Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/M_f84w5lN92PCmCUk7YCpfK0tjQ.roa
File: M_f84w5lN92PCmCUk7YCpfK0tjQ.roa (raw, json)
Hash identifier: Yd3AFOYiDT5S+sywGVJQaTdsC8rNfCpSoZHQlBmVeRs=
Subject key identifier: 33:F7:FC:E3:0E:65:37:DD:8F:0A:60:94:93:B6:02:A5:F2:B4:B6:34
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019710537C1CB02D04FA201FE849F14E2587
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/M_f84w5lN92PCmCUk7YCpfK0tjQ.roa
Signing time: Tue 27 May 2025 05:59:56 +0000
ROA not before: Tue 27 May 2025 05:59:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 37.202.203.0/24 maxlen: 24
151.240.1.0/24 maxlen: 24
151.240.9.0/24 maxlen: 24
151.240.10.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.242.202.0/23 maxlen: 23
151.243.52.0/23 maxlen: 23
151.243.206.0/23 maxlen: 23
151.243.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 10:42:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:53:7c:1c:b0:2d:04:fa:20:1f:e8:49:f1:4e:25:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 27 05:59:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33f7fce30e6537dd8f0a609493b602a5f2b4b634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3d:57:bc:e5:c7:05:05:c1:b2:6d:7f:00:d3:
03:aa:cb:6d:c7:49:60:fe:08:b1:a0:f5:ef:bb:67:
4a:94:94:ab:b6:67:95:bb:c2:18:99:a3:1f:42:83:
d9:e7:ad:f4:96:93:e1:ce:d7:48:46:9e:ba:60:04:
39:9f:8b:8f:13:fa:c0:ed:a1:24:84:7f:3f:16:2b:
26:1c:41:33:db:63:a9:88:81:9f:59:be:5a:39:84:
96:29:94:47:6a:38:7d:a7:0e:7e:61:2f:56:96:2d:
19:e6:4e:a1:f1:e5:ac:97:91:96:e7:e8:92:21:c3:
30:df:b7:ea:72:bf:b1:63:89:ae:9a:45:6a:6e:e7:
4a:7f:dd:6f:1b:a5:dd:08:0a:d0:11:37:99:6d:75:
10:82:00:ea:f1:22:b9:b4:43:4a:b3:20:fb:a0:0a:
ea:56:7a:c9:e0:c7:24:ef:99:0a:a2:8b:46:dd:80:
f8:71:27:ec:2b:22:ca:56:5e:30:4c:6a:35:20:f0:
40:4d:e5:2a:06:8e:c2:ee:5f:ad:b3:16:f3:34:1b:
95:4a:b3:6c:82:5d:58:cc:13:83:a4:f6:39:eb:36:
b4:83:de:5b:65:2f:59:d3:66:24:0c:c7:90:28:0d:
0d:d4:b2:f7:87:6c:4b:c2:fc:b0:df:d3:9d:7e:ea:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F7:FC:E3:0E:65:37:DD:8F:0A:60:94:93:B6:02:A5:F2:B4:B6:34
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/M_f84w5lN92PCmCUk7YCpfK0tjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
151.240.1.0/24
151.240.9.0-151.240.10.255
151.240.77.0/24
151.241.18.0/24
151.242.202.0/23
151.243.52.0/23
151.243.206.0/23
151.243.217.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:37:39:66:39:20:77:21:7e:93:40:da:16:5e:26:98:f1:85:
a0:13:7a:c5:da:27:13:97:06:d5:eb:f1:c3:c7:3b:f9:08:cd:
bb:48:c9:70:69:ba:0b:4c:7d:1d:34:e8:0b:1b:1c:b0:86:6b:
0a:ed:b0:44:da:8e:54:e3:7a:f1:69:00:e7:f8:a7:d7:15:95:
4d:0d:d6:0b:35:84:b8:a9:b4:a9:e9:3c:d3:39:5b:a3:3a:d3:
56:2c:1a:d8:a4:1a:28:8f:4b:ec:05:bc:f6:aa:d3:e2:6f:e1:
70:f9:09:21:fc:12:53:29:dd:e6:a9:f9:74:fc:2a:56:bd:6d:
79:2b:2c:dd:3f:65:84:13:48:74:72:42:9c:5b:e0:65:f8:fa:
b5:bb:28:14:b3:23:bc:cf:4e:9e:95:78:e1:93:38:e2:b2:76:
bc:08:27:74:fd:7e:df:9e:64:93:42:bb:ae:a0:56:f2:70:6d:
25:55:73:4c:a9:88:31:6c:de:3c:52:37:e5:82:4c:48:80:77:
49:2a:07:b1:1a:ca:46:30:0a:d4:85:43:ec:12:74:66:4b:2d:
6a:13:58:71:06:dc:d3:61:55:7e:4a:ca:80:e3:d4:c1:84:ad:
4c:ff:d7:44:df:31:5f:4a:19:26:7e:2c:6f:3b:cc:21:08:ff:
c4:42:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:56:32 2025 by rpki-client