Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qiLqmhAOJ581MMtOAWzG3gOZAfA.roa
File: qiLqmhAOJ581MMtOAWzG3gOZAfA.roa (raw, json)
Hash identifier: pbrL/lB2RpUWtJ1B79Cm41dOzpUFu1iABAwi3MOLPdU=
Subject key identifier: AA:22:EA:9A:10:0E:27:9F:35:30:CB:4E:01:6C:C6:DE:03:99:01:F0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01971D49576078308FE90FA9158D87CEA9C2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qiLqmhAOJ581MMtOAWzG3gOZAfA.roa
Signing time: Thu 29 May 2025 18:23:55 +0000
ROA not before: Thu 29 May 2025 18:23:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.242.190.0/24 maxlen: 24
151.242.194.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.10.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Jun 2025 11:09:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:1d:49:57:60:78:30:8f:e9:0f:a9:15:8d:87:ce:a9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 29 18:23:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa22ea9a100e279f3530cb4e016cc6de039901f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:d0:be:82:a6:d5:21:42:51:a4:58:d8:cb:
dd:51:b0:20:e3:9e:a5:3e:b0:d5:d7:4d:90:98:ff:
88:42:4b:52:01:bf:52:d8:d5:57:27:70:bf:53:ec:
6e:73:c3:cc:71:c4:4c:1d:ba:09:d0:2d:ca:66:5a:
47:c5:83:01:3b:24:1a:07:a0:5b:25:c8:bc:3a:4f:
11:fb:8d:04:bf:66:77:b2:bc:fc:d5:b6:1e:be:b3:
75:89:5b:d0:b1:8c:73:73:be:20:78:90:a6:20:d7:
b2:d6:a9:3c:e2:4f:a5:1a:49:39:a6:97:8e:7e:12:
a5:39:18:90:6b:e3:ae:41:50:fe:83:1a:ab:e6:40:
f7:d7:44:d2:cc:6e:ed:26:03:c3:f3:03:fd:29:ba:
5b:ba:b0:8f:b8:55:82:78:f5:a3:cf:33:52:8d:00:
74:75:70:db:94:69:34:99:33:5c:3a:40:fa:fc:12:
6c:db:ed:bb:af:dc:28:6d:ee:0e:20:4c:b8:ae:c7:
e9:59:6a:7e:0e:83:e2:64:a9:6a:8f:cc:d7:a2:da:
81:fc:fd:1a:a2:64:7f:be:20:f2:b9:04:96:86:e4:
09:6d:3e:0e:9b:7b:ee:f4:74:3d:99:d8:f4:b7:df:
04:09:4a:da:98:2f:4f:79:ea:10:4b:95:67:e5:79:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:22:EA:9A:10:0E:27:9F:35:30:CB:4E:01:6C:C6:DE:03:99:01:F0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qiLqmhAOJ581MMtOAWzG3gOZAfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.201.0/24
151.242.190.0/24
151.242.194.0/24
151.243.7.0/24
151.243.10.0/24
151.243.228.0/24
151.243.243.0/24
151.245.1.0/24
151.245.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3a:75:53:bd:41:39:23:a2:6c:c9:0d:70:02:b6:d7:c2:ff:
df:a7:37:11:bb:c3:77:49:ab:65:88:8f:b3:cb:8a:fe:12:14:
19:42:c1:d7:fe:9b:8a:7c:22:f6:7b:47:07:d7:1e:2c:fd:ab:
89:ab:93:bf:17:74:99:6e:7d:c5:98:19:a3:51:60:f7:43:25:
0d:84:91:73:d9:90:1b:9f:c0:36:e0:7a:04:de:b8:c5:e7:9f:
8e:bd:fd:f2:93:14:d6:2d:a2:14:b3:15:2c:d2:ab:70:1a:c8:
58:5d:37:d8:7b:38:89:d2:20:24:05:be:1a:8a:ea:98:af:7f:
d9:8a:4a:2e:c6:fe:d9:c4:da:b1:5a:57:fd:d7:f1:c3:88:ff:
af:49:f9:08:b7:66:29:63:fa:85:43:a3:87:69:18:28:6e:7a:
33:b9:42:77:df:bf:66:d8:17:e1:e4:e6:d7:d3:97:e0:7d:73:
0b:4c:d8:6b:92:f3:a8:de:03:51:04:0b:1b:24:a0:f4:50:86:
d9:3c:fc:42:f6:07:5f:86:c1:1b:26:43:f1:3b:98:16:97:26:
a3:f5:fd:9d:41:bb:71:79:2b:de:86:87:1a:d4:44:4c:4d:f0:
66:e7:fc:94:29:4c:24:2d:97:dd:02:61:62:26:16:62:1d:75:
01:fd:02:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:52:24 2025 by rpki-client