Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Bdcv3efQV-4_kLSA4MRSR15wU-I.roa
File: Bdcv3efQV-4_kLSA4MRSR15wU-I.roa (raw, json)
Hash identifier: 0nZJgLOQoAUUWiE97dHDD/3etMw5xvcnUw9zyXJg7to=
Subject key identifier: 05:D7:2F:DD:E7:D0:57:EE:3F:90:B4:80:E0:C4:52:47:5E:70:53:E2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195CC7857A7C1A3A7864A1221274FE73785
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Bdcv3efQV-4_kLSA4MRSR15wU-I.roa
Signing time: Tue 25 Mar 2025 08:43:13 +0000
ROA not before: Tue 25 Mar 2025 08:43:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.202.0/24 maxlen: 24
151.240.100.0/24 maxlen: 24
151.242.67.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 07:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:78:57:a7:c1:a3:a7:86:4a:12:21:27:4f:e7:37:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 25 08:43:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05d72fdde7d057ee3f90b480e0c452475e7053e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:69:f7:5d:83:fd:9e:66:8e:c9:b4:aa:ec:
99:4a:42:ef:fa:3b:ae:85:45:82:aa:cb:90:69:9b:
92:ff:ba:c4:22:52:83:8c:76:40:3f:0c:b1:eb:aa:
15:7a:95:23:e0:4c:bd:f6:3d:42:3e:45:49:49:62:
3c:2d:19:64:d4:6b:de:1f:6a:6a:b3:f5:e1:ce:61:
4a:e5:2d:55:d5:c6:47:53:44:e5:9d:a6:cb:33:bd:
65:38:3b:8e:1f:73:14:47:78:63:3a:11:d5:72:f4:
95:de:99:21:4c:e5:1b:06:0a:c7:6c:81:1c:6c:dc:
9c:d8:d3:6a:13:6e:6c:17:09:5a:51:0d:c3:79:8a:
dc:fb:f2:cd:65:ef:84:33:06:06:98:cb:eb:2b:d8:
64:62:45:13:52:96:58:8f:35:3e:bb:d6:6e:d2:36:
0d:c3:36:a6:57:50:19:4f:eb:9e:23:34:2c:e3:05:
26:10:23:1c:bd:ad:e7:c8:78:6a:90:cf:3f:19:63:
18:8c:55:62:3e:ae:e1:4c:97:dc:99:1e:83:62:de:
50:cc:ac:d9:c3:6e:1e:b9:8d:5b:37:5c:db:7a:9d:
df:67:7d:7a:7e:c5:01:21:69:46:68:9d:0e:95:be:
4d:75:c5:c1:e6:8d:98:b2:6b:1a:7c:9e:7b:31:42:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D7:2F:DD:E7:D0:57:EE:3F:90:B4:80:E0:C4:52:47:5E:70:53:E2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Bdcv3efQV-4_kLSA4MRSR15wU-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.240.100.0/24
151.242.67.0/24
151.242.117.0/24
151.243.6.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ba:65:3c:a2:e2:d1:36:16:1f:08:cb:f1:0f:64:99:21:4f:
20:73:d9:6b:e2:0a:5a:a9:50:71:39:38:22:a7:9e:ea:dc:7e:
19:f2:e5:7a:44:70:55:8e:16:ee:da:94:46:2b:1b:10:90:5b:
c1:27:e3:0a:ea:b0:91:5c:78:ed:81:c1:b5:77:92:fc:a7:e2:
84:1a:0b:ff:6c:59:a4:2e:eb:5a:4b:9a:90:24:01:fc:43:0f:
5d:d2:65:ba:05:58:40:8f:60:3b:9f:bb:ac:52:a2:3f:7d:8f:
64:f2:bf:27:c9:34:d5:46:e1:bb:5a:82:19:55:2a:9d:85:61:
c0:7d:80:83:7e:c4:82:4a:00:de:13:cf:65:c4:3c:77:ac:cd:
be:71:52:c0:89:b2:9e:9e:b3:77:fc:53:00:a1:0d:4f:cc:f9:
d4:25:26:52:2d:0c:8e:59:0c:ec:b9:68:fb:a4:1d:43:21:60:
a9:b5:9b:98:9e:4c:53:06:3d:0f:ec:7f:d6:c1:1a:54:94:f0:
c0:cd:d5:dc:3c:66:87:8f:89:87:ce:7a:ab:84:cf:53:39:99:
39:75:10:d7:c5:92:36:67:98:9d:b4:7b:2d:1e:23:7e:68:14:
2f:ef:a2:08:c1:d6:81:5b:3d:c9:49:ea:f9:9a:ce:1f:30:86:
e3:8e:30:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:44 2025 by rpki-client