Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cihk4aM7treRGzBs0VLR10zku9M.roa
File: cihk4aM7treRGzBs0VLR10zku9M.roa (raw, json)
Hash identifier: h+cy9/oPz+dgUq6p4fY1cHqPN0zx38Rno0ExHgyh8lE=
Subject key identifier: 72:28:64:E1:A3:3B:B6:B7:91:1B:30:6C:D1:52:D1:D7:4C:E4:BB:D3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019710537B81F9E51886BD65C4FF170DDB89
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cihk4aM7treRGzBs0VLR10zku9M.roa
Signing time: Tue 27 May 2025 05:59:55 +0000
ROA not before: Tue 27 May 2025 05:59:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.242.190.0/24 maxlen: 24
151.242.194.0/24 maxlen: 24
151.243.10.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
151.245.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 18:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:53:7b:81:f9:e5:18:86:bd:65:c4:ff:17:0d:db:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 27 05:59:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=722864e1a33bb6b7911b306cd152d1d74ce4bbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:73:33:7a:bb:aa:ef:f3:53:7c:8c:5b:31:
1b:cb:07:f5:ab:51:80:2c:47:4d:0b:03:fe:54:96:
da:66:52:1a:52:fb:76:07:d3:e5:e1:4c:62:38:85:
95:6b:ee:2b:df:55:7b:6e:4c:31:44:cb:2b:3c:2b:
49:d4:7f:36:82:cc:35:3c:5d:0f:e2:22:2b:14:37:
c7:c8:7e:36:1d:b0:ae:03:b0:8a:84:90:1d:28:b9:
81:1e:14:2f:82:7a:d0:9e:2c:50:a3:58:14:d2:85:
57:b5:29:4f:cf:53:27:44:d8:35:92:65:7c:8c:e1:
e5:27:c2:36:0f:24:a8:4c:fc:3c:dc:c7:86:47:d7:
5f:17:22:48:a7:73:d5:0a:20:be:2a:ca:fb:0f:91:
f3:41:f5:4f:87:04:e8:34:1e:30:f3:22:fe:b0:39:
67:b1:62:90:d5:57:11:52:b7:ad:a2:3d:b9:4a:67:
3f:22:44:17:43:a7:02:f7:fe:ec:55:80:c9:65:e5:
46:74:b5:a1:2d:33:8b:09:86:09:43:9d:88:ec:37:
e2:11:56:f6:f0:97:d1:9e:38:6a:f2:9b:5b:b4:c8:
69:d8:ec:eb:54:62:fe:27:68:f5:02:c4:5a:7f:85:
17:b9:fd:54:98:77:9d:6c:ef:80:1e:f0:ab:4b:93:
07:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:28:64:E1:A3:3B:B6:B7:91:1B:30:6C:D1:52:D1:D7:4C:E4:BB:D3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cihk4aM7treRGzBs0VLR10zku9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.201.0/24
151.242.190.0/24
151.242.194.0/24
151.243.10.0/24
151.243.228.0/24
151.243.243.0/24
151.245.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:2b:76:b5:a1:23:a1:3a:1a:b3:74:7b:b2:dd:2e:00:f1:c4:
85:74:ab:61:b2:5a:2a:fb:72:4d:c6:7a:30:4a:38:9b:20:88:
c2:21:15:b9:8b:6b:d7:32:af:61:5e:e7:d5:03:e3:0c:0a:c3:
06:32:ac:a5:7c:6c:a8:b3:ab:47:46:39:59:bd:9b:b8:ce:62:
28:de:8a:f0:81:02:49:41:89:4a:83:78:2a:53:df:23:08:80:
7c:de:c4:d7:32:90:5a:e5:b6:88:2a:4e:84:b9:df:81:38:5c:
e4:15:d5:00:86:7b:ae:7d:74:74:c1:74:b9:e1:21:26:0a:33:
2d:ef:47:9f:4b:77:47:5e:3a:0b:68:46:d7:b5:b4:6a:8a:3b:
8d:af:ca:bf:11:51:f3:c6:21:56:97:6a:07:e6:14:68:db:d4:
f2:20:5d:33:19:40:85:2e:45:dd:0a:10:47:a9:60:6f:84:b2:
e9:09:f1:18:33:07:df:f5:18:37:6e:7d:b9:67:00:78:ba:34:
74:96:41:2f:af:14:6b:0b:54:07:ed:10:d7:04:8f:ac:b9:38:
c0:9e:d8:a6:0b:98:c1:9b:f1:da:51:5c:21:6a:1e:9e:3d:2c:
c7:69:d1:b6:81:f8:c5:1f:83:5b:bf:3c:9a:e2:09:19:91:81:
50:79:31:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:35:57 2025 by rpki-client