Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w0hQjTdVolAbymtDD6bV44ZBPzg.roa
File: w0hQjTdVolAbymtDD6bV44ZBPzg.roa (raw, json)
Hash identifier: DHXvTl9RlSUZbCi5x5NJkLUtXN7baohULUZ+2fMVYuU=
Subject key identifier: C3:48:50:8D:37:55:A2:50:1B:CA:6B:43:0F:A6:D5:E3:86:41:3F:38
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01984C1388D8794E225F7DC2E597253F360F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w0hQjTdVolAbymtDD6bV44ZBPzg.roa
Signing time: Sun 27 Jul 2025 13:30:05 +0000
ROA not before: Sun 27 Jul 2025 13:30:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 151.240.2.0/24 maxlen: 24
151.242.114.0/24 maxlen: 24
151.242.126.0/24 maxlen: 24
151.242.202.0/23 maxlen: 23
151.242.252.0/24 maxlen: 24
151.244.213.0/24 maxlen: 24
151.244.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Aug 2025 10:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:13:88:d8:79:4e:22:5f:7d:c2:e5:97:25:3f:36:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 27 13:30:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c348508d3755a2501bca6b430fa6d5e386413f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:51:29:cc:a2:e6:c4:13:80:6a:a4:06:82:
1f:03:9d:6f:c2:2e:d9:d7:d5:84:14:fa:4b:5b:51:
ff:5f:3a:be:6d:fa:da:26:1d:40:e5:f8:fd:ad:5b:
93:f6:26:09:56:cb:c5:c4:9a:68:07:c8:99:d0:20:
dc:95:46:b5:30:0e:ce:f1:02:98:5f:77:0e:9f:8b:
fb:77:a6:15:d1:f4:aa:01:af:96:f3:28:be:24:33:
0b:18:aa:45:ca:5f:fe:0e:63:65:c0:a5:50:9a:f2:
7e:24:ce:45:33:39:cb:e3:56:28:f8:1e:03:84:97:
84:7c:98:86:a1:fd:d4:3c:9d:34:b6:c6:19:7f:47:
59:bd:b3:44:72:2a:b8:39:89:c5:87:bf:8b:65:57:
f9:6f:43:be:0f:9a:97:4f:f6:47:b2:f1:b3:d9:4e:
92:c2:cd:f7:06:2d:86:9c:d0:9c:0b:1a:08:94:cd:
26:da:be:c6:9d:41:c7:6b:1c:ea:b8:e3:1e:4e:75:
af:85:06:c0:83:a0:28:c3:f2:c6:92:91:f2:66:f0:
6c:5c:a2:81:f3:ba:71:43:a0:59:94:e0:36:fd:8e:
02:e7:90:93:75:16:44:c9:1b:62:2f:8e:b0:39:fd:
5c:b6:67:95:92:63:eb:f2:7c:dd:a1:9d:84:ef:6b:
49:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:48:50:8D:37:55:A2:50:1B:CA:6B:43:0F:A6:D5:E3:86:41:3F:38
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w0hQjTdVolAbymtDD6bV44ZBPzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.242.114.0/24
151.242.126.0/24
151.242.202.0/23
151.242.252.0/24
151.244.213.0/24
151.244.215.0/24
Signature Algorithm: sha256WithRSAEncryption
16:20:fd:bf:22:10:f4:a2:e8:73:8e:d9:c2:cb:0d:b6:b0:d8:
33:7c:70:1d:59:73:97:e3:37:f4:db:01:0c:be:8b:fb:f8:aa:
3a:5d:61:dc:8a:0a:36:73:51:36:ed:d8:b0:2a:3b:88:f2:88:
c2:80:94:76:09:95:a7:f4:36:51:05:31:c7:2a:97:f5:1c:cc:
47:ec:a7:56:e4:05:4c:c1:43:73:0f:1e:c5:be:ba:f7:91:cb:
42:cf:e7:39:74:b7:2d:f1:41:2a:a9:ba:81:94:88:db:7e:d0:
64:c4:f4:7d:e4:97:2e:21:41:c4:08:96:52:f8:21:5a:7f:ba:
41:dd:5e:28:f9:8d:b6:e5:ca:ac:f2:9d:99:29:4c:a4:fb:a8:
50:72:b1:f0:64:da:95:6b:68:8a:40:84:ad:d9:af:54:d6:86:
90:8b:9d:b0:27:24:de:05:80:bf:50:ba:a9:df:b8:ab:c3:9b:
5a:d3:f3:8b:72:11:54:d8:75:9d:60:8e:a1:53:81:e4:cc:1f:
ea:8a:97:8e:13:b9:dc:49:ce:26:d4:f7:25:52:26:ec:ba:9f:
4d:e7:96:20:3b:8f:21:e3:b2:da:5c:a6:5d:8f:bc:bb:a2:c2:
54:70:e3:ba:91:55:21:0c:28:1c:67:a2:cc:ab:20:1a:9e:56:
e7:cd:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:14:40 2025 by rpki-client