Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RVcTr181wp7AEvy9mDLlyC0W5BY.roa
File: RVcTr181wp7AEvy9mDLlyC0W5BY.roa (raw, json)
Hash identifier: W33RTFAlZEhA5XpNFgb1oiBCr57dSPpg40NR83lRVnY=
Subject key identifier: 45:57:13:AF:5F:35:C2:9E:C0:12:FC:BD:98:32:E5:C8:2D:16:E4:16
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194C5626145A7D36611F5A735B4026651F6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RVcTr181wp7AEvy9mDLlyC0W5BY.roa
Signing time: Sun 02 Feb 2025 06:39:06 +0000
ROA not before: Sun 02 Feb 2025 06:39:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 12:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:62:61:45:a7:d3:66:11:f5:a7:35:b4:02:66:51:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 2 06:39:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=455713af5f35c29ec012fcbd9832e5c82d16e416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:dd:4d:3c:72:fc:9a:73:45:18:37:46:05:
cc:c1:55:4e:ec:3e:84:f4:12:19:f1:c0:4d:e2:b3:
15:b1:d8:15:b8:2c:d6:3c:8a:da:35:d7:6f:79:21:
19:77:25:8e:40:96:63:4a:8e:d8:0a:fb:c8:a8:9c:
ba:19:5a:c9:4f:f7:93:72:32:8d:3c:67:73:e4:89:
aa:44:26:2b:cc:f5:4b:9c:75:06:9b:d2:75:fb:ed:
b5:97:8e:33:55:d8:2c:c6:ee:e0:00:e3:87:30:84:
4a:ec:91:e6:95:32:0c:f0:81:60:5d:e7:00:f6:73:
a5:21:36:3d:c9:2b:1d:0f:ae:9b:e7:69:56:bd:3f:
44:7a:49:62:60:5c:e0:b0:eb:e3:ad:c6:bb:0d:02:
6d:7e:3e:3d:35:bf:f2:67:47:eb:77:71:8f:58:b5:
0a:6b:4f:33:1e:70:78:2b:71:bf:2c:ab:09:2c:78:
48:81:98:88:5b:6e:af:52:03:83:80:22:51:3e:26:
46:b9:d5:79:6b:bd:6a:3e:d8:18:8e:3c:98:c9:6e:
15:5d:7e:2f:31:dd:54:de:63:3b:78:ed:c9:05:4c:
d4:e1:6f:09:55:29:90:71:6d:34:8c:72:3e:1e:1a:
c4:55:1c:78:f2:d8:4e:c6:28:43:a6:9f:3b:75:e1:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:57:13:AF:5F:35:C2:9E:C0:12:FC:BD:98:32:E5:C8:2D:16:E4:16
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RVcTr181wp7AEvy9mDLlyC0W5BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
151.242.14.0/24
151.242.20.0/24
151.243.162.0/24
151.243.245.0/24
Signature Algorithm: sha256WithRSAEncryption
64:04:b1:e7:71:82:66:01:2b:c2:fe:9c:9c:9e:06:58:09:8b:
74:ba:c5:f1:71:cd:81:9a:7e:cd:eb:c5:dd:c7:d9:7f:6a:9f:
3a:b7:e1:39:d4:6c:43:90:c6:53:e1:7d:30:d6:7f:01:11:12:
a8:05:73:e4:1e:12:1b:2a:90:4a:13:38:69:de:30:0d:98:dc:
3a:23:e3:95:cd:36:d4:0b:e1:3a:0f:2b:48:92:49:80:8a:f7:
8b:15:84:08:05:b7:60:e3:fd:50:bc:ca:c6:49:18:43:e0:a7:
ad:54:e5:32:a0:15:f8:f5:54:7e:ce:46:f2:08:81:b2:c4:0d:
60:78:b5:92:11:ef:69:04:7e:2f:9a:2c:1c:24:9b:37:87:17:
d5:86:ac:c8:c2:60:5e:5a:02:5e:e9:0a:71:06:c2:5c:96:fc:
4d:90:66:12:9c:51:0a:7c:e8:15:3b:ee:b5:20:d4:90:a9:c5:
c5:51:0d:c5:c0:af:7f:39:31:18:cb:5a:6f:95:7c:37:87:8f:
eb:d4:51:a2:72:1d:04:77:7f:76:57:34:a1:52:b6:f7:81:55:
4f:6e:2f:4b:46:13:f0:1c:e5:c5:63:94:ab:73:25:c4:5c:f3:
72:a5:cd:9b:d6:56:ee:ac:77:69:f2:7c:8f:7c:d1:f7:76:d2:
af:4a:4b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:26:50 2025 by rpki-client