Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wAksytM2x08Po1stBZe8hGIo4uc.roa
File: wAksytM2x08Po1stBZe8hGIo4uc.roa (raw, json)
Hash identifier: TmtV7lJKMVJCKnpgFxtOqf7e9i//rCxhwtSieGSG++M=
Subject key identifier: C0:09:2C:CA:D3:36:C7:4F:0F:A3:5B:2D:05:97:BC:84:62:28:E2:E7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0195653EA8883FBD091248C53E0FF83FFCF2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wAksytM2x08Po1stBZe8hGIo4uc.roa
Signing time: Wed 05 Mar 2025 07:39:19 +0000
ROA not before: Wed 05 Mar 2025 07:39:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
37.202.223.0/24 maxlen: 24
151.240.105.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.242.0/24 maxlen: 24
151.243.83.0/24 maxlen: 24
151.243.104.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.184.0/22 maxlen: 24
151.243.204.0/22 maxlen: 24
151.243.212.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 09:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:3e:a8:88:3f:bd:09:12:48:c5:3e:0f:f8:3f:fc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 5 07:39:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0092ccad336c74f0fa35b2d0597bc846228e2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:20:ca:7c:bb:a1:7d:5e:0a:3d:b1:5e:38:
c6:96:e4:b2:86:33:f2:0f:fb:32:ec:3e:d6:0f:46:
b2:6b:3c:16:52:d5:71:36:55:ca:b4:6a:0d:24:17:
bb:fb:09:83:08:24:10:61:53:7b:e4:a9:42:ff:ae:
80:73:c4:16:37:d2:11:89:58:2e:bf:a0:b9:63:bd:
ea:a0:04:dd:4f:dd:12:46:d7:96:dc:c9:f2:86:c6:
c6:96:fe:e6:b0:32:0d:1c:04:27:bf:b8:4a:9f:e8:
15:e5:01:06:a7:f9:2c:1b:8f:1e:8c:9a:a1:81:4c:
99:58:bb:fb:f7:91:52:da:d1:bc:da:ee:f7:f9:57:
1d:07:ab:dd:dc:26:0e:00:17:12:12:2d:ef:a3:3d:
e9:e6:a5:58:36:3d:53:e5:55:ab:08:fc:49:44:dd:
8d:67:f7:80:46:bc:e8:52:84:c9:6a:cd:e2:86:27:
a8:f0:08:69:4c:de:ca:05:5a:a7:66:ce:a0:34:cf:
96:e5:7e:89:22:94:2a:81:a4:e9:3c:3b:53:4d:0f:
c3:3d:4c:a9:f0:9e:b7:bc:64:ff:36:a9:a1:de:da:
e5:e5:15:47:b6:b6:a3:ce:00:cb:45:c9:d2:fa:16:
c9:dc:4b:b9:55:58:e8:13:21:e6:50:b5:5f:a7:a3:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:09:2C:CA:D3:36:C7:4F:0F:A3:5B:2D:05:97:BC:84:62:28:E2:E7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wAksytM2x08Po1stBZe8hGIo4uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.210.0/24
37.202.212.0/23
37.202.223.0/24
151.240.105.0/24
151.240.140.0/24
151.241.110.0/24
151.242.14.0/24
151.242.20.0/24
151.242.192.0/20
151.242.242.0/24
151.243.83.0/24
151.243.104.0/24
151.243.158.0/24
151.243.162.0/24
151.243.184.0/22
151.243.204.0/22
151.243.212.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:a8:1f:74:e6:22:be:2d:16:d3:b3:f5:4d:d2:22:29:fd:e0:
be:7d:f7:b4:85:33:84:d7:a8:a1:56:5a:91:d3:4a:f1:ce:72:
d0:4f:7c:fe:ab:b9:15:c3:85:93:d5:90:f3:2a:47:c0:bf:8b:
d6:c0:5f:c1:78:27:af:22:89:d9:ba:84:07:68:1c:47:72:35:
98:b3:42:26:f4:d3:b7:17:f8:da:5d:d3:6c:c5:66:b3:78:77:
93:a2:79:0d:0e:e4:96:06:75:a5:00:58:6f:95:c0:ad:28:91:
26:b0:f4:6e:bf:a4:4f:d0:e2:dc:97:78:69:14:35:2c:c1:96:
2d:91:00:5c:e8:f8:1c:86:71:cb:2d:e0:5f:b2:00:f7:48:17:
67:05:46:56:13:fe:b2:84:f9:dd:f4:fa:f6:8f:cb:97:54:bb:
d2:4b:e2:85:a7:7e:7e:e5:e0:d8:10:42:c3:c6:9d:03:5c:58:
e3:fe:92:c0:a7:9d:31:e0:f9:0c:c6:28:5f:3c:42:72:d3:c6:
56:5e:e7:26:d0:0f:f0:31:11:5c:29:e9:63:83:8e:bf:e4:e2:
11:cf:97:c5:b7:b6:c1:46:50:fc:eb:3b:f9:83:bb:50:0a:4e:
4a:07:a2:04:f3:61:aa:b2:73:b5:d8:65:d2:a5:b1:b3:78:22:
74:e3:36:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:09 2025 by rpki-client