Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eo6aODauMm2_xNpnBZCbGX8P8sg.roa
File: eo6aODauMm2_xNpnBZCbGX8P8sg.roa (raw, json)
Hash identifier: W4J/j4e/GzXL+iq661Xzv7HGEZ3vCir68nor1+qEVDo=
Subject key identifier: 7A:8E:9A:38:36:AE:32:6D:BF:C4:DA:67:05:90:9B:19:7F:0F:F2:C8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196D58A455218DA67640A17FEE4628E0337
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eo6aODauMm2_xNpnBZCbGX8P8sg.roa
Signing time: Thu 15 May 2025 20:02:10 +0000
ROA not before: Thu 15 May 2025 20:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.240.3.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.110.0/24 maxlen: 24
151.242.87.0/24 maxlen: 24
151.242.174.0/23 maxlen: 23
151.242.192.0/23 maxlen: 23
151.243.3.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jun 2025 06:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d5:8a:45:52:18:da:67:64:0a:17:fe:e4:62:8e:03:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 15 20:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a8e9a3836ae326dbfc4da6705909b197f0ff2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:bf:d9:d4:84:97:ca:b7:de:1f:b2:95:53:
f3:0f:0b:d9:01:41:c9:37:89:b4:9d:c1:90:9d:a8:
ee:1e:7b:2e:cb:94:8f:8f:23:05:4b:bf:d8:7d:88:
dc:79:9f:2e:07:bd:20:b2:61:17:87:4b:0a:d8:5f:
45:4a:4f:32:47:51:c4:dd:b7:1c:44:68:d3:c7:ca:
9e:f7:41:ca:5e:68:b2:e0:96:c0:00:ab:2d:09:1e:
15:cd:a5:e0:d6:60:87:9f:c4:07:a0:25:26:a2:68:
d7:19:54:4e:67:aa:3f:79:70:5d:53:a3:96:de:27:
6f:66:fa:c7:e2:75:1e:0c:79:ea:fe:54:81:c2:83:
8f:b8:46:7f:3e:32:42:f4:e5:27:6f:89:73:43:06:
9f:1b:8a:e3:66:84:98:0f:f9:41:2a:4d:1f:b5:9c:
e3:11:2c:ec:a3:2b:1a:d6:c8:83:6c:84:3a:e8:f9:
45:61:fd:a5:e4:f0:46:06:f6:df:d8:fb:e9:e3:05:
f9:49:d5:b0:49:b9:7d:82:b9:3b:fb:f7:a0:17:46:
3e:23:95:b5:83:69:8b:6d:40:0b:d7:b1:f1:3c:fd:
21:df:7f:fb:eb:3f:9a:4a:78:eb:a2:bb:e0:b5:86:
65:79:55:16:97:60:ff:de:ee:29:48:04:1e:87:c2:
aa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:9A:38:36:AE:32:6D:BF:C4:DA:67:05:90:9B:19:7F:0F:F2:C8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eo6aODauMm2_xNpnBZCbGX8P8sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.240.3.0/24
151.240.79.0/24
151.240.110.0/24
151.242.87.0/24
151.242.174.0/23
151.242.192.0/23
151.243.3.0/24
151.243.101.0/24
151.244.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:00:a1:5a:32:ba:21:c3:aa:32:42:ab:bd:8d:cf:38:6b:fe:
58:1b:da:67:13:e1:a4:58:9a:31:f6:c1:1a:55:1f:58:33:fc:
f1:f5:df:88:1e:28:4c:17:25:4c:3f:33:65:1a:f0:45:60:bb:
70:e6:06:33:51:4e:67:54:49:58:7d:f8:9a:28:88:55:4d:d5:
9b:dc:b7:02:42:a1:6a:d5:df:0c:45:98:81:43:d0:f0:80:64:
81:c2:bd:c7:ef:77:32:cd:08:81:f3:0d:82:74:ff:1e:e4:3b:
81:e3:30:91:9c:e1:e6:ad:dc:eb:5b:d5:e5:d1:e3:c4:aa:1c:
bf:55:67:5e:07:97:1c:fc:52:b0:62:3b:be:1d:e8:58:ef:9d:
42:62:dc:1f:e3:b8:9c:42:96:66:ab:46:1a:b7:08:97:0d:ab:
44:2f:66:39:ec:56:40:f9:ab:2f:ff:d4:34:f9:30:85:37:75:
3f:57:68:66:7a:25:50:c7:0f:ee:e6:60:e5:a9:48:56:c4:72:
99:a2:2a:5a:d3:0d:8e:80:db:d5:82:af:91:ea:3b:0e:11:94:
d3:76:77:95:1b:0e:d5:25:5a:69:35:3f:b4:8b:6f:14:d5:32:
d8:cc:b4:02:c0:00:c1:f6:f8:92:df:65:26:d7:f1:16:18:f4:
88:23:89:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:36:56 2025 by rpki-client