Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AG3ic0CCp9iFcvtWYW7o032e35I.roa
File: AG3ic0CCp9iFcvtWYW7o032e35I.roa (raw, json)
Hash identifier: djjeUK3JhQZ7fl8TQ7vfBwu5rqAZL9OeMPIzAisU4pY=
Subject key identifier: 00:6D:E2:73:40:82:A7:D8:85:72:FB:56:61:6E:E8:D3:7D:9E:DF:92
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196F931D7558B61EEC47B777DC03C308C9E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AG3ic0CCp9iFcvtWYW7o032e35I.roa
Signing time: Thu 22 May 2025 18:11:55 +0000
ROA not before: Thu 22 May 2025 18:11:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 37.202.219.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.251.0/24 maxlen: 24
151.240.252.0/24 maxlen: 24
151.240.253.0/24 maxlen: 24
151.242.9.0/24 maxlen: 24
151.242.13.0/24 maxlen: 24
151.242.46.0/24 maxlen: 24
151.242.47.0/24 maxlen: 24
151.242.48.0/24 maxlen: 24
151.242.60.0/24 maxlen: 24
151.242.62.0/24 maxlen: 24
151.242.121.0/24 maxlen: 24
151.242.166.0/23 maxlen: 24
151.242.195.0/24 maxlen: 24
151.243.140.0/24 maxlen: 24
151.244.59.0/24 maxlen: 24
151.244.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 May 2025 04:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:31:d7:55:8b:61:ee:c4:7b:77:7d:c0:3c:30:8c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 18:11:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=006de2734082a7d88572fb56616ee8d37d9edf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3c:7b:4d:d0:19:5e:af:3a:2e:59:75:bf:18:
c5:c1:96:a4:4c:80:d8:e5:f0:1b:88:05:71:f9:a1:
63:1f:a3:e3:f9:28:d2:97:36:05:89:08:88:15:f7:
e6:2b:70:92:21:ca:cd:94:e3:35:91:d7:93:e6:09:
45:3c:e2:b4:17:2e:16:40:6c:a8:d8:b2:ba:55:45:
43:c3:62:8e:83:e6:79:a6:14:1c:bf:c0:a9:dd:cb:
f2:04:aa:0e:e4:42:ed:41:d1:88:24:ed:1e:9e:0f:
ad:93:9a:09:59:3b:97:a5:f0:1c:02:21:f2:2d:b9:
4a:25:06:35:d8:75:10:3a:fb:ea:5b:5b:3c:7b:9e:
16:84:f4:4a:a7:1a:56:27:e3:fd:2a:db:5c:95:48:
51:f7:27:48:60:22:b1:3e:ba:68:79:3f:31:7b:a9:
1a:19:b3:c7:ab:26:79:06:f4:9c:ae:d6:93:83:b0:
19:f4:42:c9:2f:5d:8a:42:03:65:de:9c:6b:09:05:
e3:6e:c6:3c:7c:43:1d:84:ee:1c:5b:71:12:b5:e1:
67:f0:b9:79:7a:36:ec:80:6c:a9:21:b5:f4:44:15:
17:ed:6f:93:e7:7c:d9:3d:d6:a6:c7:d7:7f:83:54:
08:06:22:e9:2d:0f:c6:63:2f:e3:b1:d5:be:78:7d:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6D:E2:73:40:82:A7:D8:85:72:FB:56:61:6E:E8:D3:7D:9E:DF:92
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AG3ic0CCp9iFcvtWYW7o032e35I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.219.0/24
151.240.31.0/24
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.246.0/23
151.240.249.0-151.240.253.255
151.242.9.0/24
151.242.13.0/24
151.242.46.0-151.242.48.255
151.242.60.0/24
151.242.62.0/24
151.242.121.0/24
151.242.166.0/23
151.242.195.0/24
151.243.140.0/24
151.244.59.0/24
151.244.117.0/24
Signature Algorithm: sha256WithRSAEncryption
09:4e:10:c6:58:99:ff:b7:9f:5c:00:e9:3b:a9:00:74:2f:40:
4c:94:6f:30:44:53:4c:ba:74:2d:6f:70:48:bb:e2:98:f0:a6:
c7:4b:ef:86:07:98:70:30:35:9b:5f:4b:d9:f7:fb:c9:bd:ac:
ef:5e:a5:ad:42:67:b5:90:a9:b8:5c:95:ec:55:f5:8b:c3:0a:
a8:d0:fa:6f:13:27:46:f1:d9:ce:00:c4:80:dd:d4:fd:2e:cb:
df:04:12:a9:b5:1b:af:9e:38:5f:2d:3a:76:e6:5b:80:a4:4d:
36:a9:d2:52:ad:45:92:2b:c7:b6:a5:81:f5:e9:be:82:4a:a3:
54:25:b9:7a:7e:b5:8c:23:23:32:0f:fa:44:c2:a9:c1:21:c9:
aa:b6:8f:7e:45:b0:cc:71:22:0f:ab:9e:2d:aa:84:51:f9:d5:
97:e9:eb:3c:85:36:99:48:03:15:25:bc:e6:11:92:22:ff:48:
04:05:44:a1:06:5d:19:9c:ac:4d:f7:1b:1a:12:ce:f4:66:3c:
ac:35:f8:6d:7d:fe:2f:3e:dd:16:d6:ad:22:06:c8:b4:79:4a:
43:c7:1c:9a:09:17:2c:30:6b:ce:fd:4c:cc:c8:0e:ec:07:cb:
36:14:e2:0a:16:61:cd:b2:d5:92:5e:fd:4a:47:cc:66:e1:81:
55:e4:23:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:54:55 2025 by rpki-client