Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cIl82jCBsIVBeGiqvIpDra47ovw.roa
File: cIl82jCBsIVBeGiqvIpDra47ovw.roa (raw, json)
Hash identifier: wQmkAUu4rO60a+H7NyR+AC4ZlOTLyKtZvGuvAbTsIzQ=
Subject key identifier: 70:89:7C:DA:30:81:B0:85:41:78:68:AA:BC:8A:43:AD:AE:3B:A2:FC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019786E992F0ADDEF293466ED977ABB04996
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cIl82jCBsIVBeGiqvIpDra47ovw.roa
Signing time: Thu 19 Jun 2025 06:39:03 +0000
ROA not before: Thu 19 Jun 2025 06:39:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 37.202.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jun 2025 07:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:e9:92:f0:ad:de:f2:93:46:6e:d9:77:ab:b0:49:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 19 06:39:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70897cda3081b085417868aabc8a43adae3ba2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:93:1b:08:f4:d0:25:13:10:0a:6b:37:c7:
30:d8:ae:90:90:b0:53:b8:23:fd:58:9d:c6:94:60:
e1:da:6e:d4:ab:8b:8c:31:65:ee:f3:f8:49:f6:cf:
6d:b1:dc:aa:51:64:8d:6c:b5:32:bc:05:eb:e7:67:
62:a5:ae:41:04:ad:85:4b:1b:0b:1a:5e:2f:c6:25:
b9:49:77:62:78:30:ca:55:80:38:35:6f:59:5c:05:
04:b7:11:e8:17:e2:3b:18:1d:65:20:8c:ba:39:81:
33:05:c1:ac:ae:58:81:99:9e:e5:0d:03:e0:86:3b:
a6:37:bb:36:dc:6a:ef:19:88:1a:0d:0f:97:3a:50:
c2:6d:8c:56:1c:ca:cb:ee:d0:52:c1:28:8e:ec:0f:
c2:6b:74:6b:94:fc:ed:3b:97:02:03:9b:72:19:7c:
42:5b:d4:23:46:b9:a1:7a:81:a4:82:57:8e:76:b3:
20:6c:e8:00:19:4f:24:fc:57:42:eb:ad:28:d1:97:
4d:99:06:a8:dc:d0:b3:ba:0a:04:bd:e0:33:d9:23:
28:dd:0f:c4:2d:42:b8:9c:91:b7:8e:c8:50:25:59:
0e:a1:e4:34:2b:c2:d9:14:a2:05:6e:1f:30:8b:d3:
99:d3:7b:5d:14:25:e9:de:5b:9a:dc:9d:25:6f:55:
00:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:89:7C:DA:30:81:B0:85:41:78:68:AA:BC:8A:43:AD:AE:3B:A2:FC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cIl82jCBsIVBeGiqvIpDra47ovw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
Signature Algorithm: sha256WithRSAEncryption
41:8d:7f:97:0e:a9:07:8a:b1:86:dd:a5:7a:b8:89:98:a7:ab:
36:df:9d:c4:5f:12:06:b1:61:b8:90:64:cd:96:35:19:4b:7e:
ce:a1:79:2b:77:85:f1:c0:34:3d:4c:5f:1e:75:8a:f7:80:fb:
94:48:9f:51:1b:c3:15:82:6f:17:7a:af:4b:45:56:62:34:ad:
fa:eb:1c:bb:86:d3:ac:2c:1e:b3:f0:ec:61:ce:09:1e:8f:98:
16:15:49:7d:0d:bb:8c:99:0b:4b:a7:05:74:df:c0:96:51:bf:
6c:16:cd:fe:36:7d:18:0c:1e:91:ba:fd:46:00:0f:d4:3a:50:
ad:0f:42:81:63:75:2b:1a:a4:90:f2:c4:b8:bc:e9:d9:68:76:
b6:26:d1:ae:be:a9:11:c3:3c:b9:b6:b3:2e:3e:15:3b:c8:de:
5d:7f:39:55:b9:ae:80:9f:c3:a4:26:da:5a:01:4b:62:fe:16:
37:09:69:26:83:6f:2c:35:ee:43:30:7f:f7:ea:3b:25:13:6c:
3a:21:75:0e:80:8e:8a:43:6c:48:8d:94:d6:1d:d8:f5:69:54:
77:82:ae:73:d9:20:77:cd:b7:c4:64:36:63:eb:09:e8:ed:5c:
da:be:3c:43:08:3b:4f:98:65:ac:6b:e3:43:c8:8e:4f:78:ee:
7e:d6:36:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:37:57 2025 by rpki-client