Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rXToFkJB2G3-I7NJ8u5qv_-281E.roa
File: rXToFkJB2G3-I7NJ8u5qv_-281E.roa (raw, json)
Hash identifier: I78G9yljDtizFhlIcHLVa5/DzO/JvMto3dPsnJEJuL8=
Subject key identifier: AD:74:E8:16:42:41:D8:6D:FE:23:B3:49:F2:EE:6A:BF:FF:B6:F3:51
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7A908D226334712E4D0B28CF50A4D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rXToFkJB2G3-I7NJ8u5qv_-281E.roa
Signing time: Wed 01 Jan 2025 21:48:43 +0000
ROA not before: Wed 01 Jan 2025 21:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 17:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:a9:08:d2:26:33:47:12:e4:d0:b2:8c:f5:0a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad74e8164241d86dfe23b349f2ee6abfffb6f351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:1b:39:42:b7:a2:f8:33:b9:2f:c4:4d:07:
93:1b:07:aa:6c:71:2b:e6:cd:33:80:cf:eb:3c:b8:
d7:ae:83:2b:8c:45:13:5d:42:b3:ea:17:b3:c2:db:
0e:bb:6b:de:53:67:69:f3:21:b9:80:c5:68:aa:7d:
59:76:fd:02:ce:6f:70:d0:f0:a1:b7:9a:5d:29:d5:
9e:45:13:e5:8d:56:e2:aa:03:1d:73:ef:49:b0:e1:
c9:51:49:df:07:21:a0:a6:28:26:36:18:8b:1a:64:
63:60:7b:3d:2f:b4:6b:06:3c:e0:7f:08:31:db:b4:
ef:76:f2:b2:38:e1:42:07:21:c1:7a:e0:92:79:51:
ea:6a:68:e0:ee:bc:2e:be:d4:e5:10:13:bd:b1:c2:
26:02:85:6a:bb:f7:f4:cd:de:1f:e9:a2:d8:ff:74:
41:ef:9d:5a:b1:03:26:ed:08:1d:e2:35:98:84:7c:
af:e6:ff:29:89:0a:1c:29:dc:6d:6c:f4:8f:41:da:
7b:53:fc:79:9f:61:5c:b3:7f:87:ca:90:e9:4b:69:
f3:06:41:f5:57:56:bd:39:e1:61:c5:5a:02:88:95:
d4:36:c7:e6:d6:b4:3c:85:28:c1:37:08:9d:67:04:
b2:2f:5c:e4:83:38:d5:f3:c3:e5:59:81:03:75:1d:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:74:E8:16:42:41:D8:6D:FE:23:B3:49:F2:EE:6A:BF:FF:B6:F3:51
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rXToFkJB2G3-I7NJ8u5qv_-281E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
Signature Algorithm: sha256WithRSAEncryption
45:4f:5c:fd:ee:70:80:6a:2c:3d:31:60:7a:bf:11:97:49:59:
b2:2d:2e:44:90:41:8b:6e:e4:26:8b:c7:23:9b:18:22:11:66:
e2:9b:24:4c:8d:73:62:36:97:04:4f:de:2c:55:fd:af:07:1f:
25:f8:0b:eb:c7:f2:06:b0:21:e7:9e:e6:8c:f1:cd:8c:b4:fc:
0e:c3:5f:39:cc:7f:7c:fa:0d:78:e3:be:5e:12:b9:77:3d:10:
17:6d:42:1f:44:f7:49:7a:3b:29:d9:52:76:bf:27:9e:5a:d3:
52:bd:e8:85:f8:78:6b:a4:ae:3b:7a:ac:e0:79:30:50:8a:10:
01:09:26:4f:6c:9a:34:65:c7:12:f1:04:b9:96:66:09:3a:11:
a5:75:ee:5a:7a:ed:b3:d9:aa:e0:07:10:af:c5:30:6c:12:ea:
3c:f8:55:05:7d:8b:08:50:7f:ec:04:1e:d6:f7:b6:7d:45:0c:
aa:43:4d:e8:e2:1e:39:7a:c9:5b:30:50:72:88:b5:80:52:f2:
1d:e8:67:b4:cf:b5:10:52:5e:ef:da:71:e5:da:02:d6:c3:d6:
9e:76:3b:ab:54:95:72:ae:fa:7f:51:f3:62:41:74:51:a4:03:
89:78:6e:51:60:84:9f:26:5e:81:d0:bf:7d:b4:54:fa:20:78:
4e:33:aa:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:50:57 2025 by rpki-client