Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AOXxRwixCfVuK_8M3ncBBG0TKEQ.roa
File: AOXxRwixCfVuK_8M3ncBBG0TKEQ.roa (raw, json)
Hash identifier: oCHvgb5pZCa8A88l3DMX4XFapIiM0R6oAAgIrvQh5Fs=
Subject key identifier: 00:E5:F1:47:08:B1:09:F5:6E:2B:FF:0C:DE:77:01:04:6D:13:28:44
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01979CA2B9696F8737530B63CBAEED3B8372
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AOXxRwixCfVuK_8M3ncBBG0TKEQ.roa
Signing time: Mon 23 Jun 2025 11:53:19 +0000
ROA not before: Mon 23 Jun 2025 11:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.242.87.0/24 maxlen: 24
151.242.174.0/23 maxlen: 23
151.242.192.0/23 maxlen: 23
151.243.3.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jun 2025 09:57:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:a2:b9:69:6f:87:37:53:0b:63:cb:ae:ed:3b:83:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 23 11:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00e5f14708b109f56e2bff0cde7701046d132844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:fd:63:27:e0:74:00:d4:c1:30:ad:43:3b:4e:
e4:70:8e:2c:3a:af:40:a6:a2:da:eb:5f:fa:e4:99:
df:9e:bd:50:96:a9:c2:c6:a1:a7:e8:98:f8:c9:0a:
b2:cf:25:92:d4:a6:06:18:97:fa:41:49:d0:67:f3:
0c:91:1d:93:29:49:18:9e:1a:f1:71:e8:58:f2:be:
04:10:97:22:4f:4f:14:fb:84:5e:47:8c:14:1a:a4:
47:28:db:39:74:1a:0e:89:9f:07:31:82:df:e3:70:
58:15:88:8c:ae:49:8a:fb:58:80:e4:8a:8f:71:0a:
66:f1:0b:64:3c:75:2d:b8:81:58:b4:2d:ce:c5:f7:
d7:15:70:9f:e9:09:d7:5a:f4:2c:f0:19:a8:a7:0b:
30:ae:2f:b0:36:25:35:5c:cc:83:8d:b1:ee:4b:59:
27:23:74:23:f5:72:15:9f:4b:d2:e3:3a:ff:f1:49:
8c:65:83:a6:9e:be:57:22:8d:d4:ed:f4:8a:9d:f8:
89:73:a0:e9:d1:24:ed:18:16:91:12:08:24:7e:02:
cd:4e:d8:29:03:95:3b:30:04:fc:30:4e:88:0f:49:
f6:9f:80:28:6b:d5:ac:5f:f3:e7:40:c6:1f:c4:95:
3f:12:c8:04:c6:59:f4:6e:d7:95:e3:0f:ee:25:32:
29:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E5:F1:47:08:B1:09:F5:6E:2B:FF:0C:DE:77:01:04:6D:13:28:44
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AOXxRwixCfVuK_8M3ncBBG0TKEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.240.79.0/24
151.240.177.0/24
151.242.87.0/24
151.242.174.0/23
151.242.192.0/23
151.243.3.0/24
151.243.101.0/24
151.244.126.0/24
Signature Algorithm: sha256WithRSAEncryption
62:4f:70:7e:d3:9f:0c:4f:8b:6b:d5:ca:86:e8:d3:9b:77:69:
9b:fd:0c:4a:aa:ff:d8:39:ee:7b:7c:b8:5a:96:d8:a5:79:fb:
c4:c1:99:89:30:7a:f1:8d:ef:94:37:35:e8:be:6f:18:c7:88:
04:0d:17:11:1f:f6:a0:0c:d2:35:f4:68:65:42:af:8e:a5:70:
e0:db:5e:a2:29:e3:2d:67:a4:79:5b:96:92:f4:3c:dc:58:13:
89:3b:d9:65:18:5c:f2:f7:e7:58:34:f8:65:94:0e:0b:fc:7f:
93:53:db:6f:26:c4:26:44:00:c5:ce:49:80:40:c6:fa:18:2f:
61:5c:6b:2d:86:8c:60:7a:e4:27:bf:c7:8d:c3:c0:74:c7:c9:
06:e1:f8:f3:6b:ae:a0:8b:ff:10:7a:9a:2d:e4:92:9c:28:75:
ca:ad:c9:65:68:0f:96:4b:23:08:ab:85:b3:7a:6a:0b:e0:09:
9b:64:8d:15:50:fd:1a:c0:68:88:29:89:dd:01:5a:66:a3:d6:
f6:38:fa:de:e3:e7:f3:3f:47:d9:6a:b5:98:fb:70:c9:f4:09:
e6:f0:35:c1:ed:53:f3:5a:76:18:0c:f0:2f:c5:86:e9:5c:81:
8e:25:de:38:ec:b5:ef:eb:05:40:88:8a:9e:d0:23:1f:1e:7f:
69:45:0e:7d
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZecorlpb4c3Uwtjy67tO4NyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjIzMTE1MzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGU1ZjE0NzA4YjEwOWY1NmUyYmZmMGNkZTc3MDEwNDZkMTMyODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9f1jJ+B0ANTBMK1DO07kcI4sOq9A
pqLa61/65Jnfnr1QlqnCxqGn6Jj4yQqyzyWS1KYGGJf6QUnQZ/MMkR2TKUkYnhrx
cehY8r4EEJciT08U+4ReR4wUGqRHKNs5dBoOiZ8HMYLf43BYFYiMrkmK+1iA5IqP
cQpm8QtkPHUtuIFYtC3OxffXFXCf6QnXWvQs8Bmopwswri+wNiU1XMyDjbHuS1kn
I3Qj9XIVn0vS4zr/8UmMZYOmnr5XIo3U7fSKnfiJc6Dp0STtGBaREggkfgLNTtgp
A5U7MAT8ME6ID0n2n4Aoa9WsX/PnQMYfxJU/EsgExln0bteV4w/uJTIpywIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFADl8UcIsQn1biv/DN53AQRtEyhEMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQU9YeFJ3aXhDZlZ1S184TTNuY0JCRzBUS0VRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAJcreAwQA
l/BPAwQAl/CxAwQAl/JXAwQBl/KuAwQBl/LAAwQAl/MDAwQAl/NlAwQAl/R+MA0G
CSqGSIb3DQEBCwUAA4IBAQBiT3B+058MT4tr1cqG6NObd2mb/QxKqv/YOe57fLha
ltilefvEwZmJMHrxje+UNzXovm8Yx4gEDRcRH/agDNI19GhlQq+OpXDg216iKeMt
Z6R5W5aS9DzcWBOJO9llGFzy9+dYNPhllA4L/H+TU9tvJsQmRADFzkmAQMb6GC9h
XGsthoxgeuQnv8eNw8B0x8kG4fjza66gi/8Qepot5JKcKHXKrcllaA+WSyMIq4Wz
emoL4AmbZI0VUP0awGiIKYndAVpmo9b2OPre4+fzP0fZarWY+3DJ9Anm8DXB7VPz
WnYYDPAvxYbpXIGOJd447LXv6wVAiIqe0CMfHn9pRQ59
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:59:58 2025 by rpki-client