Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uol1o0SU69y-jTzpdOJXhRhTNSY.roa
File: uol1o0SU69y-jTzpdOJXhRhTNSY.roa (raw, json)
Hash identifier: oaoA3k/a5f4iGj+s6DYCeZyr0zTV06NmS/RisgStBwI=
Subject key identifier: BA:89:75:A3:44:94:EB:DC:BE:8D:3C:E9:74:E2:57:85:18:53:35:26
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197D95828BEC3F5D44BCE636A3E20356123
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uol1o0SU69y-jTzpdOJXhRhTNSY.roa
Signing time: Sat 05 Jul 2025 06:48:42 +0000
ROA not before: Sat 05 Jul 2025 06:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 37.202.213.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.19.0/24 maxlen: 24
151.242.21.0/24 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.243.109.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
151.244.8.0/24 maxlen: 24
151.244.12.0/24 maxlen: 24
151.244.24.0/24 maxlen: 24
151.244.30.0/24 maxlen: 24
151.244.40.0/24 maxlen: 24
151.244.65.0/24 maxlen: 24
151.244.73.0/24 maxlen: 24
151.244.86.0/24 maxlen: 24
151.244.93.0/24 maxlen: 24
151.244.97.0/24 maxlen: 24
151.244.101.0/24 maxlen: 24
151.244.105.0/24 maxlen: 24
151.244.110.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.244.118.0/24 maxlen: 24
151.244.124.0/24 maxlen: 24
151.245.0.0/24 maxlen: 24
151.245.32.0/24 maxlen: 24
151.245.72.0/24 maxlen: 24
151.245.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Jul 2025 06:58:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:58:28:be:c3:f5:d4:4b:ce:63:6a:3e:20:35:61:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 5 06:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba8975a34494ebdcbe8d3ce974e2578518533526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:42:3e:92:99:60:f9:a9:c2:23:04:ab:45:11:
43:0a:9f:b0:cc:47:8e:e2:67:b0:0d:c3:e7:7c:93:
00:93:10:b7:42:78:2d:ec:37:6a:f6:29:ee:70:64:
6b:99:80:c4:ee:01:f5:90:7b:7b:0f:13:8d:a6:d7:
11:f1:a0:8e:2f:a4:f7:d1:26:5a:f2:ff:8f:6b:72:
6b:18:be:37:54:6f:54:53:d3:26:ea:af:d0:34:a0:
f7:03:dc:5c:04:46:0e:38:67:51:15:ea:f0:43:9d:
f5:fc:5a:f2:6a:fc:dd:6e:0b:97:85:b3:ff:d8:b1:
9f:b8:48:61:af:f2:5b:c4:8e:d7:f0:72:16:02:a0:
ca:18:97:52:cf:15:3d:d6:4e:84:f9:ab:11:b8:72:
1b:f1:3c:49:ed:9a:12:58:68:6a:d1:dd:00:15:f9:
89:27:7e:91:8c:79:3d:8a:3c:a2:7e:ab:ec:aa:30:
95:04:46:7b:98:ec:c7:76:fa:17:07:31:35:b0:b3:
87:16:f6:5c:5e:da:90:1d:66:34:5f:54:4f:1a:cc:
e4:0a:fe:06:cb:6f:a6:94:23:b8:52:37:d4:e9:56:
6f:a4:93:eb:37:ce:32:cb:c2:93:d4:9c:44:87:2a:
68:e4:21:20:cc:c8:21:45:a9:2e:19:42:91:56:ff:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:89:75:A3:44:94:EB:DC:BE:8D:3C:E9:74:E2:57:85:18:53:35:26
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uol1o0SU69y-jTzpdOJXhRhTNSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.213.0/24
37.202.221.0/24
151.242.18.0/23
