Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mIv6l4F4n9o8iw76TzGgfdnKYT0.roa
File: mIv6l4F4n9o8iw76TzGgfdnKYT0.roa (raw, json)
Hash identifier: WdNiqj7GAq74ywNfNhgVV2p9O0gSwegxdDm40mKkZZ8=
Subject key identifier: 98:8B:FA:97:81:78:9F:DA:3C:8B:0E:FA:4F:31:A0:7D:D9:CA:61:3D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195CC7857FF53C44E3A68441FA4DE8E7E0E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mIv6l4F4n9o8iw76TzGgfdnKYT0.roa
Signing time: Tue 25 Mar 2025 08:43:13 +0000
ROA not before: Tue 25 Mar 2025 08:43:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.240.3.0/24 maxlen: 24
151.240.110.0/24 maxlen: 24
151.242.33.0/24 maxlen: 24
151.242.63.0/24 maxlen: 24
151.243.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Apr 2025 07:42:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:78:57:ff:53:c4:4e:3a:68:44:1f:a4:de:8e:7e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 25 08:43:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=988bfa9781789fda3c8b0efa4f31a07dd9ca613d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1d:d0:96:bc:db:d0:7a:9b:a2:ff:4b:41:00:
50:fc:9c:14:fa:b7:99:a9:1b:e8:cb:43:53:89:26:
40:76:fd:3c:c6:07:95:48:06:60:2f:4c:4f:4c:13:
28:19:4e:e3:19:8f:e3:35:76:b7:1f:59:f9:12:3c:
f6:e7:40:f2:73:08:20:d9:b9:b4:82:90:55:3c:89:
ad:99:8e:d0:6d:ad:3b:db:eb:1e:0e:91:9e:bb:07:
30:68:c0:b8:72:14:32:1a:30:a3:73:e5:9e:f1:2a:
fa:93:16:b5:94:26:46:4d:50:e7:7c:63:29:d5:0d:
46:1a:b8:c0:6b:b0:46:c2:d3:6c:ef:3f:59:e7:89:
df:c2:68:d6:16:8c:ca:18:6f:ed:2a:3a:8a:e4:79:
56:cc:04:f4:fc:80:45:2c:aa:29:27:f3:9b:35:2b:
18:ab:d1:90:d4:c8:5a:7d:02:ac:8d:d0:e6:0a:45:
72:8b:f3:65:f7:7f:0c:a7:de:c6:66:7b:43:c6:1f:
3b:80:33:3e:dc:cc:2c:21:81:f1:cd:41:17:69:41:
df:19:8c:f9:67:63:cb:de:a7:ee:8d:3e:1f:60:dc:
d8:42:8b:d6:85:1d:72:c1:a9:db:62:e8:eb:f9:ed:
7c:44:26:9e:8b:63:c4:3d:6e:42:65:ce:35:2d:08:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8B:FA:97:81:78:9F:DA:3C:8B:0E:FA:4F:31:A0:7D:D9:CA:61:3D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mIv6l4F4n9o8iw76TzGgfdnKYT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.240.3.0/24
151.240.110.0/24
151.242.33.0/24
151.242.63.0/24
151.243.13.0/24
Signature Algorithm: sha256WithRSAEncryption
49:80:9c:5e:6f:37:c0:d0:c0:12:11:e7:61:1c:ac:7f:59:be:
06:7a:16:2f:ad:15:7b:77:4f:7f:1f:35:32:3e:58:31:f8:1c:
6c:ce:d5:17:91:85:59:6b:b2:77:9e:1a:d3:41:64:57:30:d0:
ff:d9:d3:86:7f:6a:30:5f:b3:a4:f5:b8:fb:fd:c1:05:8c:25:
7d:a8:fc:f6:69:12:26:7c:d3:79:2e:c6:bd:ee:5c:be:be:b3:
fc:59:6b:73:5e:f5:bc:d5:30:c5:93:22:55:92:ea:d6:9c:d0:
5b:f4:9b:2b:8d:04:a0:37:bc:70:b6:6f:d9:eb:33:68:fd:ce:
01:80:a3:ad:6a:47:d4:e6:80:7c:45:e8:4d:6e:e2:39:a5:ab:
9e:0e:5d:03:a9:54:19:2a:d5:04:b6:28:3f:e1:29:a5:d1:e5:
65:f4:8d:a0:fe:3f:3d:83:4b:fb:d0:75:0c:41:4e:c3:90:0e:
e9:0a:bd:8d:96:1f:9a:ac:dc:46:7f:5f:0a:5f:ce:b4:4e:56:
ad:61:ac:e9:68:de:44:85:29:85:55:49:81:a2:30:de:f9:82:
6e:4a:c4:6d:89:71:ef:c0:f2:81:6d:69:19:bf:53:64:50:71:
7f:96:19:ca:e5:d8:39:6c:ca:a6:b2:e6:e2:90:84:3f:da:d4:
eb:b3:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:33:35 2025 by rpki-client