Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qoISAmElntNshWVV5Cg5tOzHVO8.roa
File: qoISAmElntNshWVV5Cg5tOzHVO8.roa (raw, json)
Hash identifier: vQ3HWBHj7x+bl1b6m9QP5OHbFhawuL2rPus/81xeFxo=
Subject key identifier: AA:82:12:02:61:25:9E:D3:6C:85:65:55:E4:28:39:B4:EC:C7:54:EF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0194CF3380AE597F5DF17A0F894AE969416A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qoISAmElntNshWVV5Cg5tOzHVO8.roa
Signing time: Tue 04 Feb 2025 04:24:06 +0000
ROA not before: Tue 04 Feb 2025 04:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.110.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.212.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 06:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cf:33:80:ae:59:7f:5d:f1:7a:0f:89:4a:e9:69:41:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 4 04:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa82120261259ed36c856555e42839b4ecc754ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:31:56:2c:69:3b:c4:d2:1c:22:c2:3b:8f:66:
b3:e2:06:9e:9b:d5:1a:c9:2d:72:ff:0a:46:4e:bd:
82:e0:e7:de:57:f8:33:c2:6f:48:a0:3d:53:ab:03:
47:04:ad:97:ff:92:dc:9b:18:a2:3b:4a:ca:8a:ff:
ea:ee:93:d0:43:b2:34:9f:6b:04:cc:7d:c5:4b:d8:
72:b8:a4:b1:1d:f0:c5:30:1d:be:c8:bd:78:67:ad:
f6:59:d9:d4:2b:e5:de:60:d8:e2:a9:8c:11:8f:c9:
35:be:37:ab:68:bb:c2:e1:82:ca:84:e1:eb:71:8f:
91:04:46:bf:a4:f8:1b:b1:34:7f:6c:33:74:75:5b:
ef:4a:01:98:20:4a:bd:ad:60:f0:cc:da:0a:4d:01:
02:20:85:9f:59:a4:cc:47:3e:c4:00:49:d5:bb:b9:
0a:e7:9c:c0:70:8b:5e:da:97:0c:12:81:20:0b:4b:
35:40:1c:52:e3:7c:e8:1b:c9:5b:41:27:15:f3:13:
3c:64:10:b5:b7:be:ac:a6:85:72:2f:c5:75:15:f0:
ce:13:6a:57:5f:3e:b8:b3:ef:c5:e8:6d:ff:6a:f4:
fb:63:2e:eb:8d:d5:d4:49:39:f4:e1:33:b7:4d:de:
30:96:d3:1f:e6:0f:05:74:f3:ce:4d:63:d4:2c:4a:
05:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:82:12:02:61:25:9E:D3:6C:85:65:55:E4:28:39:B4:EC:C7:54:EF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qoISAmElntNshWVV5Cg5tOzHVO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
151.242.14.0/24
151.242.20.0/24
151.242.110.0/24
151.242.117.0/24
151.243.162.0/24
151.243.212.0/23
Signature Algorithm: sha256WithRSAEncryption
63:00:4e:04:95:8a:60:af:b4:95:d7:aa:c6:99:37:ef:90:34:
27:61:20:71:45:34:db:ac:5d:cb:f8:38:f1:92:48:31:78:00:
38:d7:c4:00:dd:9b:ac:02:53:12:a2:db:92:0b:ed:39:dc:5e:
81:d2:b2:bb:28:42:7d:3d:16:03:ab:9d:03:e9:21:c1:e0:a0:
50:82:3d:40:c4:bc:4e:b3:cf:45:89:8c:1e:0e:8b:23:f2:09:
e1:3d:ab:73:00:e3:33:76:15:1e:d8:43:dd:3d:7c:9f:c5:d3:
d5:a4:ba:f0:61:9d:ce:6e:9e:db:2d:ed:fb:fd:7f:18:eb:e2:
5f:ce:b2:8f:a8:79:6e:f2:60:d9:27:da:c3:e8:78:ef:2f:79:
0c:f3:c0:a0:d4:f7:07:b7:9c:3d:bc:73:ad:1a:8e:1f:c6:ae:
a8:a3:be:71:10:a2:8c:e5:66:0d:d5:f7:0f:a0:ee:e7:e9:9a:
70:f4:71:12:c7:c4:a2:ec:a2:db:76:dc:95:7c:5f:1f:f9:c6:
c7:b6:81:88:fe:c8:e9:ef:dd:13:0d:7e:6e:ec:81:46:0a:8b:
9c:7d:ad:3f:37:4d:da:eb:15:b3:26:6d:15:52:41:4c:43:eb:
d9:ed:9c:98:68:f6:b7:65:7c:3c:28:fd:f3:cb:b1:e2:90:51:
4d:d7:32:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:06 2025 by rpki-client