Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k3haBAp_kyxk0CMxB1Vq6OrgT48.roa
File: k3haBAp_kyxk0CMxB1Vq6OrgT48.roa (raw, json)
Hash identifier: ZYOVOML/zMzmDCdKcffa7J8NsYzw7AfoaVJ6LxRVe98=
Subject key identifier: 93:78:5A:04:0A:7F:93:2C:64:D0:23:31:07:55:6A:E8:EA:E0:4F:8F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197FA88A6F8B9628A8D41D0A0DD2E03A39F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k3haBAp_kyxk0CMxB1Vq6OrgT48.roa
Signing time: Fri 11 Jul 2025 17:29:09 +0000
ROA not before: Fri 11 Jul 2025 17:29:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.10.0/24 maxlen: 24
151.243.152.0/22 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.244.180.0/24 maxlen: 24
151.244.224.0/24 maxlen: 24
151.245.3.0/24 maxlen: 24
151.245.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Jul 2025 05:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fa:88:a6:f8:b9:62:8a:8d:41:d0:a0:dd:2e:03:a3:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 11 17:29:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93785a040a7f932c64d0233107556ae8eae04f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:d8:4a:a5:d4:6c:fd:a4:25:1f:6b:21:a7:
83:03:17:0d:60:76:5c:f0:39:e8:93:d8:df:0e:92:
ea:85:64:67:f0:8e:a8:e8:d2:24:1a:7c:9f:ee:34:
19:5b:b9:42:cb:d6:90:ba:f3:91:2b:2a:8d:4a:ef:
75:8d:65:81:d1:69:89:7b:5d:fb:56:29:a3:8e:b1:
1e:ba:9c:49:95:ba:f1:ff:a3:5a:14:8d:c1:70:49:
7c:03:be:a9:dd:e2:08:49:36:a7:1f:31:51:71:bc:
ce:0e:6b:fa:90:7b:d6:92:c0:d4:b3:a6:3b:50:61:
6b:36:84:e9:89:44:11:2a:53:1a:b3:95:2b:8f:1e:
ad:ce:93:f9:0d:46:4f:4d:6b:c7:a1:e7:32:2b:4b:
2d:d2:57:af:2f:59:8c:d2:ec:da:20:57:39:a1:09:
1c:2c:04:e8:f5:05:67:5b:9a:b9:ca:75:80:59:2e:
b2:c5:95:1c:96:43:a4:85:5e:83:9c:27:87:07:ec:
ab:85:f0:b5:07:cd:25:e2:91:f0:19:13:b8:6b:2d:
dd:fa:04:fd:b0:72:10:ca:6e:6f:e2:ce:57:04:f9:
db:1c:9a:2d:20:00:50:b0:85:9b:41:61:ef:4e:88:
cb:ed:53:7b:d9:5d:2c:c9:8b:64:ed:b8:a9:7b:81:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:78:5A:04:0A:7F:93:2C:64:D0:23:31:07:55:6A:E8:EA:E0:4F:8F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k3haBAp_kyxk0CMxB1Vq6OrgT48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.201.0/24
151.242.81.0/24
151.243.7.0/24
151.243.10.0/24
151.243.152.0/22
151.243.228.0/24
151.243.243.0/24
151.244.54.0/24
151.244.180.0/24
151.244.224.0/24
151.245.3.0/24
151.245.60.0/22
Signature Algorithm: sha256WithRSAEncryption
65:4f:04:d2:d2:8a:ac:1e:37:0e:6b:a3:30:81:bf:61:c0:b0:
85:fd:76:e6:29:71:9c:9c:81:c6:cd:84:10:86:40:ca:e1:3e:
d8:7b:b1:65:74:2b:66:ed:58:05:19:aa:03:11:d0:74:9c:62:
d4:04:1a:fb:8e:f4:bd:7c:3b:99:37:3f:c7:22:7b:f0:d2:59:
27:a0:f9:70:68:a1:22:51:c0:50:cc:a4:9e:b6:4e:e7:ad:3e:
50:47:c7:66:a6:e9:47:ca:80:00:db:9e:50:82:f6:44:b2:f4:
da:0b:d3:74:ac:10:db:3f:b6:11:eb:b9:a0:0f:dc:f9:d7:a4:
c4:72:88:40:87:c0:7d:3a:3f:19:e1:37:5c:0d:49:2a:34:b1:
1e:b1:83:e5:2e:85:5b:cb:49:09:b9:8f:7f:13:28:e4:6d:d8:
9f:e9:df:5a:7d:6d:a8:00:b8:79:22:51:85:24:90:36:ee:76:
08:c1:5f:02:2e:cb:0e:37:e8:b4:68:00:70:91:c4:4b:db:a3:
66:48:ac:5f:48:00:a9:bf:a1:ae:09:3f:4f:91:3e:17:b4:b4:
ce:eb:f7:19:ef:96:04:5e:63:8d:2d:ef:c1:61:c1:47:c5:a7:
4d:4c:f5:c9:86:8e:3c:56:c0:91:72:21:7c:64:13:9a:50:21:
aa:6a:eb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:36:14 2025 by rpki-client