Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XxG1Y1PxaJ5hym-DSI7Lq4eGYXM.roa
File: XxG1Y1PxaJ5hym-DSI7Lq4eGYXM.roa (raw, json)
Hash identifier: OxrRV3ephp/sYLFMVqUPIG9jeRLjU9OGbVteSLhqyac=
Subject key identifier: 5F:11:B5:63:53:F1:68:9E:61:CA:6F:83:48:8E:CB:AB:87:86:61:73
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01985582B62964166285D1CEA3855C4C126B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XxG1Y1PxaJ5hym-DSI7Lq4eGYXM.roa
Signing time: Tue 29 Jul 2025 09:28:06 +0000
ROA not before: Tue 29 Jul 2025 09:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 151.240.45.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.160.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.57.0/24 maxlen: 24
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.159.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.132.0/24 maxlen: 24
151.244.133.0/24 maxlen: 24
151.244.191.0/24 maxlen: 24
151.244.193.0/24 maxlen: 24
151.244.198.0/24 maxlen: 24
151.244.201.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.70.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.201.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Aug 2025 12:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:82:b6:29:64:16:62:85:d1:ce:a3:85:5c:4c:12:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 29 09:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f11b56353f1689e61ca6f83488ecbab87866173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9f:bc:e0:2a:c7:08:68:71:6c:56:0d:89:bb:
97:65:4e:72:34:84:92:45:be:d1:30:a2:1d:ab:61:
78:d8:f8:8a:c1:05:4e:db:25:0a:c1:a7:26:86:dd:
bd:d1:e1:ab:33:76:37:38:a2:7b:53:50:a0:8f:22:
12:dd:38:7d:02:d6:ac:4c:2b:91:cc:b9:db:9b:49:
1f:96:51:08:ac:01:60:54:b3:e8:1c:d8:4a:3b:8b:
c0:10:1e:ef:c3:4f:bf:f2:a7:9a:71:bd:bc:c6:6f:
5d:78:af:2a:d1:99:ad:4b:38:4b:ce:ef:1e:1a:a0:
17:73:99:de:bb:99:37:5c:bb:48:a7:4c:95:78:5c:
28:a5:7e:83:6c:e9:75:51:d9:e0:b7:69:89:7e:d3:
c2:c5:72:97:c4:35:b7:d1:28:c1:08:1d:e8:6b:56:
18:cc:af:3a:cf:db:ba:f7:e0:2f:9b:c5:64:0d:00:
6b:1b:5f:6a:66:64:c1:65:e5:4d:71:e3:e7:a8:aa:
4e:e2:c3:66:9a:30:84:3c:1e:19:db:10:12:0f:51:
cd:38:4a:0b:c9:b4:3a:c5:06:26:bf:31:68:20:57:
5e:e1:e5:69:f3:f5:bf:f6:a7:ad:a6:e0:89:db:87:
7c:e3:06:f0:8e:be:2a:09:f0:c1:7e:5a:cb:ef:0c:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:11:B5:63:53:F1:68:9E:61:CA:6F:83:48:8E:CB:AB:87:86:61:73
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XxG1Y1PxaJ5hym-DSI7Lq4eGYXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.45.0/24
151.240.163.0/24
151.240.173.0/24
151.241.30.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.77.0/24
151.241.160.0/24
151.241.204.0/24
151.242.45.0/24
151.242.57.0/24
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.159.0/24
151.244.5.0/24
151.244.57.0/24
151.244.111.0/24
151.244.115.0/24
151.244.131.0-151.244.133.255
151.244.191.0/24
151.244.193.0/24
151.244.198.0/24
151.244.201.0/24
151.244.212.0/24
151.245.70.0/24
151.245.78.0/24
151.245.201.0/24
151.245.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:bb:55:bf:ec:1d:60:25:fe:24:6a:1f:e4:3a:d9:ef:31:7f:
e6:5a:16:35:44:70:20:56:e6:1d:8e:1c:bd:75:40:f4:46:b6:
d8:6e:83:14:f7:c3:08:65:ca:74:53:b7:b1:84:ef:87:2b:89:
73:56:65:aa:f1:bd:a9:c4:18:ba:21:c3:89:24:6d:67:be:96:
48:c8:fd:a3:f2:8d:6c:07:ab:51:5e:3b:eb:48:e5:a1:ca:75:
87:ec:e6:6a:81:12:03:01:71:38:dd:8b:9d:71:62:66:96:5e:
9d:ad:46:eb:39:53:72:28:92:0e:ce:25:4f:ee:89:db:60:1a:
7d:6c:ad:33:40:99:54:cf:e7:24:ef:6d:b3:38:ff:67:e0:92:
ba:32:45:17:d2:a2:22:22:ef:ee:1e:85:5f:77:8a:43:f8:e3:
85:17:15:40:9c:8d:10:21:b7:0c:71:a6:6a:15:0b:1c:eb:cc:
5d:9e:9e:98:1f:55:3b:da:5b:c7:23:91:a4:14:5a:11:18:59:
47:05:31:77:d6:ab:1b:ae:b1:6c:b0:ac:97:4c:97:bf:ef:2b:
14:bf:94:f6:9e:eb:ea:e5:88:2a:5c:43:be:15:ed:d0:1c:63:
c4:94:49:b2:73:ed:6b:a7:aa:c8:87:b2:d8:1d:a4:f1:bf:e3:
31:d9:ef:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 21:02:16 2025 by rpki-client