Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fHLiQJtZ6GN5PmTNdlQ_IbT_DQU.roa
File: fHLiQJtZ6GN5PmTNdlQ_IbT_DQU.roa (raw, json)
Hash identifier: UJpseaxdSBYo8MG8BtB+GuvUnADr7dak7RSoiXcmEW4=
Subject key identifier: 7C:72:E2:40:9B:59:E8:63:79:3E:64:CD:76:54:3F:21:B4:FF:0D:05
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194DF1646E455075F27A57A01B7EC032ADC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fHLiQJtZ6GN5PmTNdlQ_IbT_DQU.roa
Signing time: Fri 07 Feb 2025 06:26:06 +0000
ROA not before: Fri 07 Feb 2025 06:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.105.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.110.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.212.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Feb 2025 06:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:16:46:e4:55:07:5f:27:a5:7a:01:b7:ec:03:2a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 7 06:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c72e2409b59e863793e64cd76543f21b4ff0d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:04:07:67:08:6d:17:fb:53:d6:1f:93:d3:3f:
8b:25:b8:45:97:00:98:f4:01:d4:80:d6:f6:53:85:
40:c8:f2:dd:d7:80:22:d4:f9:62:ab:48:58:00:9b:
c5:79:00:63:58:0e:bb:21:dc:fc:34:e8:66:7d:c2:
68:b4:4c:25:f6:9c:30:1c:44:79:79:02:56:c2:c5:
0d:c8:8a:e9:cd:e3:0c:b7:56:bd:db:47:7a:a6:40:
65:df:20:85:59:0a:d3:0e:1c:86:42:02:52:1e:6b:
70:39:19:25:63:e0:cb:b3:1f:17:24:d2:fc:03:60:
dd:5f:df:9c:e2:d0:e7:e5:28:87:7a:59:99:51:a8:
43:92:69:79:d8:5c:74:d0:16:8d:20:ec:f7:06:da:
9d:fb:23:41:82:d2:e3:20:f9:da:e9:9a:3c:cf:f4:
fe:6f:e0:f2:0c:4f:d3:6f:cd:da:fc:48:57:34:2c:
03:e4:9f:72:20:0d:0f:a1:e4:78:e9:35:e4:67:b7:
13:cb:a9:f9:d0:cc:06:0d:cb:34:37:d2:81:77:fd:
87:04:90:b7:a2:4b:0c:fa:7e:7d:85:51:3a:d8:02:
9f:ec:eb:63:d1:63:4b:c3:1e:14:16:db:34:4f:b4:
b4:6e:79:59:5c:53:01:16:55:7c:7e:84:90:17:75:
82:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:72:E2:40:9B:59:E8:63:79:3E:64:CD:76:54:3F:21:B4:FF:0D:05
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fHLiQJtZ6GN5PmTNdlQ_IbT_DQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
151.240.105.0/24
151.240.140.0/24
151.241.110.0/24
151.242.14.0/24
151.242.20.0/24
151.242.110.0/24
151.242.117.0/24
151.243.162.0/24
151.243.212.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:37:d1:4d:dc:19:d8:73:08:a1:c7:30:e8:68:08:de:af:c6:
a3:5b:a2:85:1a:07:67:da:d6:3e:e9:46:8f:88:75:d3:b4:48:
91:91:15:21:75:f1:30:c1:74:fc:11:93:2f:5c:fb:25:65:a1:
33:92:28:46:ca:49:6d:fe:e9:7a:bb:bc:94:72:7f:31:22:78:
29:51:32:4e:d8:cc:cf:b7:79:85:a4:d5:8f:74:6a:05:0d:46:
d5:d3:e3:50:31:73:e4:25:41:5d:d4:ff:00:b8:4e:dd:d7:70:
d6:2a:d5:8d:e7:3a:0c:2f:ad:d4:c9:ef:e8:aa:74:08:82:ee:
11:69:ba:6f:25:d1:77:cd:09:1d:3f:cf:20:67:83:9c:2e:4e:
01:72:d6:3d:71:5b:8f:af:d5:33:e3:d7:66:10:21:e2:07:a5:
cb:6f:32:6e:46:81:d2:4f:4e:58:60:05:7f:67:95:b5:60:85:
fe:95:f5:a3:2e:ff:cf:ec:c1:95:08:e8:4a:7c:cb:98:3b:7a:
ef:e5:3c:3f:f0:48:5a:d8:43:8a:4d:ef:a4:97:e9:cf:68:46:
e4:f3:30:0f:16:28:b7:f5:e3:d7:de:09:87:20:3e:f6:20:50:
56:98:1c:49:69:a3:ea:e1:22:47:0f:e4:d9:3b:d7:55:64:59:
ba:1d:27:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:53:22 2025 by rpki-client