Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OOwaMKGltXdA4QA1pTXuyDf7Eug.roa
File: OOwaMKGltXdA4QA1pTXuyDf7Eug.roa (raw, json)
Hash identifier: 7esNy2HWsBegNg9cLj55wnyZuVFJ0TTOFdqcoQipoH8=
Subject key identifier: 38:EC:1A:30:A1:A5:B5:77:40:E1:00:35:A5:35:EE:C8:37:FB:12:E8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019593C7F4B26D1E6AD829630A1CCDE09CBC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OOwaMKGltXdA4QA1pTXuyDf7Eug.roa
Signing time: Fri 14 Mar 2025 08:31:49 +0000
ROA not before: Fri 14 Mar 2025 08:31:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211750
IP address blocks: 37.202.223.0/24 maxlen: 24
151.243.36.0/24 maxlen: 24
151.243.126.0/24 maxlen: 24
151.243.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Mar 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:93:c7:f4:b2:6d:1e:6a:d8:29:63:0a:1c:cd:e0:9c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 14 08:31:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38ec1a30a1a5b57740e10035a535eec837fb12e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:4e:e1:22:a7:fa:a6:4c:56:95:dd:1f:5d:
ff:8a:ee:41:07:11:12:82:ea:a2:fc:3b:54:ca:b7:
c8:17:03:d6:05:2e:ef:d5:3f:16:c8:93:55:0d:7b:
ef:77:9b:ee:24:4c:5a:27:f3:5c:1a:0a:b5:e1:7f:
2a:33:19:f5:a0:e6:c8:5c:14:65:02:24:e4:bb:57:
03:e8:5a:b8:bc:c5:d4:0e:10:60:db:94:28:f2:45:
47:04:7c:34:ec:68:d6:49:ff:e9:ad:10:a3:81:a1:
a3:eb:90:21:2c:24:18:0c:5a:82:13:4c:e6:13:d1:
7a:25:a9:48:41:f7:ad:a9:58:fe:c0:b6:42:21:d0:
af:06:18:4e:b9:06:bf:09:d9:24:1d:58:5e:91:6b:
9d:55:d8:3c:f5:dd:95:3e:e3:fa:81:5c:7b:6d:34:
35:88:e1:d6:12:2f:0f:e2:0d:52:cf:4d:94:3a:87:
2b:ff:b6:d8:21:5c:f8:3d:5a:90:17:3a:ab:db:f3:
86:5b:17:62:40:04:89:5d:5a:ff:b8:d9:79:20:6d:
02:57:51:23:58:36:7b:e5:ed:e7:d5:cf:2d:89:e8:
5f:91:97:ab:4c:81:94:47:0d:58:19:7f:d7:27:24:
3d:cd:5a:6a:b6:29:51:d1:68:9e:76:08:c9:2e:cb:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EC:1A:30:A1:A5:B5:77:40:E1:00:35:A5:35:EE:C8:37:FB:12:E8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OOwaMKGltXdA4QA1pTXuyDf7Eug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.243.36.0/24
151.243.126.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:10:f6:d0:12:6b:aa:62:57:bc:d6:93:0a:3c:e3:11:e2:35:
d3:c9:76:f1:e5:cf:17:03:d0:0b:05:48:2d:6c:4f:87:ce:6e:
c3:15:0f:ab:bf:b4:1f:66:31:85:72:cc:54:b6:23:50:96:16:
aa:c4:af:62:8f:3b:1e:a5:34:bc:11:02:61:61:5b:6c:99:7b:
c6:30:55:d0:af:38:27:6d:a0:69:9c:fc:f7:fe:95:cd:6f:c3:
96:b9:8e:19:40:0b:34:b6:70:57:60:72:93:d0:bc:19:a2:ec:
ef:12:ad:8c:6c:6b:1a:9c:ce:7e:27:0e:fc:ad:87:20:a6:bb:
71:74:1c:61:ec:b1:03:e7:d0:66:c1:ff:cb:b4:5b:84:44:f8:
af:6f:5f:cf:fc:78:9f:71:ff:ef:15:0b:dd:bf:77:e0:a1:62:
4d:e5:65:2e:45:9c:90:4b:5e:62:ba:a3:8a:24:ff:4d:38:6b:
d3:d1:4b:ac:0d:c9:6c:7b:2e:f4:5b:58:4c:41:0d:f3:39:e8:
ea:bf:be:c4:3f:e1:8d:c4:f8:d7:38:4a:33:c0:e2:fc:39:06:
a2:58:4e:e6:32:a3:6e:44:02:ac:11:1e:22:21:53:bd:e7:bf:
52:53:ed:01:a4:da:b0:b8:fc:16:ac:30:8e:fe:8e:a9:be:e4:
6c:96:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 20:05:38 2025 by rpki-client