Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_3Rw_3vjp1cVoNv3jEEDoQhXTqc.roa
File: _3Rw_3vjp1cVoNv3jEEDoQhXTqc.roa (raw, json)
Hash identifier: tUFYxygOCwzp0Un9qr2Lj2GQPlhY3XOl1AWbI9L8E5E=
Subject key identifier: FF:74:70:FF:7B:E3:A7:57:15:A0:DB:F7:8C:41:03:A1:08:57:4E:A7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019734E516A976564B2F122D73DA43718934
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_3Rw_3vjp1cVoNv3jEEDoQhXTqc.roa
Signing time: Tue 03 Jun 2025 08:25:18 +0000
ROA not before: Tue 03 Jun 2025 08:25:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31715
IP address blocks: 37.202.192.0/24 maxlen: 24
151.242.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Jun 2025 05:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:e5:16:a9:76:56:4b:2f:12:2d:73:da:43:71:89:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 3 08:25:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff7470ff7be3a75715a0dbf78c4103a108574ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:08:73:4c:8a:6c:1d:19:0c:a4:35:93:7a:
b1:e2:e6:be:51:21:7b:67:f3:cf:e5:c0:00:2a:1f:
9b:68:d6:31:35:7e:5b:cd:de:3f:9d:2d:b9:21:2a:
57:e1:5b:41:1d:b1:f6:d2:2a:a9:e2:9e:2b:78:83:
c9:c3:0c:24:38:ac:13:90:7c:30:8c:f0:44:76:ad:
b5:e2:69:06:6f:b4:9c:9e:90:0c:63:97:dd:10:57:
bc:44:e4:2b:73:a4:c4:41:73:4d:6b:8c:75:81:b2:
c4:1d:4a:d3:5c:c2:54:da:e4:bf:fb:07:67:30:ab:
db:71:de:cb:ed:64:54:b6:f9:7c:dc:4d:5c:10:35:
e7:0e:51:83:e1:b8:8d:cc:bd:c3:fd:c9:76:8e:6c:
9c:18:97:4a:4b:dc:32:4a:9f:ae:ec:12:86:42:47:
38:d5:45:5f:50:9d:4b:0e:97:90:58:12:b8:b9:09:
c8:b6:92:e9:7f:8e:2b:da:8d:64:d4:1a:41:c4:69:
da:19:f4:9d:ca:b4:f6:2d:f1:0b:b9:d5:cd:f8:de:
46:68:ec:fe:79:dd:6d:c0:93:17:63:b0:70:ac:a4:
ed:3c:fa:4c:4e:47:16:8e:9a:bd:6f:c7:00:bc:5f:
f9:c3:25:08:4c:a8:97:95:cb:20:bd:f5:88:ac:39:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:74:70:FF:7B:E3:A7:57:15:A0:DB:F7:8C:41:03:A1:08:57:4E:A7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_3Rw_3vjp1cVoNv3jEEDoQhXTqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.192.0/24
151.242.226.0/24
Signature Algorithm: sha256WithRSAEncryption
92:9e:92:83:79:0f:45:33:22:5f:d6:27:25:00:a4:c4:d7:7c:
68:54:7c:f3:5f:f4:2a:25:9a:bf:cf:e3:3c:5f:7b:f9:1e:f5:
30:56:69:af:99:60:0a:3c:52:31:d1:72:6e:95:ce:19:13:38:
75:66:3d:9b:4b:e9:3d:94:9c:41:be:1c:05:65:35:da:bc:db:
5c:b8:ee:4f:13:60:f8:8d:5a:86:c9:3f:b6:e3:47:df:5d:e0:
da:77:89:34:00:0b:79:6c:a0:b5:72:26:ea:f6:7d:bd:a0:ed:
31:f3:7d:96:6e:be:37:16:ac:59:b3:da:b7:64:2a:04:c0:9f:
ef:15:8e:38:15:81:ff:5b:9c:23:cc:9e:90:f2:af:92:6c:9f:
98:db:ae:6c:1c:f9:2d:a8:06:57:98:2b:8e:9c:82:c7:e5:03:
6e:20:56:80:80:4d:26:6b:7b:37:32:72:48:16:a0:48:ef:2c:
fd:1b:d2:b5:35:d0:cc:94:b8:c2:b8:ae:2d:07:bc:8e:bd:80:
52:58:f5:71:96:8d:c4:e6:af:16:aa:7b:1d:43:2d:f5:86:2e:
bd:c2:c4:99:e9:33:2e:a0:9e:f2:c4:6b:30:c9:4a:17:d3:21:
21:77:29:56:d8:ac:f1:67:8d:16:c4:21:c7:e9:ab:0f:fc:22:
1b:f1:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:17:25 2025 by rpki-client