Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K0l2Hy372Zhpqy6hEDgShd-lbxs.roa
File: K0l2Hy372Zhpqy6hEDgShd-lbxs.roa (raw, json)
Hash identifier: sH3a3TqgDB8yvEArrEzope5JQ6gTd+P+7twLDS9zRHg=
Subject key identifier: 2B:49:76:1F:2D:FB:D9:98:69:AB:2E:A1:10:38:12:85:DF:A5:6F:1B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01954D70EB9DE5F8FC525C77F6C625783A26
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K0l2Hy372Zhpqy6hEDgShd-lbxs.roa
Signing time: Fri 28 Feb 2025 16:43:20 +0000
ROA not before: Fri 28 Feb 2025 16:43:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13347
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.246.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.249.0/24 maxlen: 24
151.243.250.0/24 maxlen: 24
151.243.251.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
151.243.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Mar 2025 09:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:70:eb:9d:e5:f8:fc:52:5c:77:f6:c6:25:78:3a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 28 16:43:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b49761f2dfbd99869ab2ea110381285dfa56f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5c:07:b2:57:1d:81:82:3b:a4:9c:de:19:31:
c6:ab:f7:15:03:4b:f1:c2:48:41:32:9d:fb:3d:a2:
50:76:c0:83:da:da:90:ac:e7:a7:89:e8:74:8a:bf:
77:d5:a3:9d:1e:2e:20:dd:ab:35:b5:83:d1:20:e6:
74:df:c9:47:38:2b:6b:f8:89:92:8a:f1:6c:70:34:
83:ad:e3:ed:e2:dc:da:12:63:c0:6f:d3:0b:60:67:
fe:fa:7a:8c:d3:27:64:9e:c6:d9:25:39:d9:52:7a:
c6:15:d9:0b:11:c2:66:03:2b:80:ba:59:a3:6f:e2:
ba:57:9b:65:a1:c8:60:37:76:42:f6:38:21:e4:3b:
fb:66:32:18:3d:a2:8f:fe:6f:1c:6a:7c:9b:da:7e:
f7:68:49:38:1f:c8:64:c0:7b:ab:93:9a:a8:86:5f:
ac:e3:e0:11:51:99:ac:22:90:fc:ed:a1:30:ba:9c:
c7:f6:20:5d:75:65:f3:3a:6f:45:13:69:be:69:a7:
0f:8d:01:98:6f:57:5f:4c:35:6b:99:64:78:3b:a4:
53:01:ea:0c:67:c0:26:01:ca:4c:6b:6d:ea:06:22:
0b:50:45:ee:c2:18:f4:d7:fd:b6:76:8e:d0:3c:49:
e9:1c:18:76:b1:50:0f:00:c1:dc:4b:0e:66:21:83:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:49:76:1F:2D:FB:D9:98:69:AB:2E:A1:10:38:12:85:DF:A5:6F:1B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K0l2Hy372Zhpqy6hEDgShd-lbxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
151.242.192.0/20
151.243.16.0/20
151.243.246.0-151.243.253.255
Signature Algorithm: sha256WithRSAEncryption
46:b6:db:eb:75:39:d4:d3:b3:65:48:7a:c6:00:9d:c4:30:80:
8b:81:22:d4:93:68:2d:4b:86:a7:c0:65:52:4b:3a:fb:21:f8:
7e:04:ab:81:af:81:8a:aa:99:f5:d0:8b:80:76:e4:27:44:f1:
f2:ad:a7:44:f8:65:07:c3:d8:92:a0:81:2a:6a:c8:88:ed:ac:
83:8f:4c:33:13:13:99:8a:8e:3b:93:c6:12:7b:c0:27:1b:35:
2f:c5:8b:2f:bc:f7:c2:2d:5a:50:6e:8e:89:91:1d:f3:16:1b:
e9:61:9e:1d:8f:b7:90:cc:a8:18:34:9c:f6:f2:19:c3:d8:2b:
17:9b:c8:e7:bc:5a:23:27:9d:93:b6:dc:6b:c0:27:15:3f:be:
5b:0b:bc:66:e9:9b:14:23:dd:3e:a9:0f:c5:8a:62:2e:b4:b5:
57:67:67:ce:48:e7:59:96:8e:8b:5a:4d:1e:1c:49:2c:78:8e:
c2:f7:8e:79:1c:00:02:c4:da:ee:96:ad:9b:31:9a:16:10:d2:
6f:c2:74:cf:33:66:fe:c6:88:09:06:23:a7:a5:3a:3f:48:b2:
f2:40:b1:fb:16:cb:24:76:c4:c0:96:5d:9d:7b:c9:1d:55:08:
67:c7:ec:16:e2:a0:6b:1e:eb:2a:fa:5a:0a:97:87:9c:bc:1a:
39:f3:72:d3
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZVNcOud5fj8Ulx39sYleDomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMjI4MTY0MzIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjQ5NzYxZjJkZmJkOTk4NjlhYjJlYTExMDM4MTI4NWRmYTU2ZjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1wHslcdgYI7pJzeGTHGq/cVA0vx
wkhBMp37PaJQdsCD2tqQrOenieh0ir931aOdHi4g3as1tYPRIOZ038lHOCtr+ImS
ivFscDSDrePt4tzaEmPAb9MLYGf++nqM0ydknsbZJTnZUnrGFdkLEcJmAyuAulmj
b+K6V5tlochgN3ZC9jgh5Dv7ZjIYPaKP/m8canyb2n73aEk4H8hkwHurk5qohl+s
4+ARUZmsIpD87aEwupzH9iBddWXzOm9FE2m+aacPjQGYb1dfTDVrmWR4O6RTAeoM
Z8AmAcpMa23qBiILUEXuwhj01/22do7QPEnpHBh2sVAPAMHcSw5mIYNAcwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFCtJdh8t+9mYaasuoRA4EoXfpW8bMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvSzBsMkh5MzcyWmhwcXk2aEVEZ1NoZC1sYnhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAJcrBMAwD
BAAlysMDBAElysgDBASX8sADBASX8xAwDAMEAZfz9gMEAZfz/DANBgkqhkiG9w0B
AQsFAAOCAQEARrbb63U51NOzZUh6xgCdxDCAi4Ei1JNoLUuGp8BlUks6+yH4fgSr
ga+BiqqZ9dCLgHbkJ0Tx8q2nRPhlB8PYkqCBKmrIiO2sg49MMxMTmYqOO5PGEnvA
Jxs1L8WLL7z3wi1aUG6OiZEd8xYb6WGeHY+3kMyoGDSc9vIZw9grF5vI57xaIyed
k7bca8AnFT++Wwu8ZumbFCPdPqkPxYpiLrS1V2dnzkjnWZaOi1pNHhxJLHiOwveO
eRwAAsTa7patmzGaFhDSb8J0zzNm/saICQYjp6U6P0iy8kCx+xbLJHbEwJZdnXvJ
HVUIZ8fsFuKgax7rKvpaCpeHnLwaOfNy0w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:36 2025 by rpki-client