Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cRyq7DR8mxwEKwXD0jId4hVEb7Y.roa
File: cRyq7DR8mxwEKwXD0jId4hVEb7Y.roa (raw, json)
Hash identifier: iYGLMcYua8p4xhfU87ijfp2bxTOPtQcFql0Q4F492kQ=
Subject key identifier: 71:1C:AA:EC:34:7C:9B:1C:04:2B:05:C3:D2:32:1D:E2:15:44:6F:B6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01971521F0C1E2229FEFE7765D5F86EBF9D6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cRyq7DR8mxwEKwXD0jId4hVEb7Y.roa
Signing time: Wed 28 May 2025 04:23:55 +0000
ROA not before: Wed 28 May 2025 04:23:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5065
IP address blocks: 37.202.219.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.251.0/24 maxlen: 24
151.240.252.0/24 maxlen: 24
151.240.253.0/24 maxlen: 24
151.242.9.0/24 maxlen: 24
151.242.46.0/24 maxlen: 24
151.242.47.0/24 maxlen: 24
151.242.48.0/24 maxlen: 24
151.242.60.0/24 maxlen: 24
151.242.62.0/24 maxlen: 24
151.242.121.0/24 maxlen: 24
151.242.166.0/23 maxlen: 24
151.242.195.0/24 maxlen: 24
151.243.140.0/24 maxlen: 24
151.244.59.0/24 maxlen: 24
151.244.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jun 2025 13:25:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:15:21:f0:c1:e2:22:9f:ef:e7:76:5d:5f:86:eb:f9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 28 04:23:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=711caaec347c9b1c042b05c3d2321de215446fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:96:88:07:65:85:ec:a8:e2:92:e3:3d:81:
ee:a0:cf:24:76:b7:50:ba:20:cf:ea:e6:9f:8e:76:
bf:b0:bc:c8:03:7a:c3:40:c5:3f:96:46:57:19:14:
12:7b:65:8f:cd:80:7b:2b:fc:4b:0a:6c:9f:1b:af:
34:05:db:11:5b:6e:b7:19:c3:ff:0e:d4:64:cc:c8:
8e:42:64:7d:50:b1:d4:b9:73:a9:c8:6d:5c:9f:e9:
8e:87:35:3a:14:08:11:0b:03:86:49:ba:a5:88:32:
95:23:8e:73:42:ba:e6:6b:e9:cf:22:b8:5f:cf:93:
7b:78:74:5c:23:1d:d1:e3:9c:40:d5:8d:a0:db:7f:
a2:3d:cc:4e:b0:5d:02:27:b2:0a:0e:8d:97:22:61:
9b:eb:aa:76:b1:76:1f:49:93:22:0c:e1:6d:53:ab:
2a:11:b3:74:80:07:57:a9:0b:bc:3a:ea:4d:63:33:
64:49:cf:36:6d:6b:a5:bd:41:4d:47:5e:18:37:99:
ee:32:82:73:c7:d8:a6:5a:33:9d:32:08:78:68:76:
5e:65:fc:d7:af:f6:25:19:fb:a6:e9:82:ec:35:52:
71:cb:d6:2e:34:00:5b:93:a0:71:28:b7:e6:33:78:
a3:44:a2:b9:78:45:4e:91:6f:1d:28:f8:2a:17:b0:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1C:AA:EC:34:7C:9B:1C:04:2B:05:C3:D2:32:1D:E2:15:44:6F:B6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cRyq7DR8mxwEKwXD0jId4hVEb7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.219.0/24
151.240.31.0/24
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.246.0/23
151.240.249.0-151.240.253.255
151.242.9.0/24
151.242.46.0-151.242.48.255
151.242.60.0/24
151.242.62.0/24
151.242.121.0/24
151.242.166.0/23
151.242.195.0/24
151.243.140.0/24
151.244.59.0/24
151.244.117.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:8d:09:fa:75:88:d9:08:87:e6:ed:10:15:2f:b8:40:3b:74:
cb:93:0c:89:ec:a4:73:42:81:ad:6c:22:42:57:56:99:df:ee:
59:10:e6:a5:2a:ba:03:9e:a1:9d:95:7c:57:5d:9b:50:2d:f2:
91:74:de:b3:39:6b:05:4f:ad:c8:59:09:c3:04:74:e3:23:93:
33:f8:13:0e:3c:93:32:b2:40:8c:b6:22:06:3e:61:8d:74:b8:
88:a9:5a:b2:4e:7f:19:e0:07:3d:cb:90:f3:27:01:3b:a6:a0:
12:00:d7:4b:39:91:ff:65:46:9f:3e:b7:74:3f:0a:40:a6:c1:
55:3a:c9:1a:b0:f8:21:0b:d7:b5:2f:0e:d9:bf:ca:48:0e:9d:
e3:e6:b8:c3:51:7d:d2:29:62:9d:1d:a5:ef:ff:60:f3:d7:2d:
1e:44:fc:be:4f:37:39:2e:e9:6d:88:7c:b0:8a:3e:51:77:89:
7c:9b:fd:e5:cd:7b:40:7f:80:8b:33:fe:1d:b0:12:19:3b:51:
e4:0c:da:52:5c:44:dc:a0:b2:d4:f9:7d:92:95:d0:47:ed:8b:
61:98:f5:f2:2a:03:bd:54:fc:59:fa:91:0c:77:2c:39:03:64:
0c:ca:66:ff:00:4d:29:e0:bd:2c:bd:c2:c6:f8:90:0e:ff:8b:
92:7e:5f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:33:27 2025 by rpki-client