Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yOl2Hov7frExY8i_SagKyJw444U.roa
File: yOl2Hov7frExY8i_SagKyJw444U.roa (raw, json)
Hash identifier: jBFdslj8hZ/yuI5+Amosp8UY6FfDmU5LwNbi3Kgj68c=
Subject key identifier: C8:E9:76:1E:8B:FB:7E:B1:31:63:C8:BF:49:A8:0A:C8:9C:38:E3:85
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019454261CBB7D4350BD7E6ED19E5897FD67
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yOl2Hov7frExY8i_SagKyJw444U.roa
Signing time: Sat 11 Jan 2025 06:56:11 +0000
ROA not before: Sat 11 Jan 2025 06:56:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.205.0/24 maxlen: 24
37.202.208.0/23 maxlen: 24
37.202.209.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
37.202.220.0/24 maxlen: 24
37.202.221.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.20.0/24 maxlen: 24
151.243.137.0/24 maxlen: 24
151.243.162.0/24 maxlen: 24
151.243.222.0/24 maxlen: 24
151.243.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 09:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:54:26:1c:bb:7d:43:50:bd:7e:6e:d1:9e:58:97:fd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 11 06:56:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8e9761e8bfb7eb13163c8bf49a80ac89c38e385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8a:73:88:e6:24:32:01:b6:fc:1c:a8:5a:a4:
33:44:71:e6:cd:83:cd:18:73:17:d6:9b:5f:73:c7:
73:8f:1b:90:bb:37:0d:45:b0:f0:a8:42:55:96:d6:
20:b8:ac:24:d6:e0:6c:41:08:2f:a1:66:b0:a5:ac:
63:6a:0c:6f:6b:5b:42:af:e0:15:4a:cf:3f:43:f8:
18:d7:d0:3d:83:65:54:31:0d:8d:9d:4e:ba:9f:86:
1c:07:39:5e:78:b7:c1:1c:d8:af:c2:a6:02:7a:bb:
5c:5b:8d:e4:d6:a2:8f:59:1b:c0:a7:ef:31:ee:7e:
3d:1d:1f:44:d3:aa:80:36:72:db:0e:75:9b:13:13:
8d:50:63:23:b6:8d:77:ea:8b:00:0f:e1:5c:8e:56:
d1:85:eb:63:5c:d1:81:d9:3c:5f:3f:8c:a3:37:3b:
26:ce:77:1b:66:06:64:c7:24:45:86:d0:e0:ba:a5:
9b:b4:94:8b:2b:da:2d:a4:85:4a:a2:8a:a9:f9:f2:
a6:45:32:8d:67:93:c5:e1:99:9b:a0:61:3b:a2:7c:
1b:69:f1:14:e6:0f:e7:2e:5f:3b:e1:d8:d0:0f:3b:
86:e5:19:34:fc:3c:f8:23:9d:96:91:dc:c2:de:87:
fa:5c:62:98:90:94:e7:8a:33:5d:e7:f6:b3:0a:6c:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E9:76:1E:8B:FB:7E:B1:31:63:C8:BF:49:A8:0A:C8:9C:38:E3:85
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yOl2Hov7frExY8i_SagKyJw444U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.205.0/24
37.202.208.0-37.202.210.255
37.202.212.0/23
37.202.220.0/23
151.242.14.0/24
151.242.20.0/24
151.243.137.0/24
151.243.162.0/24
151.243.222.0/24
151.243.254.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:6f:8c:0e:d4:57:c9:39:47:bb:aa:9c:28:ff:a4:42:23:19:
8f:23:6a:5b:23:a2:82:33:c2:8b:1c:f1:44:62:05:37:bd:7d:
48:79:53:c9:3f:52:d6:2a:61:a3:95:6b:6c:ea:1e:df:45:dc:
4f:d7:87:28:83:15:7d:1c:90:fb:f7:f8:9d:a0:71:cc:6f:b0:
f6:43:28:b0:c7:be:80:64:b9:e2:e5:16:01:7a:21:94:f2:3d:
7e:d8:dc:3f:ad:ca:99:b7:85:d3:ec:01:66:27:ae:04:e5:3d:
6a:f2:11:16:32:07:b3:e0:18:a5:c3:0a:ef:5b:ae:fb:51:4b:
a7:cb:9d:77:79:13:30:00:3b:79:74:f7:3e:90:6c:dc:a2:2a:
f5:2e:3c:40:bd:04:4f:12:38:6b:e4:af:71:c8:c9:2f:f1:3a:
e8:3d:ea:ce:10:48:a6:8f:90:a1:aa:d6:fc:6b:5b:9c:22:55:
6f:29:f7:68:8f:80:14:6f:2b:b8:46:9b:ae:2d:27:85:4e:99:
e2:5f:c0:d1:ec:5b:48:3a:b5:b8:a3:5d:4a:5f:89:9b:60:26:
31:87:23:2f:ac:2f:b4:e6:20:c6:61:60:b8:57:f0:f5:e7:72:
e8:9a:f2:08:be:50:49:31:47:eb:53:3c:2a:b9:00:12:70:25:
8a:4a:0d:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:39 2025 by rpki-client