Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2VES_p_HjypKRxBsARAKDCmQWeA.roa
File: 2VES_p_HjypKRxBsARAKDCmQWeA.roa (raw, json)
Hash identifier: /uWKb3Yiyju2rk45TWdIAfXNQgXGKnSEVu6zncgJOow=
Subject key identifier: D9:51:12:FE:9F:C7:8F:2A:4A:47:10:6C:01:10:0A:0C:29:90:59:E0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196A433A6C084AAE95026FCEDF9760C7EFD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2VES_p_HjypKRxBsARAKDCmQWeA.roa
Signing time: Tue 06 May 2025 06:06:10 +0000
ROA not before: Tue 06 May 2025 06:06:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
37.202.220.0/24 maxlen: 24
151.242.190.0/24 maxlen: 24
151.242.194.0/24 maxlen: 24
151.242.254.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 06:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:33:a6:c0:84:aa:e9:50:26:fc:ed:f9:76:0c:7e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 6 06:06:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d95112fe9fc78f2a4a47106c01100a0c299059e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:3c:83:a8:83:a5:cc:c1:1f:c5:86:61:f5:
da:c3:70:9a:b8:55:0c:7f:d3:a0:e2:37:54:c8:36:
8f:05:24:3f:fe:ca:a4:1f:ed:fc:40:96:56:ee:df:
a4:53:8b:82:05:46:6c:d1:e3:1d:51:3e:fb:4b:61:
d1:56:65:cf:99:9d:2a:02:3f:47:ea:88:55:8d:59:
53:5d:83:f6:95:ac:59:79:9e:64:55:b7:f6:34:ea:
87:c0:f1:ff:50:a7:1a:4e:85:56:ad:ec:a6:a2:70:
a1:d0:25:0c:7a:d1:36:f5:ca:a8:24:b6:ab:54:70:
81:c8:e6:35:ad:6e:96:e7:ed:19:29:44:5d:20:ee:
ed:a9:a8:70:d4:eb:bf:5b:c7:81:de:ad:ef:bc:98:
2e:32:7b:8e:71:a1:a0:f8:53:01:e3:0d:1c:a7:9d:
9c:f5:fb:81:e0:98:fb:56:cd:85:65:15:20:62:7a:
81:51:77:d4:43:eb:50:37:92:e5:a4:23:dd:03:dd:
97:c0:f0:a1:48:20:bc:a4:1c:38:63:8a:6d:47:fb:
43:fc:92:c9:cb:e4:c5:f5:e5:bf:61:6d:f8:f3:b1:
69:c4:35:e2:4a:de:01:1f:e6:43:e4:87:82:a9:d8:
c4:89:7c:7f:67:b8:18:48:4e:7c:e0:2e:8f:5a:59:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:51:12:FE:9F:C7:8F:2A:4A:47:10:6C:01:10:0A:0C:29:90:59:E0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2VES_p_HjypKRxBsARAKDCmQWeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.201.0/24
37.202.220.0/24
151.242.190.0/24
151.242.194.0/24
151.242.254.0/24
151.243.228.0/24
151.243.243.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f9:a2:cd:1a:fc:15:14:a8:44:7c:9c:34:31:72:22:53:3b:
ea:b8:29:87:a8:7c:88:61:23:49:5c:fd:60:e9:e5:f5:27:a2:
67:c1:fc:d2:b1:84:f2:3c:9c:74:e0:ae:a2:92:68:6e:4e:98:
9f:e0:7c:eb:6e:5a:af:04:90:04:65:8c:99:7a:11:36:48:46:
46:c8:8a:10:81:9b:c1:2e:52:4a:c8:53:cb:fc:23:e8:20:f4:
32:c7:c7:c0:8a:c3:22:b8:ca:37:d2:ae:ad:32:2c:02:80:b6:
5c:60:74:44:b5:bd:e1:e8:c4:c0:1e:f2:42:f4:49:4e:4c:8b:
35:26:e9:4c:c1:74:65:58:13:ab:96:a5:b9:bf:3e:c2:d1:ec:
c3:43:ab:3c:06:75:7b:bb:5b:fa:5d:8f:01:ea:5c:e9:05:0f:
34:0e:b5:17:25:9c:32:43:d4:b8:9a:21:21:ff:75:55:ed:23:
bb:40:ae:48:ff:ac:76:58:a3:ec:73:65:d2:82:0a:be:db:49:
3d:e4:f7:92:0c:34:40:d4:cc:e5:16:8a:27:90:78:e6:bc:96:
fc:f5:24:8c:c6:85:42:9e:25:a0:e6:46:ae:0b:9c:a6:b9:d0:
0b:22:f7:09:12:d3:f4:9b:07:bd:a6:87:97:7e:fd:f8:63:3a:
a9:48:92:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:08:23 2025 by rpki-client