Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RSwAEJg4tNpPeq2_hwRU1ghVGJM.roa
File: RSwAEJg4tNpPeq2_hwRU1ghVGJM.roa (raw, json)
Hash identifier: KInJbkND1GpkbJc04esHdWvl/cK1TbKUVywQW2Uh3RY=
Subject key identifier: 45:2C:00:10:98:38:B4:DA:4F:7A:AD:BF:87:04:54:D6:08:55:18:93
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196BDC86CD3F4D507E18A2CA5BF7686551C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RSwAEJg4tNpPeq2_hwRU1ghVGJM.roa
Signing time: Sun 11 May 2025 05:19:10 +0000
ROA not before: Sun 11 May 2025 05:19:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57043
IP address blocks: 37.202.203.0/24 maxlen: 24
151.240.0.0/24 maxlen: 24
151.240.1.0/24 maxlen: 24
151.240.8.0/24 maxlen: 24
151.240.9.0/24 maxlen: 24
151.240.10.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.243.206.0/23 maxlen: 23
151.243.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 May 2025 10:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:c8:6c:d3:f4:d5:07:e1:8a:2c:a5:bf:76:86:55:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 11 05:19:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=452c00109838b4da4f7aadbf870454d608551893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:5a:69:6d:4a:38:37:05:e9:d5:93:1a:99:
c2:53:4b:1f:86:c3:98:a3:0c:06:2c:da:8a:1a:95:
d1:a6:f8:21:04:51:22:3d:81:c0:6e:9c:db:85:b5:
3e:d3:6a:03:e3:15:17:d4:95:14:a2:49:ef:53:8e:
7d:2b:ec:a7:f8:e7:d2:c1:08:94:46:00:dd:02:36:
38:ef:17:d9:57:7b:d8:84:bd:0b:3b:85:f8:ad:0b:
9c:d8:c9:5f:9f:a0:e9:81:f5:76:14:51:a1:9c:d2:
13:0c:97:97:d4:5f:19:05:84:dc:76:8e:3b:28:61:
95:06:c0:08:53:b8:63:58:e1:de:26:15:fc:d9:1e:
0e:c2:bb:b6:13:3b:00:11:9e:7b:36:3e:0e:6a:8a:
f5:47:b7:2b:5d:8e:4e:2c:27:37:40:ca:9a:e3:5f:
a5:b4:4f:7c:d7:16:cf:c2:7f:ec:92:e6:a0:f2:6c:
8d:bf:24:cc:90:46:9b:97:32:42:b5:5e:04:ed:a2:
33:bd:5a:7c:81:52:81:17:a9:48:b7:dc:a3:83:81:
b0:08:fe:3e:ac:c4:65:a5:cf:c7:88:4d:4e:c4:2c:
54:40:8f:5b:29:32:d2:eb:91:f2:97:77:38:b7:b2:
9f:db:95:4c:12:9e:e1:b7:11:f5:c4:c4:0f:01:64:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2C:00:10:98:38:B4:DA:4F:7A:AD:BF:87:04:54:D6:08:55:18:93
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RSwAEJg4tNpPeq2_hwRU1ghVGJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
151.240.0.0/23
151.240.8.0-151.240.10.255
151.240.77.0/24
151.241.18.0/24
151.243.206.0/23
151.243.217.0/24
Signature Algorithm: sha256WithRSAEncryption
88:02:fc:f5:12:1d:7b:c8:63:cf:43:5c:f2:fe:1a:11:00:19:
95:4f:78:64:8d:ad:44:df:5d:7f:f7:cb:0b:1e:82:4d:a6:e7:
73:6f:a8:b5:06:ae:48:58:3b:ab:69:c9:77:e4:dd:32:b5:3f:
13:4e:df:96:8b:a4:70:bf:08:e2:2b:1b:1f:04:9b:35:f9:d5:
ec:60:65:96:25:87:7c:7d:14:80:9f:23:85:df:d0:c8:bf:07:
3f:78:19:51:a0:30:04:15:0f:26:9d:c7:a2:57:7e:e4:7a:48:
ff:d9:1e:d1:be:99:ac:29:94:85:9f:21:70:6d:0e:57:10:5f:
08:d6:59:e0:03:2e:fa:1f:6a:43:3c:52:f0:04:5f:ee:9f:01:
be:ea:6a:58:06:0a:9a:1f:41:32:24:03:25:cb:a2:2a:98:58:
86:a2:67:28:38:0b:51:3e:ff:25:aa:76:c3:51:d2:29:3e:ee:
25:af:40:49:7c:6d:05:c3:54:c3:60:02:98:f9:21:3d:ea:0f:
1c:49:3b:3a:ec:7b:1c:60:52:d1:ab:5f:fd:02:dd:d6:a9:cb:
ec:64:9e:97:50:6d:c4:20:1f:fc:cc:a4:84:4f:96:26:48:fa:
da:c3:6f:05:a5:24:11:53:ae:fa:f5:f1:ca:c6:04:0e:15:82:
65:46:85:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:14:05 2025 by rpki-client