Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zvgwKQaXnRlJsEcKG9hK7ZfpbWA.roa
File: zvgwKQaXnRlJsEcKG9hK7ZfpbWA.roa (raw, json)
Hash identifier: qqSG9YZlgIdVN4qF68asEI/2S1mxhXPsObMyXj24U4E=
Subject key identifier: CE:F8:30:29:06:97:9D:19:49:B0:47:0A:1B:D8:4A:ED:97:E9:6D:60
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196B39E818086B9D41289F49ABC6E4E7E2E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zvgwKQaXnRlJsEcKG9hK7ZfpbWA.roa
Signing time: Fri 09 May 2025 05:57:11 +0000
ROA not before: Fri 09 May 2025 05:57:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.202.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.100.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.242.39.0/24 maxlen: 24
151.242.67.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.242.159.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 09 May 2025 07:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:9e:81:80:86:b9:d4:12:89:f4:9a:bc:6e:4e:7e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 9 05:57:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cef8302906979d1949b0470a1bd84aed97e96d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:02:6d:af:c1:bc:dc:d1:fe:3e:aa:44:79:
5f:02:2d:ef:05:7b:ea:dd:c6:36:3f:6e:34:0d:70:
9e:a3:05:ea:ab:61:e5:25:ce:5b:f2:c8:d6:5c:2c:
6b:45:ff:a4:ef:37:76:69:5c:26:bf:9d:9c:f9:de:
45:c5:41:0b:e3:8a:d3:4e:e0:fc:31:9c:61:e8:95:
33:5c:6b:c2:0a:dd:c5:dd:69:21:c6:ad:50:f5:40:
23:38:d9:d0:52:fb:f1:ed:5a:1c:42:a0:69:19:ae:
d4:86:21:ff:70:d8:88:1c:f4:f2:e4:30:fd:28:ce:
e1:09:8b:64:fd:00:74:43:3c:d1:62:d1:9b:ed:ae:
2e:a9:d4:43:83:3e:36:0c:bf:29:51:0d:e4:ec:ee:
79:0b:00:1d:16:69:a6:96:a5:a1:43:d8:32:dc:ce:
a4:aa:83:2d:39:f4:10:9d:2c:68:70:10:42:f1:66:
f9:69:ce:e6:27:72:03:f7:48:59:dd:0f:8e:bc:bc:
bd:87:1d:94:84:3e:d1:5a:43:2d:ca:8d:bb:6c:65:
45:5a:48:b2:05:1f:80:7e:98:29:bd:c7:06:e0:cb:
8f:e0:a7:ca:f7:7a:9b:e9:4e:90:f0:e2:86:24:95:
60:26:a7:8b:47:55:21:31:f4:b7:38:8a:ff:b6:84:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F8:30:29:06:97:9D:19:49:B0:47:0A:1B:D8:4A:ED:97:E9:6D:60
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zvgwKQaXnRlJsEcKG9hK7ZfpbWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.240.17.0/24
151.240.100.0/24
151.241.76.0/24
151.242.39.0/24
151.242.67.0/24
151.242.117.0/24
151.242.159.0/24
151.243.6.0/24
151.243.160.0/22
Signature Algorithm: sha256WithRSAEncryption
72:3b:4c:3c:0c:2e:33:37:58:00:11:25:f7:81:0c:c4:63:c0:
24:28:10:cf:5c:cb:86:91:c9:92:53:4d:81:63:84:b2:a2:21:
9b:c4:74:0e:d5:7b:f4:c0:2e:8e:16:fd:85:d6:10:20:04:62:
00:d8:6f:81:a0:f5:75:0f:63:d7:83:31:eb:9d:df:85:43:c5:
1a:82:0f:6b:c0:54:37:bd:13:43:01:4c:f2:05:a6:b7:22:2b:
26:be:60:76:8b:57:0f:2d:10:78:b1:45:b5:04:ee:b7:35:c3:
77:44:82:0a:96:d5:5f:38:e6:3c:be:a6:8b:30:06:89:94:3c:
b6:1a:1d:1b:44:61:65:c8:6c:fc:f5:31:d8:81:cc:ca:35:56:
83:c7:80:df:d3:ad:47:34:b6:cf:c7:9b:35:73:f6:74:bb:88:
fb:9f:21:62:66:56:c0:7a:e7:3d:26:78:6d:fc:0c:02:62:9b:
d8:00:af:e7:08:5d:95:d1:59:e7:bc:de:47:90:dd:30:7f:be:
8f:e3:08:75:aa:8d:95:de:70:42:d3:02:e2:cf:88:5c:f1:84:
91:3c:48:f9:f6:74:49:e6:be:84:38:4e:94:6c:c6:2c:a7:d4:
ec:5e:88:4a:50:2a:88:6c:e3:39:a0:6c:18:28:61:72:e0:1b:
02:d4:3f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:02:04 2025 by rpki-client