Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R_2W7Eg9YPQu16rvxYV0T0bLIVU.roa
File: R_2W7Eg9YPQu16rvxYV0T0bLIVU.roa (raw, json)
Hash identifier: DZcGn8rupf4an7ymeg0Ed5329szUMzWiBfx+43LpKiU=
Subject key identifier: 47:FD:96:EC:48:3D:60:F4:2E:D7:AA:EF:C5:85:74:4F:46:CB:21:55
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019752DFF811B99252B8875AF44F1FD33095
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R_2W7Eg9YPQu16rvxYV0T0bLIVU.roa
Signing time: Mon 09 Jun 2025 04:08:18 +0000
ROA not before: Mon 09 Jun 2025 04:08:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 37.202.203.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.242.202.0/23 maxlen: 23
151.243.206.0/23 maxlen: 23
151.243.217.0/24 maxlen: 24
151.244.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Jun 2025 05:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:df:f8:11:b9:92:52:b8:87:5a:f4:4f:1f:d3:30:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 9 04:08:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47fd96ec483d60f42ed7aaefc585744f46cb2155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:aa:8c:a7:5b:0d:5a:9d:af:1b:a8:42:e1:
24:a7:d8:e1:c5:81:0f:0c:c1:b6:2f:35:75:f5:9b:
72:3d:58:25:26:ad:95:37:3b:7a:a4:dd:37:29:4c:
59:69:d1:11:94:57:c5:1a:c8:26:fe:3d:f4:d3:1c:
74:4b:b7:9a:15:d2:79:d5:c4:84:43:1c:0a:76:6f:
43:22:dc:5f:31:a9:4d:78:62:9f:38:0c:23:ab:75:
0c:b7:9b:a2:f2:16:6b:45:f9:e4:59:81:b3:7e:b1:
4d:56:20:55:1d:52:48:96:8d:e6:8f:6f:04:ac:fa:
40:7e:2e:a1:5e:63:e1:2f:03:e3:b6:dd:3f:c7:14:
0f:b1:47:95:91:b3:de:a7:dd:d4:f7:9b:c2:4e:1b:
12:39:ef:5b:ed:e5:af:b7:02:d5:25:3c:5b:2e:f0:
52:dd:c6:1f:57:e4:00:59:8d:92:69:d0:41:38:65:
db:dc:4d:a6:e6:b5:00:31:49:58:95:79:bd:97:16:
4a:a5:99:5b:19:80:70:1f:b5:22:ad:11:d0:40:11:
6b:4d:96:46:fc:00:46:3f:30:5e:b6:68:bb:28:7c:
7a:33:83:4c:07:97:12:0a:b8:7b:bb:09:41:dc:dd:
30:6a:dd:7b:74:51:d0:57:ce:a7:63:54:10:00:29:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FD:96:EC:48:3D:60:F4:2E:D7:AA:EF:C5:85:74:4F:46:CB:21:55
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R_2W7Eg9YPQu16rvxYV0T0bLIVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
151.240.77.0/24
151.241.18.0/24
151.242.202.0/23
151.243.206.0/23
151.243.217.0/24
151.244.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d0:8e:81:59:64:f0:e2:e2:43:34:86:a3:a3:fe:31:13:e1:
2d:3c:a9:44:83:84:dc:85:6b:be:c3:83:eb:b4:f1:76:a4:08:
93:4d:ef:53:57:ac:88:b9:52:33:ee:be:20:3d:01:63:85:58:
fd:03:72:a3:27:c4:4e:a2:53:ac:e4:9b:50:72:45:8b:80:27:
69:19:72:2e:13:93:16:d0:49:6c:59:2c:d9:56:eb:97:b9:8b:
2a:0b:24:5f:01:ba:80:87:77:2f:3a:33:12:75:18:a0:79:46:
07:87:70:6d:60:de:cf:be:cd:8f:e6:5c:f7:77:58:a1:30:e9:
32:7d:36:30:2f:6c:b4:8d:07:16:64:1e:c5:e7:9e:db:f3:d3:
65:56:4e:1a:39:5f:22:1a:0d:62:0d:24:8d:e1:88:88:4a:cb:
38:24:38:7b:ed:cd:a2:31:2c:27:85:7d:ed:81:23:f7:6b:d2:
46:28:19:7a:16:08:a5:87:c8:ad:e3:b1:52:01:d0:0c:b4:fc:
72:8d:46:f8:11:fa:1d:f9:aa:11:36:19:c7:1a:0b:3c:d2:46:
39:d7:c3:3f:d1:8d:5c:e6:5f:56:4c:22:71:e4:f8:1c:75:40:
23:24:2e:b2:a0:7d:33:1d:cf:76:e9:87:ec:07:ab:94:20:5c:
b3:c1:94:13
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZdS3/gRuZJSuIda9E8f0zCVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNjA5MDQwODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2ZkOTZlYzQ4M2Q2MGY0MmVkN2FhZWZjNTg1NzQ0ZjQ2Y2IyMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye6qjKdbDVqdrxuoQuEkp9jhxYEP
DMG2LzV19ZtyPVglJq2VNzt6pN03KUxZadERlFfFGsgm/j300xx0S7eaFdJ51cSE
QxwKdm9DItxfMalNeGKfOAwjq3UMt5ui8hZrRfnkWYGzfrFNViBVHVJIlo3mj28E
rPpAfi6hXmPhLwPjtt0/xxQPsUeVkbPep93U95vCThsSOe9b7eWvtwLVJTxbLvBS
3cYfV+QAWY2SadBBOGXb3E2m5rUAMUlYlXm9lxZKpZlbGYBwH7UirRHQQBFrTZZG
/ABGPzBetmi7KHx6M4NMB5cSCrh7uwlB3N0wat17dFHQV86nY1QQACmgJQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFEf9luxIPWD0Lteq78WFdE9GyyFVMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUl8yVzdFZzlZUFF1MTZydnhZVjBUMGJMSVZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAJcrLAwQA
l/BNAwQAl/ESAwQBl/LKAwQBl/POAwQAl/PZAwQAl/RYMA0GCSqGSIb3DQEBCwUA
A4IBAQAN0I6BWWTw4uJDNIajo/4xE+EtPKlEg4TchWu+w4PrtPF2pAiTTe9TV6yI
uVIz7r4gPQFjhVj9A3KjJ8ROolOs5JtQckWLgCdpGXIuE5MW0ElsWSzZVuuXuYsq
CyRfAbqAh3cvOjMSdRigeUYHh3BtYN7Pvs2P5lz3d1ihMOkyfTYwL2y0jQcWZB7F
557b89NlVk4aOV8iGg1iDSSN4YiISss4JDh77c2iMSwnhX3tgSP3a9JGKBl6Fgil
h8it47FSAdAMtPxyjUb4Efod+aoRNhnHGgs80kY518M/0Y1c5l9WTCJx5PgcdUAj
JC6yoH0zHc926YfsB6uUIFyzwZQT
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:05:28 2025 by rpki-client