Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4iVEoUivpSMPJWXIAHRFLb3brzc.roa
File: 4iVEoUivpSMPJWXIAHRFLb3brzc.roa (raw, json)
Hash identifier: t50HdIwB5PW+yLwj4nWl+YC/b9UMF64RhU/yLC+nyTQ=
Subject key identifier: E2:25:44:A1:48:AF:A5:23:0F:25:65:C8:00:74:45:2D:BD:DB:AF:37
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019710537AA1A671E860F98D8BBFD2F916DF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4iVEoUivpSMPJWXIAHRFLb3brzc.roa
Signing time: Tue 27 May 2025 05:59:55 +0000
ROA not before: Tue 27 May 2025 05:59:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 37.202.193.0/24 maxlen: 24
151.245.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jun 2025 14:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:53:7a:a1:a6:71:e8:60:f9:8d:8b:bf:d2:f9:16:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 27 05:59:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e22544a148afa5230f2565c80074452dbddbaf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a0:0f:6f:56:ed:5e:b3:d0:d0:7e:e6:9b:57:
ba:a8:2f:32:87:02:27:0d:e4:e4:a2:1d:a0:88:13:
a4:4e:54:be:65:36:be:67:65:97:1a:d4:ff:e0:28:
ae:be:34:d4:cf:b8:92:42:b3:fe:09:ef:50:aa:e4:
69:57:12:e1:b7:e9:dd:dd:b1:a7:c1:3b:03:61:61:
b5:4a:8f:98:cd:5b:8a:67:48:22:67:17:cc:56:a9:
da:68:82:b3:19:70:3b:e1:9e:c9:69:7f:62:b6:81:
5f:55:bd:39:2a:c4:69:1b:bd:f8:e5:53:a3:88:45:
39:ce:9f:53:89:d7:ed:93:fe:62:ca:6a:8e:5c:ab:
cd:9b:a8:80:e3:bc:35:0a:cb:7a:39:69:d8:2f:f9:
63:50:9f:ca:9b:93:d2:3e:7d:9f:42:61:98:3f:1e:
7d:a2:29:73:3b:a3:ac:e3:b3:7d:e8:9e:4b:6a:53:
15:5e:eb:f7:8b:3b:88:90:ee:f4:16:1f:ee:be:02:
99:b1:e8:6c:f2:fc:c2:08:56:5d:e1:cb:b6:e2:22:
6d:2b:76:5b:7d:42:b9:43:46:e0:d3:1f:ce:89:1d:
88:07:61:30:98:36:96:5b:8d:b9:57:44:10:ee:8d:
bc:8e:c1:0a:b7:c1:56:d9:11:f0:4e:69:1c:8a:6b:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:25:44:A1:48:AF:A5:23:0F:25:65:C8:00:74:45:2D:BD:DB:AF:37
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4iVEoUivpSMPJWXIAHRFLb3brzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
151.245.8.0/21
Signature Algorithm: sha256WithRSAEncryption
13:cf:2d:62:92:de:b2:bc:1f:48:84:40:64:e2:6c:ea:10:c3:
ac:8e:13:48:ed:8e:70:49:d7:fa:dd:67:74:58:c9:8f:2f:92:
e6:5f:f8:31:56:78:3e:a7:68:e9:27:e4:db:11:3c:76:2d:01:
e0:ef:1c:c1:6b:17:79:ca:b3:11:a1:0f:29:18:e5:56:82:a6:
dc:35:ae:b9:b5:57:06:5c:bc:8d:4d:13:b9:a7:17:c1:35:f5:
5d:de:b1:56:d4:ca:c7:73:a8:60:d9:99:08:f8:53:ff:c9:fe:
c6:a7:b3:e8:e6:22:ba:8d:d5:a2:92:5c:64:6b:58:54:43:81:
c4:d7:b8:6c:9a:b9:92:27:5d:d6:e3:ad:eb:b1:97:35:77:7a:
18:1e:51:92:b2:f2:2d:09:c3:28:d2:ef:08:78:5d:ad:9a:c5:
74:3c:fe:1a:ff:8f:f0:39:48:a8:06:5e:35:f6:5d:91:cd:1d:
02:9b:03:3d:c0:18:90:b6:fa:80:23:c2:2c:1e:76:f8:cf:d4:
15:eb:68:86:fe:d2:11:36:be:3d:95:5b:80:3b:81:22:b5:fc:
00:67:e9:62:2c:0f:90:5a:3c:b3:8f:0b:f8:85:d5:0b:32:e1:
27:e7:e6:ba:6f:32:c0:e4:e3:9e:66:bc:c2:97:f8:04:cc:0c:
31:ee:d7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:16:55 2025 by rpki-client