Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QD352l93FcEFeJXwTxkcBziFCbo.roa
File: QD352l93FcEFeJXwTxkcBziFCbo.roa (raw, json)
Hash identifier: nfCQakKaq2cBgxxswwUcNLOy9zTcT57OOXGm6atZ0fg=
Subject key identifier: 40:3D:F9:DA:5F:77:15:C1:05:78:95:F0:4F:19:1C:07:38:85:09:BA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01955A5D9F9982806CF1247197CE484F3875
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QD352l93FcEFeJXwTxkcBziFCbo.roa
Signing time: Mon 03 Mar 2025 04:57:19 +0000
ROA not before: Mon 03 Mar 2025 04:57:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.105.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.83.0/24 maxlen: 24
151.243.104.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.212.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 07:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5a:5d:9f:99:82:80:6c:f1:24:71:97:ce:48:4f:38:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 3 04:57:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=403df9da5f7715c1057895f04f191c07388509ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:39:17:4b:7d:c5:61:b0:72:f4:ec:95:00:
63:77:ac:22:1a:c1:7c:90:77:ab:58:4a:f0:da:10:
9a:d4:ea:3c:1b:fd:14:a3:fd:6a:09:5a:72:cc:7c:
3d:7a:d5:fc:f9:ad:2d:51:6a:30:71:be:5d:ef:d5:
82:d4:dd:37:21:e6:7d:56:a0:ec:df:aa:68:f4:5b:
d0:f8:fa:4c:83:b6:88:28:49:0c:e1:0b:8b:db:ba:
67:d7:77:ae:5a:8b:a0:62:34:c9:be:bb:03:39:77:
8b:da:47:08:d6:f4:7b:af:56:31:5c:85:5c:84:f5:
e0:eb:16:20:b1:ea:eb:71:13:b0:0b:43:10:a4:b1:
c8:74:bb:27:af:3e:6a:b4:00:3e:0d:9a:3e:de:2c:
ab:78:70:3a:24:d4:06:df:d5:85:e2:be:8f:ef:49:
9e:54:4c:79:f5:c1:08:5b:0e:57:93:bb:87:02:43:
5a:35:af:76:bd:46:71:24:51:e5:51:61:46:25:11:
e3:83:9e:89:7c:67:a7:21:f5:47:19:bb:d3:54:b8:
9a:82:80:70:e1:dd:cb:45:c3:91:74:08:65:16:88:
26:c4:55:50:5a:2f:e2:62:44:e5:32:1e:f4:33:e9:
3d:b8:9d:cd:db:f9:4d:26:17:70:92:16:2f:2a:1c:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3D:F9:DA:5F:77:15:C1:05:78:95:F0:4F:19:1C:07:38:85:09:BA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QD352l93FcEFeJXwTxkcBziFCbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.210.0/24
37.202.212.0/23
151.240.105.0/24
151.240.140.0/24
151.241.110.0/24
151.242.14.0/24
151.242.20.0/24
151.242.192.0/20
151.242.242.0/24
151.243.83.0/24
151.243.104.0/24
151.243.158.0/24
151.243.162.0/24
151.243.212.0/23
Signature Algorithm: sha256WithRSAEncryption
32:05:4f:e4:b0:00:61:f3:db:37:ea:6d:ce:26:f8:99:27:29:
8c:08:1b:39:eb:e2:ff:de:75:67:26:a3:7d:2f:03:b2:0b:89:
8a:42:9d:ad:88:16:18:bc:15:fd:2f:38:97:b1:ea:6b:c4:e2:
19:b1:c8:27:ab:4f:05:2c:34:dc:d5:40:34:6f:31:b4:69:bb:
63:d5:3c:2f:c5:0a:d5:d9:83:6e:a4:82:b5:0c:21:de:7c:7f:
50:9d:f6:37:33:59:ef:56:d6:9e:00:7e:2e:80:44:dc:a0:ae:
c1:4c:98:94:8b:11:6f:1a:5b:bb:7f:2e:39:5d:e2:1a:5f:25:
4a:83:a5:26:4d:fd:07:65:b3:cc:06:e0:c7:e9:ad:29:b4:2f:
03:14:8f:1a:56:ba:f8:74:f7:71:fc:35:46:36:49:68:30:d6:
dc:b0:af:9a:da:d0:a2:91:2c:83:67:d7:94:f9:a7:9d:e9:34:
a3:aa:7c:ba:6d:bf:71:43:39:c3:b5:de:80:97:8a:8a:1c:0d:
2b:3e:35:c3:a2:a5:15:29:c3:03:dd:65:c4:1a:50:19:ce:c4:
cc:3d:58:d3:14:ae:12:f1:37:02:1f:bd:73:ac:ed:cb:bf:15:
4e:c1:b9:cc:e3:05:85:9a:30:52:fc:87:39:44:c0:a5:47:45:
cd:a5:4f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:30:22 2025 by rpki-client