Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LIe4jcjzgEBM1pjdWQ8i34bLGOI.roa
File: LIe4jcjzgEBM1pjdWQ8i34bLGOI.roa (raw, json)
Hash identifier: ySbafN+XBQFP91NRrEfz2U34SPzX/Q8to5xdGmB9R5o=
Subject key identifier: 2C:87:B8:8D:C8:F3:80:40:4C:D6:98:DD:59:0F:22:DF:86:CB:18:E2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01951C66048898C24490C42ED30E5EACC261
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LIe4jcjzgEBM1pjdWQ8i34bLGOI.roa
Signing time: Wed 19 Feb 2025 04:10:02 +0000
ROA not before: Wed 19 Feb 2025 04:10:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.202.0/24 maxlen: 24
151.242.67.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Feb 2025 04:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1c:66:04:88:98:c2:44:90:c4:2e:d3:0e:5e:ac:c2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 19 04:10:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c87b88dc8f380404cd698dd590f22df86cb18e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:f4:a2:b9:9a:bb:f8:51:74:85:2d:b0:1d:
7f:70:aa:d7:f5:8c:58:4a:f8:16:a9:af:8f:73:92:
02:38:39:01:88:0e:d3:e7:d4:be:1e:83:03:64:e0:
dc:74:6e:60:6e:1e:8c:07:31:a0:2a:8b:b6:de:ba:
27:f5:db:82:55:f9:46:f1:39:a2:43:60:f0:4e:1f:
64:e2:82:4f:93:9c:af:23:e3:99:0a:dd:5d:9e:2f:
41:cc:a8:8b:d7:71:be:9a:ed:74:f4:f9:35:91:f5:
5c:eb:49:f9:8d:52:56:34:c8:f5:d6:8f:e0:eb:a6:
b7:ae:19:f7:75:fd:c9:28:84:b8:67:24:1c:4a:c0:
40:7f:4b:fc:87:8f:f5:08:ef:9e:91:dc:ed:f6:8b:
3c:ba:f4:1e:bb:96:2a:85:51:0f:7f:33:82:e8:0a:
5b:d4:ac:6b:5d:ce:4c:a4:1c:cc:58:b1:2d:c8:1c:
c8:b2:a3:36:96:c9:08:27:22:b7:8d:37:d9:e5:7c:
5d:6d:0d:fd:b6:94:93:8d:75:a7:a0:b3:24:3e:37:
e4:fc:a2:2c:0c:41:04:3f:bd:2d:55:c9:73:73:13:
37:80:5d:23:1a:5b:70:5e:59:ed:4d:e4:64:54:3d:
58:f9:72:bf:83:c6:f9:52:ed:2e:44:8f:aa:7c:e7:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:87:B8:8D:C8:F3:80:40:4C:D6:98:DD:59:0F:22:DF:86:CB:18:E2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LIe4jcjzgEBM1pjdWQ8i34bLGOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.242.67.0/24
151.242.117.0/24
151.243.6.0/24
151.243.129.0/24
Signature Algorithm: sha256WithRSAEncryption
18:2c:55:a6:20:94:d2:54:fc:04:1e:71:3e:51:37:bf:1f:8b:
ab:26:9a:77:e2:93:21:b6:87:65:1d:de:d4:e2:ae:42:61:c9:
25:9f:19:03:e6:23:be:32:5f:49:a3:79:77:ea:00:c2:c4:a4:
0f:99:81:73:1c:2b:36:8f:bf:18:6d:2c:07:dd:0e:8b:b0:44:
7a:e5:11:6f:5a:eb:d9:26:9f:99:ee:f3:fb:8c:9b:1d:6d:8f:
50:b7:65:a8:e5:5c:5d:d7:89:0e:e7:00:44:3f:76:19:51:2e:
21:a7:70:5a:56:d8:8c:fa:95:9b:b7:a3:f6:93:b8:8c:82:1f:
65:fe:e2:41:ea:ec:fa:eb:88:a2:aa:1d:fe:30:a0:5f:03:af:
fc:06:69:23:ea:2e:0f:19:4f:10:c3:aa:68:45:38:50:b1:63:
e1:f5:e1:ea:16:16:ef:e4:3b:84:b9:9a:76:5c:96:bf:5a:23:
56:b6:78:e9:a8:88:69:39:6f:17:e5:70:7d:be:bb:38:e3:7b:
e3:ba:5b:20:d6:ec:54:4f:b2:a6:20:1f:0c:82:1c:dd:f8:1e:
68:a2:67:9c:5e:da:92:42:ca:63:c3:bf:b4:80:0f:03:29:12:
ab:ac:31:13:f7:13:1a:8d:92:d4:7e:26:f0:a3:6c:1c:b1:38:
4e:ca:78:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:17:31 2025 by rpki-client