Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/V6CDZsEC-9AbpFD9PrtY8gBwa5I.roa
File: V6CDZsEC-9AbpFD9PrtY8gBwa5I.roa (raw, json)
Hash identifier: ZuqUBKg4SrUfXikJZ0INEPHYTgOYEwfLVWC50cPXbJ8=
Subject key identifier: 57:A0:83:66:C1:02:FB:D0:1B:A4:50:FD:3E:BB:58:F2:00:70:6B:92
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196F97102A823E877F3881C4D067E9D07D0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/V6CDZsEC-9AbpFD9PrtY8gBwa5I.roa
Signing time: Thu 22 May 2025 19:20:55 +0000
ROA not before: Thu 22 May 2025 19:20:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 37.202.193.0/24 maxlen: 24
151.243.52.0/23 maxlen: 23
151.245.8.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 05:59:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:71:02:a8:23:e8:77:f3:88:1c:4d:06:7e:9d:07:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 19:20:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57a08366c102fbd01ba450fd3ebb58f200706b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:ff:c5:59:83:51:38:68:79:80:2d:40:36:b3:
d2:1d:b9:66:a6:14:2f:59:fe:ce:71:02:70:86:17:
b7:73:ed:2e:27:40:d3:5d:66:86:6a:84:1b:96:a1:
56:ba:4c:d6:6c:ee:0f:99:5e:eb:3b:cb:6d:26:f7:
b7:3b:7e:db:fa:3e:fa:cc:06:df:42:b2:77:f6:06:
e6:2d:43:f9:6c:b8:f4:25:fb:7a:04:15:c5:25:cd:
4e:30:9e:70:03:53:04:d8:58:39:b8:90:44:c9:7b:
ff:6b:e3:88:ab:82:2d:71:7f:83:53:89:50:e5:da:
65:21:e9:a8:eb:98:09:d9:36:7e:17:16:d2:f0:d0:
fd:b6:d6:f8:14:7e:89:1d:f1:b3:27:83:f4:5c:3d:
e5:3c:c7:0c:d6:f9:7a:7c:b5:cf:85:a8:fe:ea:30:
56:c1:4e:b3:bc:f1:fb:f6:9f:4f:13:15:6e:fa:15:
da:6c:94:2d:97:2f:5c:fd:3d:07:de:ce:46:09:58:
46:41:b8:0c:2d:a2:30:02:8c:0f:22:72:f6:87:ea:
35:ba:d4:6d:63:09:90:64:ce:71:3a:d3:3c:66:b0:
6c:04:cc:88:91:5a:b4:0d:3b:92:0f:1a:49:be:9a:
bc:e7:c2:51:c8:dc:31:53:e8:c6:c9:fe:32:3b:f8:
7d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A0:83:66:C1:02:FB:D0:1B:A4:50:FD:3E:BB:58:F2:00:70:6B:92
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/V6CDZsEC-9AbpFD9PrtY8gBwa5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
151.243.52.0/23
151.245.8.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:7b:ba:e0:79:52:d0:4c:4f:a5:8e:1e:a2:1c:3b:cd:7b:cd:
2f:5a:99:de:77:5b:07:10:fa:aa:f3:c0:ba:3a:90:44:dd:ab:
23:cc:d2:35:26:60:52:14:0e:04:16:9d:7b:52:d9:a2:05:fc:
2c:ac:23:ad:4c:46:74:73:90:60:b6:9b:bf:06:bc:3d:dd:e1:
45:d4:e2:28:18:ab:14:74:b6:d9:63:f4:02:e6:db:99:1d:07:
78:bd:4e:81:15:74:eb:8c:90:90:5d:25:43:25:64:4b:47:b8:
62:b5:d0:e9:46:d3:60:86:95:a6:32:b0:c4:aa:20:20:62:6a:
f9:8c:2c:66:0a:cb:f6:18:e4:31:a8:67:ee:2d:f5:a5:0f:50:
88:c8:5b:5d:2f:a6:27:8c:a7:48:9b:14:61:5e:b8:db:ca:88:
8c:19:f1:f5:13:97:09:ae:0a:df:c9:1b:2d:00:c3:ca:a1:b3:
1e:a8:78:53:92:91:da:f1:f7:8b:83:4b:ab:97:4e:0f:1f:31:
5b:7d:7d:fd:55:05:b9:5a:4a:6d:cb:da:ef:78:cc:db:87:e1:
c4:8c:f1:a5:bc:7d:27:12:d0:3a:fa:33:8f:ee:91:4b:73:eb:
3d:3f:04:0f:24:80:b8:08:a5:58:7e:b9:4e:14:e6:3b:ff:9d:
fe:be:97:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:55:13 2025 by rpki-client