Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4MSPGuiXeTPNg4mbNV4Wp3j4PLE.roa
File: 4MSPGuiXeTPNg4mbNV4Wp3j4PLE.roa (raw, json)
Hash identifier: cxK/YxOJuR7OZBhA+WKmUchG9a/6MIF22Z/LKeG02Zw=
Subject key identifier: E0:C4:8F:1A:E8:97:79:33:CD:83:89:9B:35:5E:16:A7:78:F8:3C:B1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01977E373AE5DCD85EA37C1205302219D442
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4MSPGuiXeTPNg4mbNV4Wp3j4PLE.roa
Signing time: Tue 17 Jun 2025 14:07:18 +0000
ROA not before: Tue 17 Jun 2025 14:07:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20437
IP address blocks: 37.202.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Jun 2025 08:25:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7e:37:3a:e5:dc:d8:5e:a3:7c:12:05:30:22:19:d4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 17 14:07:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0c48f1ae8977933cd83899b355e16a778f83cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:aa:90:fe:e4:aa:7c:65:47:74:34:bc:06:
93:e1:ca:fc:60:31:83:d2:57:91:27:32:af:87:8c:
37:3e:de:aa:3c:07:d3:b6:f0:eb:ff:1e:ec:e4:7b:
3e:29:67:1c:08:7a:10:21:1b:94:9d:f6:e1:2a:50:
b2:3a:70:11:f3:40:cf:ec:97:01:95:ff:17:77:81:
c2:b6:dd:9c:46:3c:5c:1e:a8:1b:fe:b4:b7:5e:b3:
83:25:8c:08:dd:4f:59:4d:bf:de:23:06:44:36:81:
88:e2:7f:4f:17:9f:12:52:8f:28:d1:95:00:4c:ae:
ff:80:9b:86:af:1f:e6:27:c6:69:dd:6b:bd:fb:66:
40:63:fc:e3:43:81:00:d3:6b:7d:f9:39:d9:d6:a9:
a8:c9:08:96:91:28:69:01:19:b6:6e:97:00:d6:2c:
76:14:b8:84:b7:0a:64:20:90:cb:10:17:d2:03:92:
8f:18:83:cf:1c:ce:d7:75:14:79:82:51:2b:dc:09:
14:32:bc:08:8c:1d:4c:4e:41:d2:54:90:ba:bc:c0:
67:f5:b8:10:ea:e8:38:ed:cd:03:45:75:57:a3:81:
e8:73:00:de:1d:9b:96:0e:71:80:2b:b2:2c:39:e4:
11:1e:59:39:d7:be:f2:4c:0b:d5:af:27:0e:d7:f8:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C4:8F:1A:E8:97:79:33:CD:83:89:9B:35:5E:16:A7:78:F8:3C:B1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4MSPGuiXeTPNg4mbNV4Wp3j4PLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
Signature Algorithm: sha256WithRSAEncryption
44:90:b6:81:4d:8d:33:1c:c6:fe:4f:14:3e:93:7d:cf:b8:42:
84:ba:d8:41:47:67:42:f4:12:00:05:16:9e:99:23:d8:78:3a:
30:d0:01:a0:9b:58:82:d9:85:4a:ac:1d:2d:44:6e:d1:53:06:
58:8f:78:c1:6c:96:ca:fd:f0:d9:dd:99:fe:96:8b:bb:9a:50:
61:92:90:69:14:ed:55:b8:57:69:41:89:72:fd:72:27:5a:fd:
6a:13:f6:6b:79:7a:1e:04:54:51:10:c4:77:78:32:b8:b4:c0:
2c:41:96:02:e9:ee:08:dc:c4:55:e1:7b:71:23:92:f8:fb:45:
71:2d:c9:b6:99:a2:22:9c:2d:52:d6:32:04:66:3e:d1:53:cb:
63:b9:b3:15:cf:03:ef:43:85:ca:aa:91:90:3d:84:a5:ed:16:
d2:89:dc:4a:36:ea:f2:7b:50:f1:79:da:03:84:a0:d3:ba:1e:
f4:1c:74:ce:ac:47:6c:d4:1d:fc:e2:dd:d0:69:f6:c7:cb:49:
4d:3a:08:68:ce:3d:f2:94:5e:32:45:77:7c:f0:d0:b9:6b:f4:
66:a8:54:16:3e:55:3b:1a:f5:bd:3b:f3:55:87:e5:32:23:52:
f4:1e:42:37:ac:bb:73:21:af:4c:dc:c6:90:47:26:58:4a:17:
d4:9e:e4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:33:34 2025 by rpki-client