Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m17uUkLUnMP62zOqFJMCHxi_eKQ.roa
File: m17uUkLUnMP62zOqFJMCHxi_eKQ.roa (raw, json)
Hash identifier: 4mBDiuC6nw4ZWcDOQslEmU1U8swvDW9JQF7rmXkV+18=
Subject key identifier: 9B:5E:EE:52:42:D4:9C:C3:FA:DB:33:AA:14:93:02:1F:18:BF:78:A4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197A15F3673680DD266028F4D6B68A34142
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m17uUkLUnMP62zOqFJMCHxi_eKQ.roa
Signing time: Tue 24 Jun 2025 09:57:41 +0000
ROA not before: Tue 24 Jun 2025 09:57:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.242.87.0/24 maxlen: 24
151.242.174.0/23 maxlen: 23
151.242.192.0/23 maxlen: 23
151.242.205.0/24 maxlen: 24
151.243.3.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jun 2025 12:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:a1:5f:36:73:68:0d:d2:66:02:8f:4d:6b:68:a3:41:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 24 09:57:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b5eee5242d49cc3fadb33aa1493021f18bf78a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:29:eb:a3:06:82:fa:4a:a1:40:5b:a0:76:0a:
ff:c7:da:93:5a:c8:6f:e2:9c:eb:0f:52:42:2f:1b:
8f:3b:bd:3a:09:fb:c8:02:60:0a:d1:66:7d:82:95:
e6:2d:1a:ad:0f:2e:cd:37:1d:d5:d6:04:4f:f5:a9:
4f:97:31:e8:3b:4a:bd:28:4f:0f:fe:75:18:22:4c:
a4:c4:bb:25:37:3a:9d:1a:6e:2e:1d:d4:87:bf:6f:
7e:48:b6:65:c3:d9:0c:31:45:a2:27:8e:82:cf:02:
d4:04:d1:ee:e2:26:42:44:7d:c1:67:10:61:e1:e2:
2d:0f:1e:90:aa:de:42:f8:77:0b:86:40:d0:cb:34:
af:a4:55:1f:c0:bd:fd:46:e7:f8:c5:47:1d:09:3a:
57:a8:de:74:b6:41:70:b1:b6:45:1f:d9:ba:26:e1:
2f:ff:90:d8:7e:8f:9c:f2:24:f6:15:0e:a9:6c:e3:
91:26:4c:81:16:b7:a4:9e:da:2e:eb:b7:a3:49:27:
bf:65:c1:58:35:e0:1c:d1:31:db:d7:80:43:33:32:
4a:b0:c6:71:78:a0:69:16:7e:4f:91:ed:35:02:17:
a6:ff:8c:dd:92:58:d7:9b:ea:64:13:b1:dc:33:5c:
cc:c3:e2:e3:15:99:2c:1e:24:1a:fc:14:14:77:83:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5E:EE:52:42:D4:9C:C3:FA:DB:33:AA:14:93:02:1F:18:BF:78:A4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m17uUkLUnMP62zOqFJMCHxi_eKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.240.79.0/24
151.240.177.0/24
151.242.87.0/24
151.242.174.0/23
151.242.192.0/23
151.242.205.0/24
151.243.3.0/24
151.243.101.0/24
151.244.126.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c9:13:47:98:cb:4e:fa:40:14:cd:9d:50:61:e1:1e:e0:13:
e4:3b:c8:66:00:b6:2b:78:45:65:96:69:f8:c2:9b:8c:03:68:
03:46:19:b5:97:c8:da:ff:3a:7e:b0:01:d7:ae:13:ec:9f:9c:
98:cb:b6:17:1b:44:40:43:1a:b9:65:4b:0a:cd:1a:d7:96:16:
9f:0b:21:46:ef:f5:88:72:69:d7:e3:08:a0:72:bf:f7:d7:e1:
9c:51:63:e4:34:94:fb:d5:35:85:14:ad:16:d3:d9:57:21:6e:
54:09:e9:d0:ac:79:5e:ba:b9:a4:8a:91:cb:43:51:ee:16:40:
77:34:ec:e8:4b:db:5d:c7:a1:0d:51:06:3f:ab:95:df:32:78:
dc:cc:16:b2:27:ef:08:b2:21:26:57:a1:6f:1e:75:44:06:34:
ca:2f:9d:71:59:61:00:e0:54:06:df:a6:b3:85:b5:ec:c5:4d:
5b:91:f4:37:b8:a7:51:61:67:ab:90:9a:20:7d:28:da:40:22:
c2:fc:6e:c3:e2:47:d4:9e:9c:b4:95:45:59:13:bb:2d:e7:c5:
41:00:a8:fc:5d:33:b7:76:32:44:2e:2b:ef:25:30:6d:86:16:
7a:bc:dd:52:5f:6a:e6:92:c8:ff:5e:11:ab:f3:1f:0f:e2:6c:
fc:a8:fb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:51:57 2025 by rpki-client