Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JD5-ypwT-tjgYB0oKYNI8Ze0NA4.roa
File: JD5-ypwT-tjgYB0oKYNI8Ze0NA4.roa (raw, json)
Hash identifier: M5q+s7IDPsTOuFv/nF3wgqdU4TDh8emDf+4J9FBf8ow=
Subject key identifier: 24:3E:7E:CA:9C:13:FA:D8:E0:60:1D:28:29:83:48:F1:97:B4:34:0E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196853D0430A42B642200B6867C6D7A07D4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JD5-ypwT-tjgYB0oKYNI8Ze0NA4.roa
Signing time: Wed 30 Apr 2025 05:48:10 +0000
ROA not before: Wed 30 Apr 2025 05:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215304
IP address blocks: 151.242.15.0/24 maxlen: 24
151.242.23.0/24 maxlen: 24
151.242.40.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.75.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.80.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.170.0/24 maxlen: 24
151.242.171.0/24 maxlen: 24
151.242.172.0/24 maxlen: 24
151.242.173.0/24 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.4.0/24 maxlen: 24
151.243.5.0/24 maxlen: 24
151.243.35.0/24 maxlen: 24
151.243.38.0/24 maxlen: 24
151.243.41.0/24 maxlen: 24
151.243.52.0/24 maxlen: 24
151.243.53.0/24 maxlen: 24
151.243.60.0/24 maxlen: 24
151.243.61.0/24 maxlen: 24
151.243.62.0/24 maxlen: 24
151.243.63.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.243.115.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 May 2025 05:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:3d:04:30:a4:2b:64:22:00:b6:86:7c:6d:7a:07:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 30 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=243e7eca9c13fad8e0601d28298348f197b4340e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:4c:81:80:52:f3:f8:2a:99:16:85:16:2d:
fb:42:67:ad:85:ff:c2:9e:83:b0:42:28:21:17:8d:
d1:78:f3:4e:a1:64:55:10:2f:6c:14:84:f3:2f:9a:
5c:38:fa:1f:23:40:54:70:04:ed:5c:0b:66:a5:af:
57:cc:48:2c:96:29:b2:68:9b:0a:72:51:45:da:92:
71:9e:34:cc:98:45:1e:f2:db:3f:9e:9a:36:9b:8b:
a6:d5:c7:36:39:c1:fa:d9:12:7f:85:4d:12:79:35:
67:c2:37:7c:6c:d9:f3:c2:49:cc:46:bf:6b:11:08:
dc:90:1a:ce:6b:2c:02:16:7c:34:f2:fc:b0:a9:2c:
13:bb:6e:e6:a6:2d:d3:00:77:56:55:13:e7:bf:04:
8a:a5:91:45:0e:08:4c:f5:34:27:ef:5c:1f:3b:4a:
fc:1d:4e:d6:a6:a3:27:2a:7d:38:40:6b:9f:4d:76:
7e:21:dc:da:d6:57:59:8c:a1:0e:3a:e1:28:74:6b:
5f:4e:10:65:e6:c8:99:fe:05:48:91:fe:e7:0e:0f:
73:31:f4:6e:3c:5b:65:28:54:16:a0:98:80:f9:03:
bb:21:46:d7:14:18:07:1c:79:7c:2f:2a:23:42:b2:
56:c0:c9:92:32:d6:07:a8:9d:58:38:e3:c6:57:e8:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:3E:7E:CA:9C:13:FA:D8:E0:60:1D:28:29:83:48:F1:97:B4:34:0E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JD5-ypwT-tjgYB0oKYNI8Ze0NA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.15.0/24
