Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bZisArjkFMVAPQO7cHO4FeKI00s.roa
File: bZisArjkFMVAPQO7cHO4FeKI00s.roa (raw, json)
Hash identifier: pLzgiCWGT0u0uNsk0g1Rcn/QO+sk11BsKGhq3vQLPqk=
Subject key identifier: 6D:98:AC:02:B8:E4:14:C5:40:3D:03:BB:70:73:B8:15:E2:88:D3:4B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01946DBCA2E6796C084F5E561B097E754AFF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bZisArjkFMVAPQO7cHO4FeKI00s.roa
Signing time: Thu 16 Jan 2025 06:11:06 +0000
ROA not before: Thu 16 Jan 2025 06:11:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13347
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.249.0/24 maxlen: 24
151.243.250.0/24 maxlen: 24
151.243.251.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
151.243.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Jan 2025 06:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6d:bc:a2:e6:79:6c:08:4f:5e:56:1b:09:7e:75:4a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 16 06:11:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d98ac02b8e414c5403d03bb7073b815e288d34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:74:ac:16:ce:fb:e8:df:a6:0c:44:89:7d:
51:25:64:a3:08:9d:22:01:dc:f3:15:28:19:c1:40:
49:b2:57:ec:21:51:0b:dc:42:a4:78:b5:d1:a9:ac:
29:52:98:4d:a2:88:8d:05:83:d2:6d:8c:84:79:ea:
e9:74:d7:ea:51:9f:ab:96:84:d1:01:64:6f:fb:ec:
b1:33:bd:f9:31:3d:49:57:0c:76:a8:ae:da:54:2a:
82:a1:68:b7:d8:63:01:61:4d:31:fd:e5:be:06:d8:
b5:dd:aa:71:75:26:02:0a:a6:0d:4a:29:03:ae:b2:
97:98:68:00:b1:68:7f:ac:b6:0e:b0:05:e2:d5:eb:
a8:ac:e0:cb:6c:ac:f2:c7:33:02:5f:e9:3f:57:a3:
0c:e1:7d:cd:6a:98:1d:41:87:81:c5:9e:b6:c4:81:
cb:50:d8:8f:af:d8:22:0a:2b:cd:40:c4:3a:c4:eb:
03:99:0f:1a:ea:42:dd:08:27:c9:fb:b2:2b:71:28:
68:3f:bb:dd:40:54:e0:6b:36:52:f7:d4:73:bf:0b:
49:ce:43:70:bc:80:2d:b6:e3:88:c2:c9:a6:19:3f:
46:5f:0c:27:d4:be:00:0b:0d:c4:67:86:53:b6:04:
3c:ed:8a:f0:99:31:64:16:1c:5d:31:4a:e5:8b:37:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:98:AC:02:B8:E4:14:C5:40:3D:03:BB:70:73:B8:15:E2:88:D3:4B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bZisArjkFMVAPQO7cHO4FeKI00s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
151.243.246.0-151.243.253.255
Signature Algorithm: sha256WithRSAEncryption
85:a1:98:5c:9a:c5:61:71:01:6e:36:0a:73:7e:29:d1:2d:cd:
27:e0:2b:92:ca:a0:71:c5:ec:79:09:83:1a:9e:35:ff:92:3e:
65:1a:6a:37:1e:bf:df:b8:13:f0:50:43:8f:d7:75:4b:f8:7a:
f8:8c:c9:58:73:77:7d:48:00:c1:3f:82:89:71:7d:f7:df:db:
ee:b7:15:65:5e:ba:b7:4d:43:81:ab:60:12:fa:c1:dd:08:fc:
09:3e:28:49:67:24:53:37:17:3f:ca:fb:5a:2b:f4:04:b7:55:
7d:b2:b8:e7:69:cc:2e:e0:27:33:e3:10:24:98:bb:55:71:9b:
27:59:08:b8:55:15:15:3f:16:51:8b:10:7e:3c:64:68:7f:30:
2d:05:47:aa:32:0d:ec:d0:85:10:08:f3:88:6b:32:fd:22:8a:
95:78:a2:b2:9c:f5:7c:fa:78:fd:fa:ec:12:46:d1:c5:bf:b4:
ae:2e:5c:58:81:5a:12:fb:0a:59:4a:cb:36:64:97:dc:90:d0:
25:00:44:30:40:35:15:56:0e:18:67:37:2e:26:3a:e1:3a:a4:
ff:83:d8:b2:1f:b5:20:57:d8:ac:4e:27:9a:6b:e8:4d:e3:63:
e8:59:b1:38:a1:46:e0:40:ad:f7:38:46:60:9c:14:5e:71:0b:
c2:40:1b:4b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZRtvKLmeWwIT15WGwl+dUr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTE2MDYxMTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDk4YWMwMmI4ZTQxNGM1NDAzZDAzYmI3MDczYjgxNWUyODhkMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndx0rBbO++jfpgxEiX1RJWSjCJ0i
AdzzFSgZwUBJslfsIVEL3EKkeLXRqawpUphNooiNBYPSbYyEeerpdNfqUZ+rloTR
AWRv++yxM735MT1JVwx2qK7aVCqCoWi32GMBYU0x/eW+Bti13apxdSYCCqYNSikD
rrKXmGgAsWh/rLYOsAXi1euorODLbKzyxzMCX+k/V6MM4X3NapgdQYeBxZ62xIHL
UNiPr9giCivNQMQ6xOsDmQ8a6kLdCCfJ+7IrcShoP7vdQFTgazZS99RzvwtJzkNw
vIAttuOIwsmmGT9GXwwn1L4ACw3EZ4ZTtgQ87YrwmTFkFhxdMUrlizfSLQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFG2YrAK45BTFQD0Du3BzuBXiiNNLMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvYlppc0FyamtGTVZBUFFPN2NITzRGZUtJMDBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAJcrBMAwD
BAAlysMDBAElysgwDAMEAZfz9gMEAZfz/DANBgkqhkiG9w0BAQsFAAOCAQEAhaGY
XJrFYXEBbjYKc34p0S3NJ+ArksqgccXseQmDGp41/5I+ZRpqNx6/37gT8FBDj9d1
S/h6+IzJWHN3fUgAwT+CiXF999/b7rcVZV66t01DgatgEvrB3Qj8CT4oSWckUzcX
P8r7Wiv0BLdVfbK452nMLuAnM+MQJJi7VXGbJ1kIuFUVFT8WUYsQfjxkaH8wLQVH
qjIN7NCFEAjziGsy/SKKlXiispz1fPp4/frsEkbRxb+0ri5cWIFaEvsKWUrLNmSX
3JDQJQBEMEA1FVYOGGc3LiY64Tqk/4PYsh+1IFfYrE4nmmvoTeNj6FmxOKFG4ECt
9zhGYJwUXnELwkAbSw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:13:20 2025 by rpki-client