Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A4RjqqszkUZELujc_31JIrJpZIA.roa
File: A4RjqqszkUZELujc_31JIrJpZIA.roa (raw, json)
Hash identifier: C19DC16l6ZGl2dEZGXH232uLIkxxJiBKRL7ywqgLJc0=
Subject key identifier: 03:84:63:AA:AB:33:91:46:44:2E:E8:DC:FF:7D:49:22:B2:69:64:80
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01954FEB5F3FA1A2BA0FB4860446B107E97C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A4RjqqszkUZELujc_31JIrJpZIA.roa
Signing time: Sat 01 Mar 2025 04:16:20 +0000
ROA not before: Sat 01 Mar 2025 04:16:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 37.202.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Apr 2025 11:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4f:eb:5f:3f:a1:a2:ba:0f:b4:86:04:46:b1:07:e9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 1 04:16:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=038463aaab339146442ee8dcff7d4922b2696480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:3b:78:98:81:bd:27:e8:a4:c8:60:ab:87:
7a:82:82:eb:fe:d5:0d:f9:8e:ad:72:93:90:96:b8:
59:24:45:9b:30:a2:ae:67:17:25:9d:3a:64:5b:51:
21:3d:07:6b:07:dd:d6:a3:13:6b:ca:f2:35:2d:8e:
03:7c:91:8f:3a:9a:58:0e:a1:82:20:38:f8:23:97:
25:10:c2:22:95:87:2e:97:01:c6:0f:80:9c:e1:1f:
ac:d2:87:45:52:f0:32:74:ac:b6:3c:e3:f7:b9:13:
c0:e3:3a:6c:a2:7b:48:e1:16:22:52:65:54:10:62:
06:1b:0a:da:ad:5c:a0:d6:2e:5b:23:71:3a:66:62:
c8:ba:7e:58:78:6e:29:63:d1:21:e3:5a:fe:bb:ed:
03:45:b9:2c:65:b8:b0:28:f9:28:91:a2:da:33:e6:
dc:a0:6e:e4:f4:c2:ae:83:9c:94:84:ce:77:4f:45:
a0:d1:b2:9b:95:63:a3:ab:9f:3b:ee:7b:2c:eb:ed:
1c:ef:71:20:83:47:04:3e:19:a0:f9:53:be:ec:ef:
e9:17:13:58:ff:ff:c2:23:23:83:55:a1:f6:0f:1a:
0d:b3:da:56:21:2a:b7:a5:93:2f:a3:50:87:3e:e4:
05:d6:f8:05:81:aa:2c:7c:7a:e0:24:4d:49:51:bd:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:84:63:AA:AB:33:91:46:44:2E:E8:DC:FF:7D:49:22:B2:69:64:80
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A4RjqqszkUZELujc_31JIrJpZIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.209.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b6:6b:b4:86:ca:4b:77:49:e6:9c:d9:ef:64:c0:3c:54:3b:
db:62:4e:18:29:ee:7e:0a:32:28:fd:99:3f:96:09:37:28:6c:
7c:cc:01:94:ed:b7:bb:ed:69:33:cb:bf:5b:80:94:4e:25:46:
3d:d1:1b:d7:fb:90:c6:e7:27:46:a0:9c:83:db:12:01:12:e9:
d7:7e:73:bd:f2:74:7c:b6:fb:c7:bb:32:06:86:31:af:b0:ab:
7d:29:b2:d5:9b:d1:68:95:f8:cf:b2:cb:93:52:b8:bc:98:1e:
9b:76:b0:6a:3f:d3:42:59:8e:b2:58:5a:9c:50:04:74:c3:8b:
33:c7:d8:f5:07:c5:1f:85:26:56:b7:c0:a0:1f:ce:96:cb:9c:
43:3c:f1:4e:c0:5a:81:76:9d:51:ab:15:7e:ec:31:d1:d3:11:
4c:93:f6:23:61:7a:79:46:7b:a0:91:c7:ca:64:e2:76:77:4c:
25:00:28:71:de:0d:1a:18:07:13:8a:48:eb:be:24:e5:31:a4:
bc:6e:95:a4:f3:5f:0b:f4:4f:00:e2:fc:44:af:fc:ed:3e:a0:
30:83:ca:eb:2f:95:18:e8:ba:64:c1:50:68:f5:7e:66:f5:45:
91:33:cd:ea:d8:da:e7:98:e3:91:88:a5:38:97:20:1a:8d:fc:
55:f7:07:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:16 2025 by rpki-client