Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RVkrVKDtlFNQ5rjr2z7APMyA844.roa
File: RVkrVKDtlFNQ5rjr2z7APMyA844.roa (raw, json)
Hash identifier: ijl4/dNSQnPdDq7NlZ9NYvLURoWbmGTeg2Jkpe/XiHo=
Subject key identifier: 45:59:2B:54:A0:ED:94:53:50:E6:B8:EB:DB:3E:C0:3C:CC:80:F3:8E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A3026B6C5A3C158C1E941F039CD6B7B9D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RVkrVKDtlFNQ5rjr2z7APMyA844.roa
Signing time: Wed 29 Oct 2025 13:27:14 +0000
ROA not before: Wed 29 Oct 2025 13:27:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Nov 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:26:b6:c5:a3:c1:58:c1:e9:41:f0:39:cd:6b:7b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 29 13:27:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45592b54a0ed945350e6b8ebdb3ec03ccc80f38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:ec:9e:23:9d:19:80:2b:cd:b2:ab:56:8b:
0a:f1:85:f4:a2:7d:b3:17:2e:40:b1:3b:a3:db:f0:
ce:bf:6e:94:e3:c4:fc:a9:9e:b6:e8:94:6d:35:a2:
f7:55:ba:9f:9b:d0:a3:28:69:99:37:a0:7b:ec:b3:
61:71:72:cc:09:ce:75:0d:9a:18:19:8d:a4:19:90:
cc:71:dc:13:3c:48:15:45:1f:e5:3d:4d:22:36:24:
26:ae:8d:c3:a5:46:ae:db:d8:2b:30:ee:92:8b:99:
43:47:21:92:56:40:59:7b:2e:b5:52:be:9f:2a:bd:
73:1c:59:c1:4c:26:3f:c7:9d:a8:a6:cf:f2:9b:8c:
16:25:11:e9:5e:8e:d4:43:b8:3c:6d:4d:80:b2:a5:
38:84:ce:8f:39:a0:7c:95:ce:1d:a0:4d:05:9f:3c:
d7:db:55:b3:4f:21:d9:a6:f3:63:53:75:ca:1b:bb:
0e:aa:76:58:72:87:02:fc:ad:e8:86:b6:6a:77:fc:
06:be:e5:55:5d:43:ee:62:fa:2d:8c:a6:01:1c:c9:
9d:15:ef:2b:19:6a:cd:01:69:11:e3:01:d8:a3:59:
86:d8:98:f9:06:d8:41:bb:4b:f8:2b:05:32:3c:99:
50:2b:06:11:77:52:ca:52:41:9b:48:f7:66:1b:a4:
3c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:59:2B:54:A0:ED:94:53:50:E6:B8:EB:DB:3E:C0:3C:CC:80:F3:8E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RVkrVKDtlFNQ5rjr2z7APMyA844.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.135.0/24
151.243.8.0/23
151.243.204.0/23
151.244.56.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.247.133.0-151.247.135.255
151.247.188.0/22
Signature Algorithm: sha256WithRSAEncryption
89:a0:64:af:ba:40:a9:16:80:e5:ee:88:ff:01:ea:ac:3f:fd:
f1:33:9a:60:ec:d3:7d:f9:7f:8e:2b:ee:09:65:8c:35:9c:63:
34:f0:04:7b:b4:77:db:d0:d0:d9:ee:c0:0e:49:b4:9f:f2:0b:
30:07:58:01:b8:82:99:c8:20:67:43:fd:d3:47:a7:98:e8:4e:
92:e9:a2:06:6b:6e:6e:5a:d3:18:b0:56:7c:db:3b:04:fd:cd:
1d:e1:b8:ad:d5:a6:95:5d:26:90:df:20:8d:5d:8c:c3:72:4e:
56:f9:a1:73:38:5a:fc:5a:54:36:66:01:1a:62:aa:39:22:9a:
3b:7b:99:9d:af:02:15:41:65:87:ac:3f:34:00:66:8c:ec:ba:
05:05:d0:b0:08:53:62:ce:8a:5d:d5:05:6a:1b:d4:87:9f:97:
ca:96:42:75:50:d3:ff:f2:07:dc:42:7b:a3:c2:48:d7:8e:b7:
8a:82:cf:5b:70:6e:71:ee:3d:00:8b:30:4b:97:5a:dd:8c:32:
71:aa:9a:27:2f:c4:7d:03:cb:1d:ec:7a:4c:0f:00:24:35:bc:
1e:c3:74:8d:8f:3e:a3:a5:ab:26:b0:c1:4b:0e:4a:e7:a6:56:
48:8e:b2:67:32:ec:31:9d:09:7c:7f:e9:12:8b:0a:bf:28:cf:
5c:02:7e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:42:35 2025 by rpki-client