Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R_Nra6pfYeT3lAfDxFtxR6m6jrM.roa
File: R_Nra6pfYeT3lAfDxFtxR6m6jrM.roa (raw, json)
Hash identifier: Kh1KzYKfp1aL7UBkZAJm0xxnaPFDeU8mfdk0pU8UX/Q=
Subject key identifier: 47:F3:6B:6B:AA:5F:61:E4:F7:94:07:C3:C4:5B:71:47:A9:BA:8E:B3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198693977DF0D39B55F8D160498A6CD3F79
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R_Nra6pfYeT3lAfDxFtxR6m6jrM.roa
Signing time: Sat 02 Aug 2025 05:20:30 +0000
ROA not before: Sat 02 Aug 2025 05:20:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135402
IP address blocks: 151.240.96.0/24 maxlen: 24
151.242.86.0/24 maxlen: 24
151.242.132.0/24 maxlen: 24
151.242.133.0/24 maxlen: 24
151.243.4.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.206.0/24 maxlen: 24
151.243.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Aug 2025 09:59:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:39:77:df:0d:39:b5:5f:8d:16:04:98:a6:cd:3f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 2 05:20:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47f36b6baa5f61e4f79407c3c45b7147a9ba8eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:c9:10:3f:52:05:2e:43:10:db:aa:27:20:
2b:32:9c:e2:ac:66:87:81:a8:7c:b3:6e:38:30:9f:
85:cb:63:4f:51:e8:de:f5:0a:91:a4:5d:f8:0d:c2:
9a:3d:b1:44:06:ec:c9:68:d0:e5:4c:e8:90:65:67:
ba:db:eb:ba:5d:6a:28:8e:e1:23:9d:55:b2:be:6c:
e6:9b:aa:54:51:26:78:ba:95:6c:ec:48:35:2b:31:
0f:ea:c8:e4:05:1e:70:7b:c7:61:81:c9:60:59:d9:
d6:9d:78:7c:89:27:53:6d:86:79:40:26:14:b7:c5:
f9:ed:8b:e7:8e:45:1d:fc:88:f2:ed:c3:ce:00:3b:
8c:67:04:7e:16:0e:73:37:a3:e6:38:14:66:3d:48:
a3:24:5d:df:81:80:5f:55:23:76:4a:95:49:ef:0b:
ce:96:f4:2b:72:be:b2:b3:68:10:98:d4:a3:26:20:
93:be:9c:02:b4:63:cd:02:12:87:f1:17:b4:17:7e:
b3:c0:6c:48:52:74:a2:9f:a5:49:14:aa:ad:f0:a7:
49:ea:07:82:ae:23:df:b9:96:35:1a:bb:c7:cf:88:
15:65:90:a2:6e:30:78:18:05:7d:31:58:ae:2a:bd:
bf:13:35:5c:87:af:e7:4d:01:88:84:cb:93:f6:bd:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F3:6B:6B:AA:5F:61:E4:F7:94:07:C3:C4:5B:71:47:A9:BA:8E:B3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R_Nra6pfYeT3lAfDxFtxR6m6jrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.96.0/24
151.242.86.0/24
151.242.132.0/23
151.243.4.0/24
151.243.113.0/24
151.243.206.0/24
151.243.221.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ec:ef:ff:ce:e3:71:e4:f9:b6:28:07:7d:86:07:56:e6:0f:
e0:6f:84:e1:dc:3b:f8:69:c5:7a:00:27:d5:ce:c2:3f:f6:4c:
a3:f0:d5:a4:cd:ce:28:b8:c7:b0:30:7d:aa:60:d6:4e:5c:bc:
f4:0f:c6:cd:dd:6d:5c:56:38:08:ea:3c:f3:1a:2a:c3:08:4e:
41:96:de:22:35:dc:8c:1a:38:f1:ef:fb:ae:52:85:dc:c9:ca:
84:b1:56:a4:11:b7:3c:4e:21:42:f4:0f:37:db:55:a3:f4:32:
cb:e0:85:f3:35:ef:88:99:61:cc:de:41:5f:bd:18:05:48:14:
4a:d7:1d:75:f7:a7:8d:71:7f:3b:dd:73:61:91:5c:dd:6d:f7:
b1:33:19:11:38:af:bd:2f:24:9d:f2:31:05:93:fd:8f:8f:47:
b8:a2:6a:75:b8:9a:e1:bf:41:0b:51:e9:fb:ef:56:c2:8f:bb:
f4:a2:76:80:c0:fe:6d:ee:94:8f:b9:49:1f:1f:c1:53:57:11:
dd:68:7e:39:1d:09:28:ec:88:af:2d:01:43:91:3e:10:21:07:
1b:2b:59:3e:da:be:14:a6:8e:18:b4:9e:e6:fd:b0:2e:42:5a:
1a:ba:4a:ea:6e:ee:1d:b0:26:b0:28:13:29:96:fe:79:28:df:
b4:58:ff:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:50 2025 by rpki-client