Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nclSNfQ0Y4u6jG_3N7XMfc8oyY0.roa
File: nclSNfQ0Y4u6jG_3N7XMfc8oyY0.roa (raw, json)
Hash identifier: Go8QOUeLsesn2dtnldcYwldyWgNwhEp3jy5ttteaCWQ=
Subject key identifier: 9D:C9:52:35:F4:34:63:8B:BA:8C:6F:F7:37:B5:CC:7D:CF:28:C9:8D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01950EC6C60E2B326CEBBF4F39695093C0F9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nclSNfQ0Y4u6jG_3N7XMfc8oyY0.roa
Signing time: Sun 16 Feb 2025 12:41:02 +0000
ROA not before: Sun 16 Feb 2025 12:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.209.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.105.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.110.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.243.104.0/24 maxlen: 24
151.243.118.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.212.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Feb 2025 04:36:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0e:c6:c6:0e:2b:32:6c:eb:bf:4f:39:69:50:93:c0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 16 12:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dc95235f434638bba8c6ff737b5cc7dcf28c98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3f:0d:10:fb:48:75:18:15:ea:95:d2:e7:e7:
b3:8f:af:81:83:8e:ad:b6:c7:46:e1:df:97:a6:4e:
64:d2:d6:2c:e2:21:d3:c0:59:d9:d8:00:f9:72:7f:
80:e4:c7:1f:62:0f:0e:25:22:6d:08:fc:ea:ed:34:
e7:fd:35:94:63:02:4c:c2:ac:c4:81:ff:94:c1:4b:
e9:09:51:8d:cd:f7:7a:0f:c3:b4:a7:d8:04:e8:d0:
a0:d6:5c:84:a9:24:f2:08:a9:80:1f:1c:3e:8f:ad:
db:df:90:58:61:c6:e9:a6:83:d1:b9:a6:68:5c:61:
bd:7d:89:38:2a:dd:fa:7a:71:46:a9:b9:ec:aa:69:
1c:42:98:93:0b:75:83:aa:e4:4b:75:95:1e:74:fd:
98:30:79:7b:2d:49:dd:4c:d3:c0:1d:28:de:28:b5:
04:48:f2:85:8c:53:02:7e:ac:99:cf:91:69:bd:7d:
d8:ae:d8:82:2a:67:4c:1f:78:c0:61:37:2a:e5:ed:
58:8a:3b:61:0c:6f:4d:9f:a2:38:f7:b8:07:e5:22:
8b:28:df:2e:81:2b:2f:71:5c:86:36:04:48:a4:52:
39:87:d3:b4:b6:f4:57:21:17:14:af:3f:dc:57:c7:
a4:84:11:1a:ca:31:9c:65:b3:78:48:80:66:63:f3:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C9:52:35:F4:34:63:8B:BA:8C:6F:F7:37:B5:CC:7D:CF:28:C9:8D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nclSNfQ0Y4u6jG_3N7XMfc8oyY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
151.240.105.0/24
151.240.140.0/24
151.241.110.0/24
151.242.14.0/24
151.242.20.0/24
151.242.110.0/24
151.242.117.0/24
151.243.104.0/24
151.243.118.0/24
151.243.162.0/24
151.243.212.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:f0:55:3e:33:0f:c8:70:f9:1b:90:7a:ee:99:91:8b:e3:64:
1f:9c:4f:61:c9:58:01:a2:66:bf:58:35:8c:91:c6:20:28:72:
87:6b:84:81:da:78:97:79:c2:e5:5a:1d:24:2f:1c:b4:e6:6c:
e9:2f:14:24:b6:7a:87:94:bd:76:04:cc:d1:bc:c7:f0:68:5f:
f8:51:e2:59:60:28:90:31:62:0f:a8:c8:38:81:7d:e6:d5:4f:
71:b5:19:4d:1d:ca:65:5f:c4:b4:2d:ca:a3:77:06:04:cb:d2:
97:8e:2a:8f:31:17:09:72:fc:d7:22:2f:55:68:4f:5c:fa:0e:
0b:60:b8:75:c4:8d:6e:7e:d2:77:14:d6:c6:f5:b0:1c:25:17:
74:e2:00:bc:51:7c:66:86:8b:49:c5:9c:4e:02:d7:c4:a4:6f:
89:9f:8f:6b:3c:e3:42:e4:13:f6:43:90:f7:b3:10:f5:ba:68:
1b:2a:c8:f8:22:c9:db:f8:2b:f9:3a:19:96:7f:ce:ad:52:e5:
6d:80:9b:85:b3:4a:f6:24:6a:f7:fd:e4:a3:e7:c4:f4:a5:38:
2a:b5:ae:97:99:5c:83:08:cf:18:42:df:4d:7f:d9:9f:48:17:
e1:34:e2:8f:c6:66:a7:fc:b4:eb:7f:3b:ad:a0:a1:d2:7a:a5:
d9:c2:b9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:41:18 2025 by rpki-client