Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4_1z1bVfzj6i7NKymfMUTA_joGw.roa
File: 4_1z1bVfzj6i7NKymfMUTA_joGw.roa (raw, json)
Hash identifier: 9VbIXFI8ZTDExfDNEDUkwk4Xo53T0O0/a6/f8Zae2IY=
Subject key identifier: E3:FD:73:D5:B5:5F:CE:3E:A2:EC:D2:B2:99:F3:14:4C:0F:E3:A0:6C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01953C12D7D3216F09F6C6A70E5911A4E056
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4_1z1bVfzj6i7NKymfMUTA_joGw.roa
Signing time: Tue 25 Feb 2025 07:47:02 +0000
ROA not before: Tue 25 Feb 2025 07:47:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.220.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 04:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:12:d7:d3:21:6f:09:f6:c6:a7:0e:59:11:a4:e0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 25 07:47:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3fd73d5b55fce3ea2ecd2b299f3144c0fe3a06c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:74:69:08:39:72:f6:c5:89:c4:b4:fd:ab:
eb:5f:00:f8:5c:a9:c9:7c:53:87:9a:60:50:4e:19:
37:4f:02:ec:45:b9:78:fc:28:a5:64:cb:ef:9f:15:
64:b1:d5:c3:4f:5d:ce:b9:81:72:b4:4e:20:cc:5a:
cb:f9:48:ea:2c:ff:20:6f:26:bc:c3:66:fd:6d:3f:
d8:83:7c:ae:d2:e5:af:8c:73:c1:9d:c0:29:ed:1b:
29:32:25:6f:b6:c1:1c:f4:ce:e5:7d:1a:be:fe:74:
2f:06:34:fc:54:60:92:a3:a3:91:4d:f8:be:96:83:
89:c2:d2:f3:6b:7f:58:a0:a1:ce:93:cd:da:57:e8:
9e:55:92:81:c1:b7:4f:74:0a:4d:58:bc:17:67:f9:
44:e1:4d:c3:df:c7:a9:23:e8:0d:69:3d:04:80:21:
b0:ba:15:a1:04:1a:16:4c:84:82:d4:27:93:01:d3:
da:ee:54:62:40:c8:0c:0e:6f:c5:d4:71:41:90:83:
7a:d2:5d:a4:ea:34:e2:d4:f6:a4:7f:bd:13:65:ba:
23:0f:8a:eb:31:f2:05:2f:1a:50:68:87:bf:09:9d:
ac:8d:1f:29:75:70:62:dd:cc:28:27:8e:86:c4:09:
9a:ed:13:17:21:df:bd:6a:8d:3f:a8:5c:2a:58:01:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FD:73:D5:B5:5F:CE:3E:A2:EC:D2:B2:99:F3:14:4C:0F:E3:A0:6C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4_1z1bVfzj6i7NKymfMUTA_joGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.220.0/24
151.243.228.0/24
151.243.243.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:23:ca:a8:aa:e8:e7:c3:cc:e3:d7:01:33:18:11:6b:10:64:
aa:9a:29:c9:06:dc:ea:a4:55:48:d0:98:91:2a:e7:1a:9f:e5:
47:39:a6:70:73:1e:3c:5b:79:b9:3a:63:f8:27:3d:68:5c:55:
d4:5e:79:f6:ad:2c:b6:b6:b5:7f:97:de:b2:33:91:ff:e9:9f:
87:24:f2:41:b7:15:11:96:32:08:f7:37:39:46:cd:9d:7d:dc:
39:ce:a4:01:aa:3f:76:a8:f6:78:e2:9c:e4:b9:e4:55:a0:2c:
f6:f9:d9:4c:c8:96:65:61:2d:36:7d:e0:e3:69:fe:f8:96:ac:
5a:db:d4:09:6b:64:e4:4d:61:ae:eb:2d:04:f4:dd:ad:07:87:
a7:85:b6:b9:dc:6d:90:e6:c5:cd:e3:12:64:a0:66:45:75:0e:
d8:65:16:48:4a:95:42:f4:f0:a4:54:31:3c:17:a6:13:fb:64:
47:3d:90:6f:39:d9:b0:cb:3e:38:d9:ad:ca:1f:96:51:55:31:
40:0a:62:10:19:00:f8:f4:d8:dd:b9:24:2c:7d:84:7d:fe:29:
76:90:01:c5:90:60:1a:fc:7c:3d:50:4f:66:3b:16:21:49:b7:
ee:4c:db:63:37:37:51:ee:c3:fb:cb:e5:31:50:14:5d:fe:f0:
4d:0f:68:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:35 2025 by rpki-client