Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/udaIOle0zlEmdjHiPTHq7YDWZe8.roa
File: udaIOle0zlEmdjHiPTHq7YDWZe8.roa (raw, json)
Hash identifier: FY71Jc+iV7xra8AEzCD8t/5A6NlqL3m4whUJrH5IxPo=
Subject key identifier: B9:D6:88:3A:57:B4:CE:51:26:76:31:E2:3D:31:EA:ED:80:D6:65:EF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019423D7AFC2C3270DC3C03BB29D475A8781
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/udaIOle0zlEmdjHiPTHq7YDWZe8.roa
Signing time: Wed 01 Jan 2025 21:48:45 +0000
ROA not before: Wed 01 Jan 2025 21:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199524
IP address blocks: 37.202.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 09:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:af:c2:c3:27:0d:c3:c0:3b:b2:9d:47:5a:87:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 1 21:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9d6883a57b4ce51267631e23d31eaed80d665ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:ff:e5:09:8b:8c:5d:bb:a7:0f:ad:7c:19:
f9:cf:b9:4f:2d:5f:9a:20:45:78:65:5a:12:a1:a5:
31:54:c7:8d:8c:14:34:03:0f:1a:97:94:d6:df:b1:
41:de:78:a0:65:03:48:b9:a0:bd:f4:94:f4:17:99:
f2:d0:36:77:22:85:19:0b:e9:ae:45:78:a3:59:5e:
58:35:47:09:cc:16:bd:1e:05:ce:32:74:ca:cd:e8:
0c:5d:c4:62:76:02:71:9b:46:e4:9f:c4:43:46:47:
a7:e6:87:3d:41:01:c2:90:34:06:6a:73:ba:f8:48:
88:71:5a:83:04:9d:d4:0f:83:fc:75:57:02:ca:cd:
90:02:5d:9f:95:d3:fb:fc:41:06:0c:da:32:9b:a6:
37:9c:31:d0:bd:13:23:e1:e6:34:7a:1e:ec:db:7b:
3b:ee:e4:30:db:3a:23:59:a9:7f:70:ea:b8:7e:d1:
9e:82:4d:de:82:7f:2e:a4:87:00:22:a1:84:5e:4d:
14:ec:90:66:ea:ef:55:d6:f8:ee:44:f2:ab:52:4a:
d6:1a:ab:6c:63:ec:21:33:8e:f5:14:37:cf:35:a2:
7c:15:99:3b:e8:78:f1:c4:cb:ee:6d:d0:02:32:c3:
e3:68:e3:2d:1f:69:8a:f1:45:bd:1e:dd:ac:26:f8:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D6:88:3A:57:B4:CE:51:26:76:31:E2:3D:31:EA:ED:80:D6:65:EF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/udaIOle0zlEmdjHiPTHq7YDWZe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.217.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b7:ee:90:0d:db:75:14:c0:0c:92:87:be:07:f4:e0:a3:12:
00:64:2f:53:82:3f:21:66:6b:b0:ea:03:2c:99:26:f2:f2:1a:
1b:54:0c:21:74:38:4e:54:95:c3:33:08:35:66:be:ef:e3:a2:
87:f6:2b:4e:f4:93:a2:d4:76:65:75:d5:a4:a5:78:94:e0:0c:
e8:0c:fb:ce:ed:0c:e6:3e:e6:4b:f8:34:78:95:00:57:ad:07:
49:fa:2b:bc:36:0a:5c:60:72:d5:40:d6:50:1a:d0:30:cb:3c:
a8:b0:c4:4f:de:16:48:d9:d1:2e:09:d4:96:e0:b1:dd:38:53:
a8:71:5a:2f:2b:71:a8:ed:b4:fb:f5:35:c1:1c:1e:af:0f:05:
92:b1:46:e6:64:ea:57:5f:e8:51:1a:09:2d:ec:75:15:a0:31:
87:29:62:5f:22:20:2e:3e:18:d9:95:fd:15:ba:78:d9:e4:2f:
16:de:8b:8d:7d:3b:86:d9:8a:a8:7a:56:03:3b:cc:22:43:20:
30:88:a1:35:af:f2:dc:81:4e:a2:ed:d1:57:9e:b4:ea:f9:38:
49:fa:06:4c:4d:e1:62:01:38:4a:f1:35:9b:9f:9a:7b:ab:76:
20:c5:b2:3e:07:b2:4e:92:90:93:9d:07:62:42:91:6e:7f:30:
3c:df:5b:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj16/CwycNw8A7sp1HWoeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwMTAxMjE0ODQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWQ2ODgzYTU3YjRjZTUxMjY3NjMxZTIzZDMxZWFlZDgwZDY2NWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDj/5QmLjF27pw+tfBn5z7lPLV+a
IEV4ZVoSoaUxVMeNjBQ0Aw8al5TW37FB3nigZQNIuaC99JT0F5ny0DZ3IoUZC+mu
RXijWV5YNUcJzBa9HgXOMnTKzegMXcRidgJxm0bkn8RDRken5oc9QQHCkDQGanO6
+EiIcVqDBJ3UD4P8dVcCys2QAl2fldP7/EEGDNoym6Y3nDHQvRMj4eY0eh7s23s7
7uQw2zojWal/cOq4ftGegk3egn8upIcAIqGEXk0U7JBm6u9V1vjuRPKrUkrWGqts
Y+whM471FDfPNaJ8FZk76HjxxMvubdACMsPjaOMtH2mK8UW9Ht2sJvhz8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLnWiDpXtM5RJnYx4j0x6u2A1mXvMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdWRhSU9sZTB6bEVtZGpIaVBUSHE3WURXWmU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcrZMA0G
CSqGSIb3DQEBCwUAA4IBAQBGt+6QDdt1FMAMkoe+B/TgoxIAZC9Tgj8hZmuw6gMs
mSby8hobVAwhdDhOVJXDMwg1Zr7v46KH9itO9JOi1HZlddWkpXiU4AzoDPvO7Qzm
PuZL+DR4lQBXrQdJ+iu8NgpcYHLVQNZQGtAwyzyosMRP3hZI2dEuCdSW4LHdOFOo
cVovK3Go7bT79TXBHB6vDwWSsUbmZOpXX+hRGgkt7HUVoDGHKWJfIiAuPhjZlf0V
unjZ5C8W3ouNfTuG2YqoelYDO8wiQyAwiKE1r/LcgU6i7dFXnrTq+ThJ+gZMTeFi
AThK8TWbn5p7q3YgxbI+B7JOkpCTnQdiQpFufzA831s6
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:29:07 2025 by rpki-client