Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/td0iGuWK1qUy7US7LQQTuuSRoz4.roa
File: td0iGuWK1qUy7US7LQQTuuSRoz4.roa (raw, json)
Hash identifier: IdL9Wvqi3hftsOv4jmzEz/OpIwm95nXkYnT2bGSXH78=
Subject key identifier: B5:DD:22:1A:E5:8A:D6:A5:32:ED:44:BB:2D:04:13:BA:E4:91:A3:3E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01944C03686AA8AE91BE5B62D6E62FBC7642
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/td0iGuWK1qUy7US7LQQTuuSRoz4.roa
Signing time: Thu 09 Jan 2025 17:01:19 +0000
ROA not before: Thu 09 Jan 2025 17:01:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9232
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.213.0/24 maxlen: 24
151.242.18.0/24 maxlen: 24
151.242.19.0/24 maxlen: 24
151.242.21.0/24 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.72.0/24 maxlen: 24
151.243.107.0/24 maxlen: 24
151.243.108.0/24 maxlen: 24
151.243.109.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Jan 2025 10:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4c:03:68:6a:a8:ae:91:be:5b:62:d6:e6:2f:bc:76:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 9 17:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5dd221ae58ad6a532ed44bb2d0413bae491a33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:23:c1:4e:33:ad:fe:8e:c1:82:a4:22:e4:
11:29:ed:cd:81:ce:ae:ad:a6:aa:79:67:e4:b2:80:
64:27:2a:51:74:cd:1f:86:0f:8e:3c:f8:6f:40:f0:
bc:71:74:18:15:9e:d8:66:13:8f:ad:e0:66:d0:d6:
29:7c:38:d3:5d:22:eb:a8:61:51:31:ed:f6:bb:30:
79:ea:a9:d6:a4:39:8f:1c:9f:72:23:d0:e6:c5:85:
9a:5f:aa:a4:a6:25:7e:21:e0:a3:51:72:33:74:7b:
21:75:55:a3:52:66:8a:b2:12:f4:de:0e:9e:03:18:
fe:e5:8e:5c:7f:70:8d:65:af:83:7f:ac:81:40:d8:
44:2e:97:a1:8b:97:8f:a0:b6:fb:31:37:03:0b:e4:
67:3f:e4:25:b6:8b:33:3f:61:f7:b2:3e:ff:81:63:
22:2c:bc:95:2e:07:1f:54:39:bf:42:d2:e5:2d:1d:
5c:35:4a:bf:85:8f:46:b9:3c:ed:55:87:1c:db:81:
25:15:14:58:3b:57:0e:02:51:b8:00:3a:3f:40:68:
f2:97:e9:2b:9a:26:4d:0f:71:cb:a5:6e:ef:c1:26:
00:aa:bd:e1:0c:b5:1a:92:9d:fb:dc:06:6e:b4:24:
95:e5:5e:1a:fc:03:eb:42:b1:5a:32:e8:e7:88:2b:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DD:22:1A:E5:8A:D6:A5:32:ED:44:BB:2D:04:13:BA:E4:91:A3:3E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/td0iGuWK1qUy7US7LQQTuuSRoz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.213.0/24
151.242.18.0/23
151.242.21.0/24
151.242.68.0/24
151.242.70.0-151.242.72.255
151.243.107.0-151.243.110.255
Signature Algorithm: sha256WithRSAEncryption
13:4a:5c:f2:f6:7b:1b:fe:18:62:d4:6f:8f:d0:87:f9:47:dd:
a3:d8:f6:2a:62:c5:f0:20:3f:b2:e2:3b:b7:99:af:49:2c:4a:
5f:90:90:29:67:54:17:fb:96:5d:7f:c4:b5:b9:b1:b6:b6:57:
eb:fc:fa:83:6b:c2:b3:d1:f2:0f:1e:db:da:36:5c:61:e9:cb:
ce:b9:ae:7b:90:82:9f:2c:8d:26:34:e9:15:08:e2:a6:bf:48:
cb:84:9d:c2:aa:ec:a7:42:98:9f:d4:77:69:bd:78:80:88:2e:
a0:38:d0:ea:54:2d:fc:a7:ea:f5:c7:11:67:4d:99:ff:97:8a:
ef:89:71:bd:54:54:61:f7:cf:a9:29:00:16:20:8c:67:b0:1e:
79:01:8d:c7:2f:e9:23:e6:d1:99:27:c4:d2:10:ae:ae:58:b6:
7b:ec:1e:54:e1:4a:21:07:5c:4e:53:c2:83:96:75:43:4b:e7:
cc:72:d9:e1:b8:36:a8:69:af:29:02:4c:0d:c3:29:4f:6f:74:
69:78:1d:48:8c:ea:b9:e8:ec:9b:18:69:3f:f1:bd:47:4e:08:
d1:b6:0f:b9:c8:41:d2:77:ab:a6:24:c8:01:e0:01:4c:1f:d5:
11:6c:30:df:9c:e6:8a:96:fa:56:5c:d1:69:6a:b4:09:20:49:
fe:2b:6f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:00:28 2025 by rpki-client