Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0wEZtPwD9qhMSSwdty1Xq9wv6LE.roa
File: 0wEZtPwD9qhMSSwdty1Xq9wv6LE.roa (raw, json)
Hash identifier: gEpVO4i1nLR8r3EsE2mKW8GjWe8W1kGNQyaQOZFskc8=
Subject key identifier: D3:01:19:B4:FC:03:F6:A8:4C:49:2C:1D:B7:2D:57:AB:DC:2F:E8:B1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019786F0E46ED223B18977B986ADBBA1389F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0wEZtPwD9qhMSSwdty1Xq9wv6LE.roa
Signing time: Thu 19 Jun 2025 06:47:03 +0000
ROA not before: Thu 19 Jun 2025 06:47:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.242.87.0/24 maxlen: 24
151.242.174.0/23 maxlen: 23
151.242.192.0/23 maxlen: 23
151.243.3.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jun 2025 11:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:f0:e4:6e:d2:23:b1:89:77:b9:86:ad:bb:a1:38:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 19 06:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d30119b4fc03f6a84c492c1db72d57abdc2fe8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:09:85:33:73:af:8f:9e:55:82:69:66:79:10:
56:89:b2:78:e0:66:cc:5b:a6:a7:cd:6b:1b:21:2a:
1d:1f:84:12:1f:a4:a2:b8:84:b0:b3:0f:66:05:0d:
9a:c7:a6:7f:52:7e:6b:a5:96:20:f1:c5:34:ac:b1:
11:3c:b4:9c:3d:f2:5a:4c:c7:fa:cf:a3:41:5d:0a:
5f:39:b2:b5:90:57:1b:4a:57:d2:be:68:09:4f:0e:
88:91:37:fc:09:6d:27:70:f9:ed:be:26:c5:fc:0a:
5f:12:19:50:1f:e0:ae:a9:9b:e9:2e:94:cc:3e:7d:
b9:6d:47:d7:70:d0:f8:7f:2f:64:6f:92:8a:6b:14:
fa:f2:7a:f7:97:90:77:02:b2:b2:86:c9:f6:72:0b:
2f:e1:e0:d3:26:e4:7c:b6:f0:72:92:8a:b6:22:4c:
06:ba:ee:2e:4c:2c:94:29:f0:a3:51:50:1c:9f:d6:
59:47:e2:85:64:92:15:e5:f4:0e:34:14:d8:7f:07:
f5:04:68:0a:dd:74:25:c9:56:78:72:9b:bc:57:f8:
1f:6e:a1:1f:a5:1b:a9:df:7c:cd:51:29:ce:dd:6c:
6c:79:bf:08:57:18:c2:cc:76:f5:15:d9:03:02:1c:
1f:84:70:75:d3:54:64:14:3f:15:58:6c:b6:68:51:
f4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:01:19:B4:FC:03:F6:A8:4C:49:2C:1D:B7:2D:57:AB:DC:2F:E8:B1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0wEZtPwD9qhMSSwdty1Xq9wv6LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.240.79.0/24
151.242.87.0/24
151.242.174.0/23
151.242.192.0/23
151.243.3.0/24
151.243.101.0/24
151.244.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f7:7b:03:5c:ed:26:ea:c5:6f:0f:59:63:d2:96:c0:d1:8e:
a5:a8:4f:c6:fa:26:0d:a1:95:76:cf:c4:c2:62:b3:9d:1d:40:
ba:ea:8a:bf:70:04:ef:8e:58:2a:ac:64:5f:25:77:b2:e4:a6:
d7:78:93:75:64:af:58:8d:fe:ea:02:7d:81:03:d2:0f:cd:ca:
eb:a0:c0:c5:f6:df:ec:63:8e:14:bf:43:8b:94:a0:23:6e:f1:
be:d7:95:14:8e:3d:90:e7:ac:a8:9d:ee:ae:a3:ad:32:0b:3b:
ed:54:f5:18:5e:7e:35:0f:4f:db:5c:25:a3:c5:50:ac:e7:18:
2c:fa:a7:e9:36:77:42:f1:62:ad:6f:55:1d:6c:64:15:fa:73:
62:39:92:5b:c4:d2:e0:83:cb:1f:53:4a:74:5c:23:0c:ff:19:
9e:b9:aa:1d:b7:4e:ee:ef:d5:3a:ab:14:64:81:f2:72:bd:59:
5b:2f:dc:ed:83:00:a1:85:47:11:47:3c:75:19:02:da:1a:45:
a7:9c:56:db:3a:4c:b3:b0:74:90:37:db:dd:c1:48:a6:f4:c2:
88:92:6b:3d:c9:a0:85:94:9f:b0:ba:9f:ae:33:33:e9:25:79:
1f:3e:36:71:c6:2d:ad:0c:12:6a:ce:af:3c:97:e7:aa:54:30:
93:ff:48:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:13:41 2025 by rpki-client