Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-O_HJqw0U9aiVYoEhUcO9FKDMTE.roa
File: 1-O_HJqw0U9aiVYoEhUcO9FKDMTE.roa (raw, json)
Hash identifier: 146WWbKCoaL80toNXCKZtB9Uw9By9oFuvNCXVxmqI4E=
Subject key identifier: F8:EF:C7:26:AC:34:53:D6:A2:55:8A:04:85:47:0E:F4:52:83:31:31
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01978C55836CF3729C7BDCBF419E3911A45D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-O_HJqw0U9aiVYoEhUcO9FKDMTE.roa
Signing time: Fri 20 Jun 2025 07:55:03 +0000
ROA not before: Fri 20 Jun 2025 07:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.202.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.242.39.0/24 maxlen: 24
151.242.67.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.242.159.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.244.78.0/24 maxlen: 24
151.245.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jun 2025 11:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:55:83:6c:f3:72:9c:7b:dc:bf:41:9e:39:11:a4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 20 07:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8efc726ac3453d6a2558a0485470ef452833131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:9a:0e:a0:3f:98:0c:48:48:b4:cc:a7:02:
59:ba:9a:2b:2b:7b:01:9b:47:c0:56:dc:ef:81:b7:
80:92:d1:40:1e:ef:3b:fc:18:8f:1f:6c:10:04:00:
c7:d4:d5:0c:79:be:87:fb:72:ee:81:1b:4a:39:b1:
52:30:06:71:aa:cd:35:37:24:11:dc:2c:d6:ec:fd:
8c:f4:15:3a:69:94:45:dd:1e:31:42:0f:a0:df:76:
af:51:c0:6d:2a:c1:e6:8d:df:07:81:76:ba:7b:79:
cc:25:1e:48:2a:2a:ae:6e:0a:7a:de:62:17:dc:10:
21:12:e0:38:62:54:b1:22:cd:0c:27:d8:9f:a7:cf:
fa:9b:05:6b:70:e5:de:f8:78:f8:df:d1:bb:0d:5c:
47:02:c6:32:94:52:0f:53:72:bf:08:6b:df:e5:b4:
b2:40:89:55:b6:69:21:04:5e:c2:f3:7a:10:9a:0e:
0d:57:07:69:c1:31:0d:08:00:4f:f5:b0:eb:72:91:
d7:15:53:bf:88:67:41:3a:71:35:ca:f2:bd:fd:f4:
de:27:f5:e6:61:bd:a9:5b:30:90:fd:8d:55:88:8f:
15:3a:8a:22:c3:45:95:1a:82:3a:46:2c:c8:0e:82:
a7:f9:cf:a4:bc:90:dd:d5:7b:04:5a:70:47:91:bf:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EF:C7:26:AC:34:53:D6:A2:55:8A:04:85:47:0E:F4:52:83:31:31
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-O_HJqw0U9aiVYoEhUcO9FKDMTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.240.14.0/24
151.240.17.0/24
151.242.39.0/24
151.242.67.0/24
151.242.117.0/24
151.242.159.0/24
151.243.6.0/24
151.243.160.0/22
151.244.78.0/24
151.245.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ec:b2:11:cb:59:34:e6:ea:e2:87:0f:a5:16:70:c8:1e:2c:
ee:41:fe:31:b1:3c:d5:76:a3:4a:e4:f7:0c:5e:63:8c:ad:e7:
e7:ad:33:fe:66:cb:b5:2d:55:61:ab:92:9c:97:84:9e:ca:50:
f0:57:fd:04:30:e3:04:e8:08:e0:ce:49:6b:ed:df:d7:8c:4e:
f1:30:14:ca:d2:5b:d8:69:07:37:0a:c8:5c:11:52:1e:d8:c0:
dc:8b:6c:7d:83:52:0e:6f:02:20:c3:cd:85:c4:bf:02:1b:10:
eb:ce:02:f0:e0:bd:a3:78:3a:03:3d:f2:84:d5:94:ae:01:83:
e1:7d:d2:51:81:59:f6:f5:58:29:67:d8:c3:f2:26:90:4f:fc:
10:6a:b6:6a:ea:79:7c:b9:88:99:ce:bf:d6:f5:43:2c:2d:09:
e2:49:f7:b9:29:c6:8b:7c:58:f1:87:5d:d7:52:5e:5d:59:45:
60:a9:15:41:6c:f4:11:68:7a:01:ad:ed:9f:ca:ea:53:b4:da:
b2:a6:73:e9:5f:3d:9a:4d:cd:6d:25:2a:ba:ac:28:5f:0a:cb:
84:d3:f7:7c:fc:ba:94:50:ac:38:ef:1f:2e:4f:45:18:a5:e6:
c1:8d:25:1f:34:4b:2a:30:d5:53:8c:09:bb:6d:d6:44:21:df:
a4:57:45:69
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:30:52 2025 by rpki-client