Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HgXXF9TEdtvzNA79P57YJs_0Uk0.roa
File: HgXXF9TEdtvzNA79P57YJs_0Uk0.roa (raw, json)
Hash identifier: TAynmf6nEJRnp1EaHCNZNA48DwmOaJy/URNB/cPhhe8=
Subject key identifier: 1E:05:D7:17:D4:C4:76:DB:F3:34:0E:FD:3F:9E:D8:26:CF:F4:52:4D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019648B1260B596FC5EF69E09B1407F46F06
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HgXXF9TEdtvzNA79P57YJs_0Uk0.roa
Signing time: Fri 18 Apr 2025 11:38:11 +0000
ROA not before: Fri 18 Apr 2025 11:38:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 37.202.203.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.243.206.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 23 Apr 2025 10:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:b1:26:0b:59:6f:c5:ef:69:e0:9b:14:07:f4:6f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 18 11:38:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e05d717d4c476dbf3340efd3f9ed826cff4524d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:e3:44:8a:3b:6f:6d:e8:3b:f8:d3:49:bc:
ae:df:5f:c8:dd:7e:fd:cc:1c:ed:83:22:20:29:04:
3d:e6:af:04:8c:30:5a:5b:c2:83:98:d1:17:ad:b4:
dc:4c:72:9b:82:8b:02:d5:03:fb:74:a4:d8:28:c3:
6a:f1:45:95:31:ef:6a:29:9c:c8:11:46:78:7f:3d:
a5:ee:0c:f1:39:8c:3d:00:8d:85:a8:22:90:03:8f:
f8:66:2d:a1:7e:bf:f2:e4:1b:80:26:53:e6:68:a2:
39:6f:ea:91:de:94:7e:93:8b:3c:c8:6e:cb:83:74:
52:14:a4:98:f4:1f:74:eb:ab:13:94:42:e4:48:2b:
38:39:d0:c5:49:62:9d:01:43:9f:e1:cc:98:66:13:
ab:84:58:61:b8:f4:34:96:e0:11:12:06:7a:3e:43:
cf:fd:3d:b4:d0:d9:04:d2:e3:d8:16:d9:df:72:dd:
d2:09:3b:12:fe:ff:ba:4a:63:2e:e8:a4:94:b3:9a:
f8:bb:c5:bf:a3:48:46:f8:56:51:aa:8b:46:53:d8:
cf:be:95:7e:7b:95:84:33:d1:06:80:29:3d:bd:1d:
e7:02:b4:74:50:95:ee:77:c3:08:66:78:91:2e:9a:
8c:f6:15:19:18:46:8f:c3:f2:a9:35:35:4b:3a:d4:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:05:D7:17:D4:C4:76:DB:F3:34:0E:FD:3F:9E:D8:26:CF:F4:52:4D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HgXXF9TEdtvzNA79P57YJs_0Uk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
151.240.77.0/24
151.241.18.0/24
151.243.206.0/23
Signature Algorithm: sha256WithRSAEncryption
32:48:d0:55:d5:1b:e9:90:af:58:0a:65:86:03:cf:7c:f4:d9:
d1:cc:3c:8d:56:93:8b:20:da:39:27:2b:08:58:9c:d6:8e:85:
8e:00:78:2c:6c:8f:14:44:58:4c:01:9a:d8:4b:c7:82:0c:b2:
d9:a8:81:3f:e0:44:46:de:6a:53:29:40:e2:5c:26:bb:c2:ca:
cd:f6:c5:f6:1a:93:05:a5:ee:e9:f6:d7:fe:55:b8:8b:d2:e0:
ce:ea:30:82:e7:8a:d0:74:ec:1f:4e:be:0e:33:6e:b7:f6:38:
46:00:0f:58:8b:44:ee:3a:9c:a3:7b:4d:1b:f9:5a:d4:97:fa:
ae:5a:85:54:7c:b2:f7:14:15:9f:f8:41:a1:9d:46:ac:1a:da:
63:44:1e:f2:93:c1:4d:8a:0a:61:2a:f4:4b:cf:5b:b2:41:d5:
2e:73:fd:5b:ae:b0:13:4a:cc:24:32:af:47:07:ae:59:87:7a:
2d:a0:dd:53:8b:8b:45:5a:0d:35:b2:bd:99:a0:dd:14:57:3f:
dc:35:51:12:73:39:95:00:eb:0a:17:c6:63:b3:2e:2e:d4:b4:
c3:6c:6d:e4:7d:11:4d:b9:22:94:79:52:f8:ad:02:fa:c4:0d:
64:fc:88:76:ec:11:b3:91:aa:c9:4c:d3:3d:cf:a3:46:d1:c5:
7e:af:99:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:07:06 2025 by rpki-client