Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7Mc8uKI3CuJHzfAac0me_qulPCE.roa
File: 7Mc8uKI3CuJHzfAac0me_qulPCE.roa (raw, json)
Hash identifier: jPNLM9128hMaW0UroigyiORO7/8KNP7Ud3X5l0feTwg=
Subject key identifier: EC:C7:3C:B8:A2:37:0A:E2:47:CD:F0:1A:73:49:9E:FE:AB:A5:3C:21
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194820756BBE0F0BEE455E6AD1767727F32
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7Mc8uKI3CuJHzfAac0me_qulPCE.roa
Signing time: Mon 20 Jan 2025 04:45:06 +0000
ROA not before: Mon 20 Jan 2025 04:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
37.202.219.0/24 maxlen: 24
37.202.223.0/24 maxlen: 24
151.242.97.0/24 maxlen: 24
151.242.99.0/24 maxlen: 24
151.242.102.0/24 maxlen: 24
151.242.104.0/24 maxlen: 24
151.242.106.0/24 maxlen: 24
151.242.108.0/24 maxlen: 24
151.242.111.0/24 maxlen: 24
151.242.114.0/24 maxlen: 24
151.242.116.0/24 maxlen: 24
151.242.118.0/24 maxlen: 24
151.242.119.0/24 maxlen: 24
151.242.120.0/24 maxlen: 24
151.242.121.0/24 maxlen: 24
151.242.122.0/24 maxlen: 24
151.242.123.0/24 maxlen: 24
151.242.124.0/24 maxlen: 24
151.242.125.0/24 maxlen: 24
151.242.126.0/24 maxlen: 24
151.242.127.0/24 maxlen: 24
151.243.93.0/24 maxlen: 24
151.243.96.0/24 maxlen: 24
151.243.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 06:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:82:07:56:bb:e0:f0:be:e4:55:e6:ad:17:67:72:7f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 20 04:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecc73cb8a2370ae247cdf01a73499efeaba53c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:bf:a3:75:34:34:c2:ad:0a:be:e7:63:70:
43:59:ab:1b:4c:3d:bf:f8:8e:57:80:4f:1d:fd:be:
e8:3f:00:9f:b5:5d:45:86:77:b3:c5:90:01:9e:94:
5d:08:44:73:db:75:fa:8c:be:19:af:2c:12:5f:a1:
82:cf:d4:93:ab:aa:18:4d:03:56:55:b0:a8:1e:2c:
c8:b2:64:cc:73:0a:b1:a7:5e:e5:87:ed:1a:55:b5:
d9:13:d4:17:71:94:8f:3c:96:11:3f:ed:aa:93:3f:
6e:29:58:7b:c3:75:f2:33:39:1f:35:48:65:ca:58:
f5:95:66:1a:3b:30:d1:a5:c8:3a:aa:ef:0d:33:6d:
13:aa:d3:26:52:8c:e8:e1:70:35:db:32:e3:69:11:
89:51:0b:44:02:1e:0b:a3:6e:39:df:8f:08:e8:2a:
e7:de:6c:a8:c8:17:1d:13:a6:72:51:14:2d:50:ac:
e9:ff:bf:7e:64:79:e1:6b:6d:31:fb:98:3d:53:cf:
00:2d:23:0b:00:d9:80:c6:55:4f:6f:e9:9b:b8:0a:
7d:ab:cd:09:cc:3e:00:fb:ed:06:44:49:6e:99:b8:
48:4a:97:be:dd:64:c1:e7:ce:ab:b1:7c:24:17:7d:
75:60:aa:00:34:61:db:a6:59:ce:3d:a0:5a:4b:97:
d3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C7:3C:B8:A2:37:0A:E2:47:CD:F0:1A:73:49:9E:FE:AB:A5:3C:21
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7Mc8uKI3CuJHzfAac0me_qulPCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
37.202.219.0/24
37.202.223.0/24
151.242.97.0/24
151.242.99.0/24
151.242.102.0/24
151.242.104.0/24
151.242.106.0/24
151.242.108.0/24
151.242.111.0/24
151.242.114.0/24
151.242.116.0/24
151.242.118.0-151.242.127.255
151.243.93.0/24
151.243.96.0/24
151.243.99.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d9:02:73:25:9d:d3:37:3c:8c:2e:40:ed:54:40:8a:c4:6a:
f6:e6:e1:1e:66:e8:b1:ab:a1:c0:bb:1a:5b:34:7a:4d:d7:cf:
61:9d:52:2e:5c:63:b2:d2:ef:b8:14:53:45:ee:5d:44:19:ab:
16:cd:6d:65:0c:b4:5a:ca:87:cc:30:1a:69:c7:8a:68:dd:2f:
cb:f8:de:a4:dc:05:fc:e6:88:77:4d:af:bc:78:bf:23:84:27:
23:22:a5:a5:86:c9:0a:c4:66:04:99:6b:45:5f:1a:82:da:b4:
79:13:e4:0b:fd:d8:bb:b5:17:1c:e3:f1:dc:6d:02:06:28:3f:
d8:6e:fe:b1:7d:1f:55:6a:a2:79:9a:05:d1:72:cc:6d:f5:b5:
48:2f:ae:63:9e:6e:63:95:79:c8:23:ed:fb:4c:f0:69:bd:c3:
53:15:49:db:4d:3c:2a:c8:45:0d:67:33:fd:d6:4c:ad:40:81:
06:9a:13:aa:7b:33:f8:63:f2:de:65:93:96:93:95:6b:8e:05:
e2:49:10:6c:34:07:d7:14:0b:ec:e0:ca:96:b0:7b:41:fc:43:
9d:ca:09:81:73:5b:d2:61:87:65:57:eb:d1:5c:e7:6a:ed:72:
50:6d:0f:65:98:20:ca:b9:d3:66:ff:eb:03:85:9f:bf:98:a2:
70:1d:78:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:52:25 2025 by rpki-client