:13:45 2025 by rpki-client