Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9wvF0njP6Ff9y_yf6VuvpjpSXoY.roa
File: 9wvF0njP6Ff9y_yf6VuvpjpSXoY.roa (raw, json)
Hash identifier: VuFUtWxI7ZV2OCqOEkv9944VVjeQqo1eo5xWtq27Eb8=
Subject key identifier: F7:0B:C5:D2:78:CF:E8:57:FD:CB:FC:9F:E9:5B:AF:A6:3A:52:5E:86
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197BA5949037E0EFB2B66963B476F6D51F9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9wvF0njP6Ff9y_yf6VuvpjpSXoY.roa
Signing time: Sun 29 Jun 2025 06:21:43 +0000
ROA not before: Sun 29 Jun 2025 06:21:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 37.202.220.0/24 maxlen: 24
151.240.28.0/24 maxlen: 24
151.240.60.0/23 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.80.0/23 maxlen: 24
151.240.118.0/23 maxlen: 24
151.242.13.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.242.134.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.242.236.0/22 maxlen: 24
151.243.25.0/24 maxlen: 24
151.243.170.0/24 maxlen: 24
151.243.172.0/24 maxlen: 24
151.244.48.0/24 maxlen: 24
151.244.102.0/24 maxlen: 24
151.245.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Jul 2025 19:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:59:49:03:7e:0e:fb:2b:66:96:3b:47:6f:6d:51:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 29 06:21:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f70bc5d278cfe857fdcbfc9fe95bafa63a525e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:9e:f5:a8:aa:c7:7a:ea:72:11:11:56:fc:
84:9f:cc:90:3e:da:6b:67:8f:c2:30:99:1f:3a:01:
b8:aa:a7:f8:10:9d:75:69:4d:1f:37:7d:3c:86:02:
82:0d:72:0b:2e:02:5a:0e:bc:69:c5:97:17:e7:5a:
76:a1:6a:79:b5:a1:80:d6:c7:ca:34:e9:11:ff:c0:
8f:4c:ae:a5:0b:15:7c:21:e8:e4:5f:d1:00:35:ee:
a1:f2:0c:bb:c6:67:8d:e2:5d:14:72:c6:33:4a:6c:
b4:56:ba:01:0c:4e:15:a3:eb:2f:a5:90:c7:13:2b:
33:5b:bc:28:94:c7:7f:5b:d6:98:45:45:65:f0:d0:
2f:71:b7:57:23:bb:fd:e1:db:b8:f1:ab:99:1d:cf:
84:64:02:34:65:64:4e:f8:3f:79:ff:10:d0:55:f1:
26:e2:39:7d:5e:a6:e1:c4:2b:13:5d:86:ae:54:5b:
7f:9a:90:26:cf:1c:45:dd:ef:d0:67:e9:12:34:29:
6a:1b:47:b5:45:11:09:18:b7:35:67:b4:2b:0f:91:
76:df:30:43:25:13:f2:95:ee:e9:c0:04:e8:40:cc:
4f:67:28:eb:7d:10:32:e0:42:fe:e2:c1:45:67:58:
58:57:4d:34:4d:ef:e8:49:9e:6e:8f:e2:10:53:70:
7e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0B:C5:D2:78:CF:E8:57:FD:CB:FC:9F:E9:5B:AF:A6:3A:52:5E:86
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9wvF0njP6Ff9y_yf6VuvpjpSXoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.220.0/24
151.240.28.0/24
151.240.60.0/23
151.240.72.0/24
151.240.74.0/24
151.240.80.0/23
151.240.118.0/23
151.242.13.0/24
151.242.27.0/24
151.242.134.0/23
151.242.236.0/22
151.243.25.0/24
151.243.170.0/24
151.243.172.0/24
151.244.48.0/24
151.244.102.0/24
151.245.64.0/22
Signature Algorithm: sha256WithRSAEncryption
92:32:a9:5d:84:82:7c:9c:4c:cd:53:e6:89:fc:70:db:db:ef:
86:d3:85:eb:6f:1d:cf:e2:6e:e4:1d:03:a6:aa:32:b6:b8:2d:
11:73:b6:71:38:0a:ea:dd:be:04:69:a9:89:5b:ff:55:ac:78:
a8:64:3b:01:f5:bc:ab:64:5a:ba:e2:72:6e:18:4e:88:72:89:
62:23:89:1c:62:b2:e4:f4:c0:01:74:16:15:13:76:8d:b4:84:
3e:8e:76:fd:91:08:79:d3:84:8f:53:25:9b:c3:e5:f5:f0:e4:
63:56:9b:d1:59:ab:4a:86:5f:78:99:13:de:f9:03:e7:bd:70:
55:d1:65:07:c4:bb:1b:7a:cf:ce:ac:58:a3:d7:90:f0:41:1b:
25:b3:5a:6a:57:61:75:db:86:b0:d3:d8:3e:34:5d:58:86:c5:
10:74:fe:e4:b4:80:28:7e:6d:4f:09:2c:32:b2:5b:e5:03:46:
78:5b:c0:31:91:f8:f0:13:7b:f2:e7:6a:83:95:7e:1c:87:10:
85:5a:48:8c:24:19:0d:82:1e:26:a3:35:fe:aa:af:6e:63:1e:
cf:de:99:45:f4:90:86:33:f8:46:27:63:09:c0:6d:ac:3a:27:
18:62:0f:aa:66:66:c4:3e:12:1c:99:ff:5d:d5:d9:b4:4f:78:
df:43:71:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:11:57 2025 by rpki-client