Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TPMCtko0zJm03oTCKDecxoIa6II.roa
File: TPMCtko0zJm03oTCKDecxoIa6II.roa (raw, json)
Hash identifier: GHFUvoISetvC4xnMIpfPc5drsd8O3y0lzfp3+7oKkzs=
Subject key identifier: 4C:F3:02:B6:4A:34:CC:99:B4:DE:84:C2:28:37:9C:C6:82:1A:E8:82
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A3026B750ECFFEBE568EEE1F87281EDEC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TPMCtko0zJm03oTCKDecxoIa6II.roa
Signing time: Wed 29 Oct 2025 13:27:14 +0000
ROA not before: Wed 29 Oct 2025 13:27:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Nov 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:26:b7:50:ec:ff:eb:e5:68:ee:e1:f8:72:81:ed:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 29 13:27:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cf302b64a34cc99b4de84c228379cc6821ae882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:b7:cf:86:a6:b5:c6:2d:b1:fa:07:2d:09:
d5:7e:12:37:95:8d:cf:b1:89:83:89:d0:09:d1:94:
04:22:8e:92:34:10:fd:2c:a3:d6:a1:bb:11:ff:01:
d2:73:6d:fe:a7:1d:79:75:0f:2a:39:f9:c0:4d:3d:
4e:0f:07:fd:75:7f:ae:be:30:9f:2f:b9:fe:80:fe:
69:d3:94:49:31:3b:da:32:9f:bf:61:d2:db:78:c2:
af:b9:81:c7:b6:16:b4:42:5a:e3:73:f4:0a:2c:e3:
41:0e:b5:86:17:e0:a4:03:10:d7:e2:cf:47:56:42:
a2:e7:f5:2f:b7:f7:61:b2:c3:f7:84:60:cf:6e:98:
23:b4:49:1b:ad:f5:c1:6c:a8:b6:21:d5:0d:79:06:
42:d8:d7:ff:73:d4:e3:29:55:9b:a4:b0:8f:cf:01:
31:7f:8d:a2:aa:d2:cf:c3:81:1b:72:6a:d6:91:d4:
a0:f1:ad:43:e2:0c:13:88:98:12:67:0c:c0:8d:9c:
97:aa:60:dc:5b:e8:76:40:ec:f4:15:c1:e3:f2:42:
8d:14:ae:43:77:43:06:65:a0:06:bb:97:1d:98:6b:
04:09:69:2e:a2:c6:f0:12:86:f1:f2:08:6a:5d:57:
d8:82:ba:88:27:c2:db:19:d8:73:01:35:5c:3a:a8:
52:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F3:02:B6:4A:34:CC:99:B4:DE:84:C2:28:37:9C:C6:82:1A:E8:82
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TPMCtko0zJm03oTCKDecxoIa6II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.135.0/24
151.243.8.0/23
151.243.204.0/23
151.244.56.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.247.133.0-151.247.135.255
151.247.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:35:c4:51:e9:4c:48:25:00:fa:d1:39:52:ae:e3:99:21:03:
f2:6b:07:87:ad:fd:b9:9d:93:63:bb:ff:ba:fe:56:f2:6e:fc:
6a:ed:45:fe:ae:8b:f2:3a:90:2a:54:0e:ac:f8:45:92:cd:02:
97:7a:32:bd:5e:6e:bd:7d:69:d8:2f:d0:7e:0c:5d:9b:d8:95:
f5:f1:e0:32:dc:50:7e:4e:59:02:f8:68:e7:49:98:27:06:66:
02:e1:8b:34:04:9a:d4:e4:44:b8:9f:e0:2c:f3:27:b2:d1:ff:
0d:b5:01:4e:8d:bd:54:6f:5d:5d:03:b4:d0:40:f8:21:b1:48:
3b:55:b3:9b:b0:95:d5:cf:14:06:2b:ab:79:70:64:d8:cf:84:
be:8d:6d:83:8f:a4:37:7a:ef:50:ee:bc:f8:c4:6d:07:84:d9:
74:80:45:e7:f4:f3:95:2c:bb:2b:4c:bb:e4:62:a6:d2:34:cd:
27:0e:c8:16:24:7b:77:2c:b9:a1:6f:42:38:37:8e:d9:c0:a5:
59:77:60:93:4e:2d:a9:b5:96:b4:12:1a:fb:95:03:e2:92:32:
39:a5:74:5b:4f:54:06:7c:eb:ce:20:45:fe:79:bd:4e:be:0a:
a1:9a:0a:2c:ec:67:b8:fd:75:96:18:fe:2d:59:60:c5:51:93:
87:31:8a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:41:12 2025 by rpki-client