Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pocp4nqx1uKFLqoBkG4g-wglNdk.roa
File: Pocp4nqx1uKFLqoBkG4g-wglNdk.roa (raw, json)
Hash identifier: N9IIl0dFIljOPpxwmCB3ys3NG/YfDGtsoeEDMhtLGgE=
Subject key identifier: 3E:87:29:E2:7A:B1:D6:E2:85:2E:AA:01:90:6E:20:FB:08:25:35:D9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198599409052AA765CF51915C9D4645E5F8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pocp4nqx1uKFLqoBkG4g-wglNdk.roa
Signing time: Wed 30 Jul 2025 04:25:30 +0000
ROA not before: Wed 30 Jul 2025 04:25:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.241.232.0/21 maxlen: 24
151.242.56.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.16.0/21 maxlen: 21
151.245.56.0/22 maxlen: 22
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Aug 2025 04:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:94:09:05:2a:a7:65:cf:51:91:5c:9d:46:45:e5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 30 04:25:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e8729e27ab1d6e2852eaa01906e20fb082535d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:3a:d2:b5:61:01:99:25:e6:39:c5:50:dc:
ea:76:54:e3:89:2e:89:83:05:4f:07:c1:36:31:b6:
7e:45:6a:26:09:f5:70:08:51:a2:91:a5:32:f4:3c:
7e:c8:33:52:55:5e:6d:6c:0f:79:e4:55:91:5a:e3:
b5:16:c3:e4:3c:6d:21:c4:f4:72:4b:36:25:87:da:
c6:1f:ca:a2:78:c6:3f:c1:ae:46:49:14:0a:c2:09:
21:6b:72:39:db:8f:fc:51:03:09:cd:20:39:0f:eb:
68:11:e3:3a:8e:39:59:3e:69:0a:28:7c:0c:61:71:
ee:6f:e1:ed:82:24:b2:ea:21:06:ee:8d:3b:fb:ba:
b1:bd:b2:66:69:e4:c2:0f:9a:8d:16:11:06:76:0a:
97:eb:66:c0:f1:15:96:51:25:3c:f6:4e:24:46:ce:
ac:1a:3d:91:11:c8:54:df:65:5d:21:e3:5d:89:89:
9f:58:8f:b3:9f:fe:32:90:17:0c:27:1a:cd:6e:5b:
92:4d:d0:67:34:4c:49:ed:42:80:69:c5:8d:80:bd:
aa:e6:da:54:31:83:2b:68:8d:bf:42:d9:ae:57:fd:
94:33:42:cd:4f:27:f3:31:8f:d4:98:2f:a5:97:61:
fa:c0:f5:d8:1a:a2:1c:a0:a6:64:6f:f1:c0:66:0a:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:87:29:E2:7A:B1:D6:E2:85:2E:AA:01:90:6E:20:FB:08:25:35:D9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pocp4nqx1uKFLqoBkG4g-wglNdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.171.0/24
151.241.132.0/22
151.241.232.0/21
151.242.56.0/24
151.243.8.0/23
151.243.204.0/23
151.244.16.0/21
151.245.56.0/22
151.245.187.0-151.245.188.255
Signature Algorithm: sha256WithRSAEncryption
a9:5d:9b:6a:c7:b0:01:51:61:a2:85:0e:e0:07:07:9e:fa:ea:
95:31:41:41:1f:47:2e:7b:2d:b7:c3:b4:09:c9:5a:f1:bf:2c:
86:a2:bf:8a:3a:10:6d:47:46:ce:60:ef:78:16:dd:9c:1b:4f:
ed:4a:c6:bb:69:02:41:e9:c0:ae:0e:29:0d:f8:ac:19:2d:04:
d0:dd:c9:d1:86:49:2c:c3:f3:f5:bf:78:16:2d:79:eb:0e:f1:
a1:a0:25:4d:ae:69:16:66:23:92:b8:f9:a4:02:67:96:bc:a4:
4a:22:24:72:0a:0d:35:4f:df:15:33:9e:c0:02:0a:a4:b1:85:
a4:d5:3f:b1:6c:03:48:5e:e6:a6:4f:af:96:21:01:7d:57:b0:
8a:df:de:f1:b2:d4:4d:ed:c4:de:73:ef:d3:4b:6d:c5:71:68:
65:17:7a:6d:98:7f:59:e8:ac:0b:49:a8:00:b5:7e:8b:d6:49:
d5:21:4c:1b:d4:2a:d9:85:8a:db:cd:2f:c5:a3:a1:e7:be:80:
5c:7a:fb:f7:10:6e:79:f3:83:89:ed:5a:fc:4f:1b:fe:c8:f6:
c0:19:24:bb:7d:29:3e:b2:20:23:5d:eb:28:29:c4:4e:77:6c:
ab:e1:ef:a4:03:81:1c:ba:65:3d:fe:b3:31:fd:ac:0a:ca:37:
38:c3:a6:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:17 2025 by rpki-client