Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tnbiWkiWP0-4fL4NxQUbYvTjgG4.roa
File: tnbiWkiWP0-4fL4NxQUbYvTjgG4.roa (raw, json)
Hash identifier: lrxrId3+LP2vVj3RfADN4AwbJIrs51zgJxX6CPDuVIU=
Subject key identifier: B6:76:E2:5A:48:96:3F:4F:B8:7C:BE:0D:C5:05:1B:62:F4:E3:80:6E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01945EED84EDDE272B95DDAA5912556B47CD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tnbiWkiWP0-4fL4NxQUbYvTjgG4.roa
Signing time: Mon 13 Jan 2025 09:10:11 +0000
ROA not before: Mon 13 Jan 2025 09:10:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.203.0/24 maxlen: 24
37.202.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Feb 2025 06:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5e:ed:84:ed:de:27:2b:95:dd:aa:59:12:55:6b:47:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 13 09:10:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b676e25a48963f4fb87cbe0dc5051b62f4e3806e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:dc:e3:31:f9:b5:56:8e:91:7a:af:a5:22:3c:
e9:50:ae:f3:71:27:55:b3:21:58:29:e9:f7:ba:dc:
30:f6:53:a1:6e:d6:89:84:ba:73:f5:4e:e6:5f:8f:
d4:96:c6:4d:56:2c:d2:2b:63:f5:ee:4c:8c:c8:41:
91:f0:0d:0f:37:c9:70:a2:51:64:b3:40:cc:e0:c2:
f5:23:89:31:d5:c2:04:96:4b:0e:45:79:30:54:d6:
8a:04:47:63:87:ca:30:f2:00:28:51:ae:bd:fd:0c:
40:45:db:6b:5f:39:29:c1:f0:77:61:77:91:57:78:
78:83:75:8d:fa:79:a9:fb:6b:87:6b:a6:71:6b:76:
f0:91:60:cb:57:a1:b5:84:71:f6:96:fe:39:f3:a5:
c2:69:dc:6c:b6:99:d1:4c:14:0d:61:02:4e:eb:26:
20:d2:59:05:e2:c5:f2:39:62:c8:bd:72:bf:8e:cc:
9f:ee:5e:b7:fa:03:95:bc:c4:74:7c:c8:23:fb:b6:
b4:86:cc:50:8f:e9:7e:ac:58:fe:24:41:8b:7f:91:
c2:c9:fd:8e:48:10:75:e4:a1:0e:87:2b:9d:d7:44:
3b:40:67:5f:7a:c3:d8:47:80:3a:1b:bd:21:e0:c6:
09:ed:0d:b6:2b:c0:22:72:7e:b5:56:3a:39:d2:e8:
d5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:76:E2:5A:48:96:3F:4F:B8:7C:BE:0D:C5:05:1B:62:F4:E3:80:6E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tnbiWkiWP0-4fL4NxQUbYvTjgG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
37.202.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:23:ca:64:bc:d0:73:bc:10:73:31:74:65:41:cf:38:5b:5a:
d0:16:f3:40:a8:a6:a4:b8:e8:0b:77:8a:12:ce:8c:ac:9a:eb:
24:aa:5f:73:10:1d:27:c5:45:b0:ef:bc:e9:8f:e1:52:6d:f6:
8f:ac:4e:25:a0:b8:67:8f:91:08:0d:4f:d0:7a:fe:8c:ba:6a:
5c:25:27:e6:5e:40:3b:02:07:38:f1:2f:03:8d:92:43:d3:5b:
72:a2:53:6c:5b:e3:57:76:1c:56:70:45:b1:47:93:4b:8b:48:
24:3c:d1:69:4b:e5:89:1e:2f:e0:8e:d8:3d:c5:ec:7d:bb:52:
b5:fa:c6:a5:d4:d9:14:50:79:fa:5d:72:20:18:51:f0:c7:22:
c5:00:88:15:78:9a:9e:5d:10:1c:94:81:36:31:ed:10:7a:d0:
f1:74:bf:2f:a5:71:dd:1a:20:2a:40:d6:e5:58:c8:ed:5e:ec:
bf:eb:e7:c2:5d:d8:03:a1:f6:de:4a:92:c6:14:fe:20:ac:af:
0b:ca:15:7d:cf:e3:bc:1c:bf:6e:ef:36:87:89:99:9a:cb:31:
79:4e:1b:40:fc:72:e4:a8:e1:8e:10:93:f7:63:51:1f:58:86:
a5:66:77:46:ec:f6:fb:53:64:40:c0:9b:49:2c:73:65:18:74:
29:07:43:6c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZRe7YTt3icrld2qWRJVa0fNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTEzMDkxMDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjc2ZTI1YTQ4OTYzZjRmYjg3Y2JlMGRjNTA1MWI2MmY0ZTM4MDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tzjMfm1Vo6Req+lIjzpUK7zcSdV
syFYKen3utww9lOhbtaJhLpz9U7mX4/UlsZNVizSK2P17kyMyEGR8A0PN8lwolFk
s0DM4ML1I4kx1cIElksORXkwVNaKBEdjh8ow8gAoUa69/QxARdtrXzkpwfB3YXeR
V3h4g3WN+nmp+2uHa6Zxa3bwkWDLV6G1hHH2lv4586XCadxstpnRTBQNYQJO6yYg
0lkF4sXyOWLIvXK/jsyf7l63+gOVvMR0fMgj+7a0hsxQj+l+rFj+JEGLf5HCyf2O
SBB15KEOhyud10Q7QGdfesPYR4A6G70h4MYJ7Q22K8Aicn61Vjo50ujVzwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLZ24lpIlj9PuHy+DcUFG2L044BuMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdG5iaVdraVdQMC00Zkw0TnhRVWJZdlRqZ0c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJcrLAwQA
JcrOMA0GCSqGSIb3DQEBCwUAA4IBAQCpI8pkvNBzvBBzMXRlQc84W1rQFvNAqKak
uOgLd4oSzoysmuskql9zEB0nxUWw77zpj+FSbfaPrE4loLhnj5EIDU/Qev6Mumpc
JSfmXkA7Agc48S8DjZJD01tyolNsW+NXdhxWcEWxR5NLi0gkPNFpS+WJHi/gjtg9
xex9u1K1+sal1NkUUHn6XXIgGFHwxyLFAIgVeJqeXRAclIE2Me0QetDxdL8vpXHd
GiAqQNblWMjtXuy/6+fCXdgDofbeSpLGFP4grK8LyhV9z+O8HL9u7zaHiZmayzF5
ThtA/HLkqOGOEJP3Y1EfWIalZndG7Pb7U2RAwJtJLHNlGHQpB0Ns
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:49:27 2025 by rpki-client