151.242.23.0/24
151.242.40.0/24
151.242.73.0-151.242.82.255
151.242.170.0-151.242.173.255
151.242.242.0/24
151.243.4.0/23
151.243.35.0/24
151.243.38.0/24
151.243.41.0/24
151.243.52.0/23
151.243.60.0/22
151.243.88.0/23
151.243.115.0/24
151.243.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:90:57:8b:ff:37:48:80:d1:46:96:da:31:a5:e3:10:b5:5b:
d4:7e:85:5c:96:24:62:e7:09:9e:04:7e:3e:5b:f3:2c:e1:d2:
0c:a6:5c:ba:2e:e5:5b:01:a4:ad:c0:62:b7:5b:58:fe:d5:35:
95:16:92:a6:74:16:47:36:d6:51:32:96:99:fb:c8:99:63:c0:
d3:ce:ef:cb:0c:55:d0:e9:7f:01:cc:c0:f2:a0:af:10:06:fa:
79:4f:ce:d0:d8:45:99:d2:1b:a2:c8:64:03:f9:e1:7c:5d:fd:
1c:26:9b:ca:9d:83:b5:5e:ca:1b:eb:79:de:42:8e:c5:b7:f0:
07:ba:c0:69:98:24:bf:70:50:5d:98:e2:6f:e6:81:28:6c:15:
c4:c8:b1:3c:f9:cb:4a:63:6a:6e:9f:88:8e:e3:9e:1b:a2:10:
0c:19:ce:78:54:e4:4c:f5:bf:57:28:27:cb:51:dd:8c:2e:9b:
97:b3:2b:80:99:03:91:e8:a0:49:4f:48:e8:00:3d:df:98:f0:
a7:24:e5:2d:f2:56:62:8b:a3:a4:8e:c3:fa:2d:2f:45:89:e2:
16:c4:1f:da:e5:ad:5c:b7:9d:12:96:ff:d3:06:2c:a5:9e:31:
4a:27:7b:b7:15:59:f1:98:7b:a1:d5:c8:2d:db:58:d3:25:e1:
d6:47:bc:2e
-----BEGIN CERTIFICATE-----
MIIFYjCCBEqgAwIBAgISAZaFPQQwpCtkIgC2hnxtegfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNDMwMDU0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDNlN2VjYTljMTNmYWQ4ZTA2MDFkMjgyOTgzNDhmMTk3YjQzNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq5MgYBS8/gqmRaFFi37Qmethf/C
noOwQighF43RePNOoWRVEC9sFITzL5pcOPofI0BUcATtXAtmpa9XzEgslimyaJsK
clFF2pJxnjTMmEUe8ts/npo2m4um1cc2OcH62RJ/hU0SeTVnwjd8bNnzwknMRr9r
EQjckBrOaywCFnw08vywqSwTu27mpi3TAHdWVRPnvwSKpZFFDghM9TQn71wfO0r8
HU7WpqMnKn04QGufTXZ+Idza1ldZjKEOOuEodGtfThBl5siZ/gVIkf7nDg9zMfRu
PFtlKFQWoJiA+QO7IUbXFBgHHHl8LyojQrJWwMmSMtYHqJ1YOOPGV+hN4QIDAQAB
o4ICbjCCAmowHQYDVR0OBBYEFCQ+fsqcE/rY4GAdKCmDSPGXtDQOMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvSkQ1LXlwd1QtdGpnWUIwb0tZTkk4WmUwTkE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEAJfyDwME
AJfyFwMEAJfyKDAMAwQAl/JJAwQAl/JSMAwDBAGX8qoDBAGX8qwDBACX8vIDBAGX
8wQDBACX8yMDBACX8yYDBACX8ykDBAGX8zQDBAKX8zwDBAGX81gDBACX83MDBACX
83gwDQYJKoZIhvcNAQELBQADggEBAD6QV4v/N0iA0UaW2jGl4xC1W9R+hVyWJGLn
CZ4Efj5b8yzh0gymXLou5VsBpK3AYrdbWP7VNZUWkqZ0Fkc21lEylpn7yJljwNPO
78sMVdDpfwHMwPKgrxAG+nlPztDYRZnSG6LIZAP54Xxd/Rwmm8qdg7Veyhvred5C
jsW38Ae6wGmYJL9wUF2Y4m/mgShsFcTIsTz5y0pjam6fiI7jnhuiEAwZznhU5Ez1
v1coJ8tR3Ywum5ezK4CZA5HooElPSOgAPd+Y8Kck5S3yVmKLo6SOw/otL0WJ4hbE
H9rlrVy3nRKW/9MGLKWeMUone7cVWfGYe6HVyC3bWNMl4dZHvC4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:01:49 2025 by rpki-client