Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ic7uopX0ZG0qVFc5mv251ZY5hTY.roa
File: Ic7uopX0ZG0qVFc5mv251ZY5hTY.roa (raw, json)
Hash identifier: LMeom4hNE4JmaXQVPhgHJ/SrKqe6DWyJ2sQr2yAIfmQ=
Subject key identifier: 21:CE:EE:A2:95:F4:64:6D:2A:54:57:39:9A:FD:B9:D5:96:39:85:36
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195409D92567C7CBB88B5B9BB60F484541E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ic7uopX0ZG0qVFc5mv251ZY5hTY.roa
Signing time: Wed 26 Feb 2025 04:57:03 +0000
ROA not before: Wed 26 Feb 2025 04:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.220.0/24 maxlen: 24
151.243.150.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Mar 2025 06:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:40:9d:92:56:7c:7c:bb:88:b5:b9:bb:60:f4:84:54:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 26 04:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21ceeea295f4646d2a5457399afdb9d596398536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:42:15:4a:68:10:2e:08:2e:b0:e0:35:27:
1a:d5:62:1f:52:08:0b:30:46:db:75:7c:d3:f5:38:
9b:b7:15:20:17:05:db:19:0e:c5:fa:7c:a7:09:db:
e1:bd:88:23:29:86:16:98:c4:26:dc:47:4e:a9:70:
e5:aa:d5:a2:a5:7d:9e:1b:32:d6:b1:fb:97:a0:77:
b3:f1:3a:72:cb:61:15:14:4b:e5:c2:ef:13:0f:a6:
41:9f:ed:2c:b6:cf:06:70:f1:31:c5:9d:be:e3:cd:
4d:b2:05:72:29:5d:84:2f:f7:d8:ef:d6:7e:d2:39:
d6:95:17:b6:20:97:0f:f3:87:ef:02:d6:79:8a:6c:
55:44:f5:41:07:79:72:5d:5b:c5:55:4c:8b:55:e0:
54:7d:98:cb:4a:b4:ba:07:39:35:81:01:c6:29:4e:
60:ec:fc:e0:94:8e:3c:b5:d2:e8:1b:47:8e:b4:90:
a5:9d:b1:7b:e9:16:db:21:9b:41:e7:91:ff:2c:12:
ea:63:aa:65:39:25:01:a6:11:85:31:51:a0:60:e9:
b5:ff:15:b3:b1:23:38:22:17:30:b6:ee:41:62:8f:
51:ce:d2:12:dd:ca:a6:18:7c:a5:a4:e4:d4:e1:fd:
74:7b:12:10:8f:67:23:19:fb:43:5c:1f:10:1c:19:
37:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CE:EE:A2:95:F4:64:6D:2A:54:57:39:9A:FD:B9:D5:96:39:85:36
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ic7uopX0ZG0qVFc5mv251ZY5hTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.220.0/24
151.243.150.0/24
151.243.228.0/24
151.243.243.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:13:f6:72:b3:8d:2c:3e:87:e5:f7:44:49:6d:f4:88:34:22:
41:cc:c8:d9:16:33:fd:65:cc:b7:42:10:87:96:02:74:ac:3e:
1c:50:15:aa:1e:26:6f:7b:9a:51:e7:8f:ec:97:0c:84:97:08:
38:c2:8e:02:cb:dc:cb:25:25:6b:85:e3:17:40:16:7a:27:f3:
4f:a3:ac:a8:f5:29:cb:4e:ce:58:01:45:cb:46:73:1d:61:86:
11:0b:61:bd:44:d5:ad:eb:75:b3:70:7f:81:32:3e:48:66:63:
f3:63:a5:c4:36:be:8d:bd:56:d6:9b:68:c0:22:06:0a:e6:26:
fa:55:62:fe:03:aa:87:de:a0:ed:0f:ab:99:20:d1:27:4a:50:
c9:6d:00:68:c3:28:cd:3b:2b:1d:50:1d:94:92:91:c4:25:83:
c3:5f:64:4d:49:b3:a1:a1:02:39:c4:17:cc:1d:0d:03:2a:35:
b4:3b:1f:5a:b1:e1:50:7e:5a:cf:ba:c7:c5:49:7a:7e:22:6a:
2c:7b:1f:cd:70:49:51:70:a5:21:cc:1d:97:75:ed:e0:61:d8:
86:0f:d9:c0:90:59:09:91:59:7b:91:6b:66:8e:b3:9d:72:ef:
51:64:6f:34:03:46:b6:de:87:c4:15:e9:68:89:a5:5b:12:d8:
05:0d:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:57 2025 by rpki-client