151.242.21.0/24
151.242.68.0/24
151.242.70.0/23
151.243.107.0-151.243.110.255
151.244.8.0/24
151.244.12.0/24
151.244.24.0/24
151.244.30.0/24
151.244.40.0/24
151.244.65.0/24
151.244.73.0/24
151.244.86.0/24
151.244.93.0/24
151.244.97.0/24
151.244.101.0/24
151.244.105.0/24
151.244.110.0/24
151.244.114.0/24
151.244.118.0/24
151.244.124.0/24
151.245.0.0/24
151.245.32.0/24
151.245.72.0/24
151.245.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:db:35:a6:1e:43:c9:23:1d:51:f7:b7:09:5c:08:63:b5:38:
7e:3e:bc:5f:40:42:eb:f1:df:e7:40:29:ed:10:b5:7d:6f:51:
24:d4:0b:a6:da:7f:c6:08:73:87:3e:83:a5:ff:3f:bf:fc:e5:
02:26:be:f2:d8:5c:2e:22:cb:4b:70:60:5d:ac:d8:30:da:70:
a5:64:48:10:cc:86:33:91:87:2e:36:71:e1:7b:d0:00:e0:85:
09:f7:ec:12:b3:a7:39:48:e8:37:f5:a4:4e:b4:09:37:6d:8a:
b6:ec:e7:fd:60:3d:8a:6c:11:a0:7a:91:ce:1c:bb:31:13:98:
d4:c9:44:ba:98:54:d9:38:f0:1a:b0:21:bf:8b:df:bc:79:69:
be:0a:46:cf:60:56:25:4a:50:a0:d6:b7:48:e5:22:b8:79:17:
34:78:fd:58:0f:ac:f0:20:4b:93:ad:86:81:b0:a6:50:d6:bc:
28:d1:10:62:21:32:e9:0f:dd:4a:cf:65:55:7b:7e:b9:55:f4:
26:89:63:ad:1c:20:bb:42:92:46:03:29:5f:56:85:af:e4:52:
92:ad:43:a0:de:88:fe:d6:f4:04:2e:da:6a:10:a7:1d:af:76:
df:02:01:ea:e1:ff:12:24:4b:4a:fb:ff:e6:18:b7:41:a1:a8:
33:0d:74:35
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISAZfZWCi+w/XUS85jaj4gNWEjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwNzA1MDY0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTg5NzVhMzQ0OTRlYmRjYmU4ZDNjZTk3NGUyNTc4NTE4NTMzNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EI+kplg+anCIwSrRRFDCp+wzEeO
4mewDcPnfJMAkxC3Qngt7Ddq9inucGRrmYDE7gH1kHt7DxONptcR8aCOL6T30SZa
8v+Pa3JrGL43VG9UU9Mm6q/QNKD3A9xcBEYOOGdRFerwQ531/FryavzdbguXhbP/
2LGfuEhhr/JbxI7X8HIWAqDKGJdSzxU91k6E+asRuHIb8TxJ7ZoSWGhq0d0AFfmJ
J36RjHk9ijyifqvsqjCVBEZ7mOzHdvoXBzE1sLOHFvZcXtqQHWY0X1RPGszkCv4G
y2+mlCO4UjfU6VZvpJPrN84yy8KT1JxEhypo5CEgzMghRakuGUKRVv8qGQIDAQAB
o4ICsjCCAq4wHQYDVR0OBBYEFLqJdaNElOvcvo086XTiV4UYUzUmMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdW9sMW8wU1U2OXktalR6cGRPSlhoUmhUTlNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaoDBAAl
ytUDBAAlyt0DBAGX8hIDBACX8hUDBACX8kQDBAGX8kYwDAMEAJfzawMEAJfzbgME
AJf0CAMEAJf0DAMEAJf0GAMEAJf0HgMEAJf0KAMEAJf0QQMEAJf0SQMEAJf0VgME
AJf0XQMEAJf0YQMEAJf0ZQMEAJf0aQMEAJf0bgMEAJf0cgMEAJf0dgMEAJf0fAME
AJf1AAMEAJf1IAMEAJf1SAMEAJf1XDANBgkqhkiG9w0BAQsFAAOCAQEApds1ph5D
ySMdUfe3CVwIY7U4fj68X0BC6/Hf50Ap7RC1fW9RJNQLptp/xghzhz6Dpf8/v/zl
Aia+8thcLiLLS3BgXazYMNpwpWRIEMyGM5GHLjZx4XvQAOCFCffsErOnOUjoN/Wk
TrQJN22Ktuzn/WA9imwRoHqRzhy7MROY1MlEuphU2TjwGrAhv4vfvHlpvgpGz2BW
JUpQoNa3SOUiuHkXNHj9WA+s8CBLk62GgbCmUNa8KNEQYiEy6Q/dSs9lVXt+uVX0
JoljrRwgu0KSRgMpX1aFr+RSkq1DoN6I/tb0BC7aahCnHa923wIB6uH/EiRLSvv/
5hi3QaGoMw10NQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:14:27 2025 by rpki-client