Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4pycRRZ2cFZ-gph_vjVqQdp2Us0.roa
File: 4pycRRZ2cFZ-gph_vjVqQdp2Us0.roa (raw, json)
Hash identifier: OqAmceleSfTaNGYX5Sj935z3/OP3cDWoQvkcEjgC3V4=
Subject key identifier: E2:9C:9C:45:16:76:70:56:7E:82:98:7F:BE:35:6A:41:DA:76:52:CD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01954D70E9ABA4D8AF78C91C45A48B824FF2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4pycRRZ2cFZ-gph_vjVqQdp2Us0.roa
Signing time: Fri 28 Feb 2025 16:43:20 +0000
ROA not before: Fri 28 Feb 2025 16:43:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.54.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.249.0/24 maxlen: 24
151.243.250.0/24 maxlen: 24
151.243.251.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
151.243.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 09:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:70:e9:ab:a4:d8:af:78:c9:1c:45:a4:8b:82:4f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 28 16:43:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e29c9c45167670567e82987fbe356a41da7652cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:92:8f:6c:6d:5e:91:7c:eb:ec:74:aa:21:
99:6c:bf:97:60:ad:ae:ab:e7:6d:02:f3:13:0c:8b:
53:6d:b2:b5:b4:d6:ce:41:ef:04:89:70:35:70:83:
92:01:78:5f:fb:0d:39:ea:99:b5:50:cc:d9:ed:a7:
dd:6b:47:37:61:76:64:fc:01:f7:d4:d4:7f:88:41:
c7:e6:28:9a:78:ed:2c:fb:92:eb:90:81:b8:06:9a:
55:4a:fc:5f:67:c4:73:85:46:b9:3c:cb:9c:f9:40:
19:fc:8e:6f:06:23:b9:f1:ed:30:90:45:ac:44:81:
26:c2:f8:4e:55:79:0c:a3:56:c5:9f:b3:19:c1:0c:
99:ba:ff:20:07:ab:f2:24:e0:f2:f8:63:ff:17:8f:
a2:99:8c:ad:1f:07:a7:60:e0:39:37:f9:ad:24:f6:
f1:6d:2a:06:42:06:3f:02:65:cb:87:05:55:f6:90:
2a:98:dc:c9:b7:57:83:4e:de:5d:f9:b8:bb:e7:44:
a6:6e:27:3d:13:12:4b:0d:a7:5e:ae:64:61:65:80:
fc:b4:ef:e4:36:e0:bd:cd:b5:d6:0f:b1:70:ff:c5:
7d:bb:44:e2:44:5c:66:81:61:92:1e:9c:3d:e5:c9:
60:6a:3f:99:eb:15:a0:bc:91:09:42:00:4a:71:fa:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9C:9C:45:16:76:70:56:7E:82:98:7F:BE:35:6A:41:DA:76:52:CD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4pycRRZ2cFZ-gph_vjVqQdp2Us0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
151.242.192.0/20
151.243.16.0/20
151.243.54.0/24
151.243.246.0-151.243.253.255
Signature Algorithm: sha256WithRSAEncryption
1c:5a:6c:79:66:bf:5b:ce:1e:fe:31:a8:10:b8:3c:c6:3c:49:
9c:48:5c:21:33:c5:e5:cc:a7:ff:a1:d0:7b:cd:e5:eb:43:c1:
78:b5:a5:70:7c:8b:d6:69:3d:73:6a:7f:0e:5a:6d:e1:2c:3a:
6d:0a:8c:f7:6c:7d:36:8c:a9:2a:a2:df:35:96:a7:dd:5c:37:
a7:fe:7f:8a:b0:66:7d:71:dd:4a:59:fc:4b:43:b7:f2:19:9c:
cc:da:a3:e4:41:8a:2d:a5:6a:63:70:b7:92:69:ae:e9:51:f1:
0b:70:af:f9:9e:92:40:1d:95:38:77:f0:55:82:be:5f:be:82:
34:0e:02:07:7c:86:73:53:84:8e:cb:1b:20:05:c1:48:94:6b:
82:41:04:a2:2b:8b:27:4f:a0:9b:02:70:cc:54:07:86:9b:d8:
03:ac:2b:c6:5e:21:0e:ef:12:7d:bc:d3:a1:47:dc:34:82:7f:
a3:53:86:8b:7b:73:5f:7e:56:a3:0a:ed:35:67:5d:3e:17:41:
80:35:c0:ab:64:f9:48:45:20:0f:05:39:b0:b3:c6:c8:71:b4:
8a:39:e0:ed:ef:5a:d9:ca:5a:0b:c3:01:ba:cd:4e:7a:64:16:
4a:4e:4b:00:9e:a2:42:85:a5:eb:b8:c1:d8:dd:bc:d6:2a:a8:
50:ee:09:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:04 2025 by rpki-client