Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dXt20SNEhjrMUIzxX6Jq_rJ3d6Y.roa
File: dXt20SNEhjrMUIzxX6Jq_rJ3d6Y.roa (raw, json)
Hash identifier: XdA/KWVRH0vQAu104u4UiQVBW1ARrRidGqtK8vZXqF0=
Subject key identifier: 75:7B:76:D1:23:44:86:3A:CC:50:8C:F1:5F:A2:6A:FE:B2:77:77:A6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01973B5E306D8CE0A0639AD10F253A352D5F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dXt20SNEhjrMUIzxX6Jq_rJ3d6Y.roa
Signing time: Wed 04 Jun 2025 14:35:17 +0000
ROA not before: Wed 04 Jun 2025 14:35:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.242.190.0/24 maxlen: 24
151.242.194.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.10.0/24 maxlen: 24
151.243.152.0/22 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jun 2025 10:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:5e:30:6d:8c:e0:a0:63:9a:d1:0f:25:3a:35:2d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 4 14:35:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=757b76d12344863acc508cf15fa26afeb27777a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:80:ed:01:a0:f2:7a:4c:dc:1c:b1:eb:14:
76:f1:fa:46:88:f7:31:ce:7c:5c:65:e9:ae:ed:fc:
8f:51:6e:c3:5c:09:95:c6:71:77:34:62:fe:be:16:
e9:fb:86:0e:cc:dd:2b:55:61:c7:d8:66:cd:98:df:
86:aa:6b:11:b6:f1:c2:f5:0d:7d:e1:b2:a7:f5:27:
ee:e4:17:ba:89:99:59:82:8f:2f:22:e0:98:98:c0:
c8:aa:c5:2a:a3:4a:a0:ce:28:ca:7d:68:dd:a5:09:
49:bf:6e:86:bd:69:40:bb:7f:7c:4d:f3:cc:10:6a:
37:4c:be:ae:2e:fb:13:62:39:44:9a:47:ba:5d:58:
f0:ba:27:5f:ee:ca:4c:fe:80:2e:3f:7b:54:11:47:
e2:5d:f6:bc:5a:d2:1c:da:5a:02:43:97:0e:3c:a6:
10:20:ed:cd:b6:1c:9b:8a:2b:f2:7b:38:49:e9:ad:
89:09:15:14:9c:e1:2c:41:0c:e9:98:36:9a:87:68:
9c:c9:22:a2:c7:45:2d:41:b8:ab:c8:07:a4:4b:96:
0b:2c:21:94:bb:88:7d:8b:64:7b:ed:cc:1c:ec:6d:
6c:63:cf:b2:73:d5:6a:73:dd:ad:9e:96:03:79:a7:
74:22:79:20:64:88:81:dc:d9:0f:19:0d:d3:a0:99:
a3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7B:76:D1:23:44:86:3A:CC:50:8C:F1:5F:A2:6A:FE:B2:77:77:A6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dXt20SNEhjrMUIzxX6Jq_rJ3d6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.201.0/24
151.242.190.0/24
151.242.194.0/24
151.243.7.0/24
151.243.10.0/24
151.243.152.0/22
151.243.228.0/24
151.243.243.0/24
151.244.54.0/24
151.245.1.0/24
151.245.4.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f1:2f:70:b7:4b:fc:fd:19:2a:37:c7:fa:4c:21:a3:83:32:
19:47:e2:9e:73:ef:4a:4f:74:ae:2a:51:38:21:6e:e3:13:25:
51:9e:2b:de:be:22:6b:58:50:d8:7b:29:67:bc:05:4a:ed:5a:
f5:2b:65:d5:95:f0:54:2a:b7:0f:26:04:8c:36:cd:97:bc:15:
05:14:7a:0d:55:9c:fe:24:98:53:6c:d6:0d:46:be:94:d7:0b:
c3:a6:58:4f:f6:27:7b:5e:f0:1a:d9:48:05:ad:46:86:2e:c9:
41:74:de:65:8d:92:35:a1:04:99:10:93:03:86:9b:69:8a:34:
72:89:5c:00:9a:0a:c3:fb:01:ef:89:e7:71:c3:fd:01:d4:e7:
b0:03:6a:12:a5:82:57:ff:33:b3:3e:ba:0e:2d:16:4d:4f:54:
df:db:da:5e:c4:35:3e:64:5c:05:c3:5d:bc:5e:6e:0d:bf:58:
86:21:e6:f1:73:cf:eb:2b:6a:b3:6e:5c:ed:dd:6b:3f:9c:a0:
4a:d0:7a:a3:8e:5f:48:93:1e:12:de:e6:8c:08:ef:26:1b:75:
34:98:94:df:f3:09:a7:02:b2:eb:f8:aa:62:87:05:8e:63:35:
f1:7c:1a:e7:55:8b:5f:8a:71:02:01:67:49:e4:2e:25:31:88:
7f:e4:fd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:27:33 2025 by rpki-client