Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mop8nfMfTxbi-gtSPoL2cTluT6s.roa
File: mop8nfMfTxbi-gtSPoL2cTluT6s.roa (raw, json)
Hash identifier: m9fasP21t368npNwYN02Mmh/46cDHTXRAqM/s4xzO1g=
Subject key identifier: 9A:8A:7C:9D:F3:1F:4F:16:E2:FA:0B:52:3E:82:F6:71:39:6E:4F:AB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194B5F1229CD154ED45DFB27D372C8B23F4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mop8nfMfTxbi-gtSPoL2cTluT6s.roa
Signing time: Thu 30 Jan 2025 06:41:06 +0000
ROA not before: Thu 30 Jan 2025 06:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 31 Jan 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:f1:22:9c:d1:54:ed:45:df:b2:7d:37:2c:8b:23:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 30 06:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9a8a7c9df31f4f16e2fa0b523e82f671396e4fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:b2:78:d2:ee:a3:87:df:71:13:be:29:3e:
af:b4:7d:2b:e6:bf:bb:5a:b4:43:3c:b3:1d:99:0e:
02:42:02:21:b8:bd:4f:a3:ea:41:d9:fa:f0:87:5f:
97:b0:9e:d0:b8:6c:54:29:91:d2:74:42:ff:ec:67:
46:ae:7b:86:b5:7f:c1:85:74:99:52:f1:af:e3:fb:
aa:bf:60:4c:49:6b:08:0d:82:82:7b:eb:b9:4a:59:
23:94:94:ee:cc:ba:c7:b8:36:a5:40:1d:45:7b:55:
2b:65:03:ed:60:dd:29:cd:9e:6f:ac:34:a7:1d:83:
d4:b0:92:f6:cf:56:e1:9b:53:8b:f4:17:a7:c0:6c:
ab:d1:da:65:86:ef:39:f5:55:fa:32:34:97:77:b9:
19:aa:d1:b9:4a:ab:3a:5d:57:20:23:df:c0:76:ea:
ba:a5:a3:2a:05:98:14:25:87:36:01:3a:16:d6:f5:
39:ec:2f:07:02:14:fe:1c:1a:16:c0:43:43:d1:5b:
92:30:3f:8e:f9:12:f5:7d:a4:1c:7b:ae:0d:7d:02:
e0:4a:ce:a7:21:df:a6:2d:75:c2:6e:2f:65:36:9b:
ea:b3:92:00:2f:f4:16:5c:b8:2b:84:3b:1f:ee:d2:
5d:89:98:b1:63:ca:a4:51:55:f2:ec:74:33:02:d6:
b4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8A:7C:9D:F3:1F:4F:16:E2:FA:0B:52:3E:82:F6:71:39:6E:4F:AB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mop8nfMfTxbi-gtSPoL2cTluT6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
151.242.14.0/24
151.242.20.0/24
151.243.162.0/24
Signature Algorithm: sha256WithRSAEncryption
08:fc:df:64:59:42:00:28:03:13:dc:6d:09:17:bd:64:89:e6:
14:9c:a3:82:93:d7:61:70:45:eb:44:08:8c:c9:5e:32:6d:2d:
db:0e:ec:89:d4:9c:b0:57:37:f0:14:02:6a:af:0f:3d:d5:60:
91:72:ea:06:7c:16:da:91:f5:d4:07:94:be:c9:7f:5a:99:f3:
18:9e:f7:d4:b1:22:3c:74:86:63:ad:9b:81:81:ef:52:b4:10:
3e:aa:16:18:0a:fe:1c:5a:66:31:68:26:c2:1a:2b:e0:14:e0:
97:dc:95:25:44:df:64:81:18:a5:a3:35:fc:5d:a5:bd:26:85:
8e:1f:17:cc:9b:8a:9b:e7:c5:4b:f2:94:a4:ed:06:1d:57:d9:
71:2f:5b:26:2a:4c:45:62:b4:c6:a8:48:d9:ab:ec:54:ab:28:
e5:c5:f3:a3:71:db:6c:8d:63:3a:1b:d5:1d:04:12:f6:69:79:
51:97:d4:98:9f:01:c3:7b:74:8e:53:43:0a:19:e3:3c:d2:0e:
dd:78:a9:15:89:92:d7:f5:e2:36:0f:fd:8e:1b:6f:75:ae:e2:
32:29:32:c0:20:24:84:d2:46:7e:07:4b:dd:8b:a6:32:2b:29:
73:0b:a8:fe:72:84:bb:c6:d4:7b:1e:1e:40:a0:ef:4d:4f:22:
d4:fc:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:08:28 2025 by rpki-client