Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RMaXFw7MRRClqMx4udH8sQOy6cY.roa
File: RMaXFw7MRRClqMx4udH8sQOy6cY.roa (raw, json)
Hash identifier: 74jIe90HPBMhMoPhBYY88tW2QmX/qsbE1DbFXptdWNQ=
Subject key identifier: 44:C6:97:17:0E:CC:45:10:A5:A8:CC:78:B9:D1:FC:B1:03:B2:E9:C6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01941B8D17CC4FD14752F9CBE5C738BA5DEB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RMaXFw7MRRClqMx4udH8sQOy6cY.roa
Signing time: Tue 31 Dec 2024 07:10:18 +0000
ROA not before: Tue 31 Dec 2024 07:10:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.243.137.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1b:8d:17:cc:4f:d1:47:52:f9:cb:e5:c7:38:ba:5d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 31 07:10:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44c697170ecc4510a5a8cc78b9d1fcb103b2e9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f2:79:13:ab:43:9a:04:d1:92:fd:a5:f1:87:
d6:5a:a5:ad:76:94:7f:e5:07:42:20:b5:57:6e:8c:
cc:58:76:79:74:36:23:6d:c3:f2:81:ea:5b:50:a5:
7d:fb:ab:ea:8b:d3:f8:e4:3d:65:bc:f2:74:26:fd:
1a:2c:d6:c2:3f:eb:be:40:31:fd:6b:85:e1:9b:bb:
69:2f:a9:2f:ad:77:40:72:66:61:22:60:e7:c3:4e:
8a:84:54:a7:a6:b5:fc:ec:bf:dc:0a:77:98:12:20:
47:a9:e2:ba:94:4f:20:8a:ff:9a:58:f4:db:c5:2e:
b1:72:e3:75:1b:66:60:4e:56:4e:2c:4b:67:f5:04:
a8:d0:3d:50:2c:5c:70:34:f2:3c:57:85:48:9f:fc:
7d:93:bd:6e:32:05:c5:e8:b8:5a:ed:23:70:bb:9c:
9f:37:50:b6:c2:05:10:c4:80:a1:93:59:4d:84:5c:
11:4b:cc:09:f9:c4:8e:ff:4f:b2:29:43:0a:a7:49:
f0:16:10:27:39:80:8d:f1:83:8d:bb:af:5f:0e:f0:
cd:3a:d8:7d:26:87:74:a2:54:68:45:17:00:70:ef:
23:7e:33:eb:33:f4:4a:19:1f:b8:91:45:a6:3d:75:
be:72:bd:5e:2b:31:e5:01:d5:da:38:f7:e8:36:70:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C6:97:17:0E:CC:45:10:A5:A8:CC:78:B9:D1:FC:B1:03:B2:E9:C6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RMaXFw7MRRClqMx4udH8sQOy6cY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
151.242.14.0/24
151.242.20.0/24
151.243.137.0/24
151.243.162.0/24
Signature Algorithm: sha256WithRSAEncryption
83:03:6c:f3:03:62:24:6c:8e:74:aa:f3:ac:3f:cf:3b:a4:23:
3a:6b:45:1f:25:7f:ae:a3:2c:e9:e2:62:8a:c7:e2:a7:48:bf:
b4:91:ec:74:2e:59:9c:81:cc:bd:a4:07:9c:09:cd:13:d9:4b:
70:a7:b1:37:d3:c3:7f:45:40:15:e8:37:e0:06:aa:8e:6e:2b:
e1:2d:52:c0:a4:50:fc:ba:98:db:b8:c3:c6:ff:93:7e:da:b6:
cf:9f:87:f9:52:8c:c7:b2:87:6d:ec:d9:bf:67:00:50:00:39:
80:d1:cc:53:0b:49:0c:59:e6:fd:e7:0b:96:70:83:d3:77:ff:
8d:a0:1b:47:44:e3:91:65:f9:c9:27:48:94:46:57:7f:71:11:
a3:fe:83:e3:89:04:35:a2:ee:88:c9:a1:57:af:a6:ff:fd:59:
b4:8e:41:22:13:2f:b4:70:23:30:3c:2d:44:89:61:a3:06:d9:
c2:69:42:4a:7a:b8:ff:32:b0:18:06:64:54:06:a6:e9:32:30:
93:3f:37:f8:82:23:0e:13:1a:d9:af:da:13:25:ee:b1:35:7c:
54:7a:41:8f:9d:3f:d2:d6:fb:f0:77:6d:2c:7e:f2:f6:dd:9a:
42:03:83:9e:a6:71:31:d6:7a:f8:91:3b:5b:82:c2:c0:62:b2:
e5:0b:c4:9a
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZQbjRfMT9FHUvnL5cc4ul3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjQxMjMxMDcxMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGM2OTcxNzBlY2M0NTEwYTVhOGNjNzhiOWQxZmNiMTAzYjJlOWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vJ5E6tDmgTRkv2l8YfWWqWtdpR/
5QdCILVXbozMWHZ5dDYjbcPygepbUKV9+6vqi9P45D1lvPJ0Jv0aLNbCP+u+QDH9
a4Xhm7tpL6kvrXdAcmZhImDnw06KhFSnprX87L/cCneYEiBHqeK6lE8giv+aWPTb
xS6xcuN1G2ZgTlZOLEtn9QSo0D1QLFxwNPI8V4VIn/x9k71uMgXF6Lha7SNwu5yf
N1C2wgUQxIChk1lNhFwRS8wJ+cSO/0+yKUMKp0nwFhAnOYCN8YONu69fDvDNOth9
Jod0olRoRRcAcO8jfjPrM/RKGR+4kUWmPXW+cr1eKzHlAdXaOPfoNnDlPwIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFETGlxcOzEUQpajMeLnR/LEDsunGMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUk1hWEZ3N01SUkNscU14NHVkSDhzUU95NmNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAJcrNMAwD
BAQlytADBAAlytIDBAElytQDBACX8g4DBACX8hQDBACX84kDBACX86IwDQYJKoZI
hvcNAQELBQADggEBAIMDbPMDYiRsjnSq86w/zzukIzprRR8lf66jLOniYorH4qdI
v7SR7HQuWZyBzL2kB5wJzRPZS3CnsTfTw39FQBXoN+AGqo5uK+EtUsCkUPy6mNu4
w8b/k37ats+fh/lSjMeyh23s2b9nAFAAOYDRzFMLSQxZ5v3nC5Zwg9N3/42gG0dE
45Fl+cknSJRGV39xEaP+g+OJBDWi7ojJoVevpv/9WbSOQSITL7RwIzA8LUSJYaMG
2cJpQkp6uP8ysBgGZFQGpukyMJM/N/iCIw4TGtmv2hMl7rE1fFR6QY+dP9LW+/B3
bSx+8vbdmkIDg56mcTHWeviRO1uCwsBisuULxJo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:06 2025 by rpki-client