Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AZBfdKJg6mJAasb7y2s57Gdy_00.roa
File: AZBfdKJg6mJAasb7y2s57Gdy_00.roa (raw, json)
Hash identifier: 0Q7IiuBnUTmi3tPHD5mDPcyr770ZYwQR5r6rw2t0D+s=
Subject key identifier: 01:90:5F:74:A2:60:EA:62:40:6A:C6:FB:CB:6B:39:EC:67:72:FF:4D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019540E8A2C9D823910458E60E1BDC19CF8A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AZBfdKJg6mJAasb7y2s57Gdy_00.roa
Signing time: Wed 26 Feb 2025 06:19:02 +0000
ROA not before: Wed 26 Feb 2025 06:19:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.203.0/24 maxlen: 24
37.202.206.0/24 maxlen: 24
151.242.69.0/24 maxlen: 24
151.243.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Feb 2025 07:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:40:e8:a2:c9:d8:23:91:04:58:e6:0e:1b:dc:19:cf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 26 06:19:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01905f74a260ea62406ac6fbcb6b39ec6772ff4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:cb:1b:8d:30:4b:a2:ae:2b:46:cd:a4:c9:
f1:d3:90:6a:ec:f1:b2:3d:9a:8e:8f:f1:61:ab:51:
b7:f1:f0:e5:9d:ec:78:7f:03:a8:1a:9e:bf:3c:43:
c8:a5:e9:8f:a5:35:f4:1b:64:00:be:ba:82:6a:7d:
a7:8b:ce:15:30:e7:26:b6:fe:95:53:9c:f0:da:9a:
a2:58:8e:58:1c:4a:f5:b4:61:ae:2b:91:f3:89:f0:
43:b3:07:8b:ac:cc:f2:f2:dc:14:c9:18:d8:d5:45:
8c:6f:fa:e1:01:cb:71:da:f8:f2:8b:e2:63:14:6e:
dc:74:58:3c:ec:b6:cb:ba:5f:79:87:04:65:c6:28:
4d:a6:aa:9d:a4:7b:da:7a:a9:8a:a3:c3:35:e0:e1:
75:85:5c:2d:eb:5c:8e:3c:a9:6f:ba:68:88:95:37:
17:8e:cf:1b:51:b4:a1:43:93:3f:e8:b4:39:3e:d5:
c3:06:e1:d2:c2:df:ec:58:39:0e:f1:c0:70:dd:ec:
cf:46:38:ff:bf:ae:18:8c:66:ab:53:c8:3a:41:39:
a5:6e:cc:2b:a6:3a:26:46:17:a6:ea:bb:c6:05:ef:
af:41:0b:6e:dc:6b:b8:ef:4f:d3:8c:15:f3:b8:14:
a0:3b:98:84:e3:0b:a5:e0:c9:4b:d6:73:f3:31:29:
ad:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:90:5F:74:A2:60:EA:62:40:6A:C6:FB:CB:6B:39:EC:67:72:FF:4D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AZBfdKJg6mJAasb7y2s57Gdy_00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.203.0/24
37.202.206.0/24
151.242.69.0/24
151.243.41.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2a:9c:b1:63:74:29:60:3c:7c:56:1d:e5:e9:7c:29:f3:c0:
f7:b2:be:81:8a:aa:96:d0:d3:1f:44:76:30:ee:2f:0e:e4:51:
da:78:d3:a6:cb:37:69:21:1b:fc:75:6b:d8:d2:f4:a4:cb:e4:
ac:6d:27:22:d8:73:84:d1:fc:10:be:5a:05:c3:35:3e:1a:e5:
02:f9:ef:4d:01:4f:35:94:f3:e8:b1:96:3a:4a:2a:f3:89:d1:
90:7d:4c:41:d4:2b:48:43:e5:52:d0:a1:72:e3:4f:96:4e:be:
69:14:ea:22:66:39:4c:52:06:4e:13:d1:29:d5:e8:38:22:98:
60:18:01:24:48:ff:59:61:06:02:81:8b:43:28:40:f1:46:2a:
d2:9a:07:69:cc:d6:41:27:68:37:00:2c:8c:ac:b0:06:0f:16:
36:51:72:cb:68:3b:c2:f6:c7:32:83:d1:fb:fc:5e:5d:51:25:
55:95:0f:1b:bb:c7:2f:0d:52:07:bb:58:95:f6:66:44:f2:69:
e4:39:8b:63:b7:07:88:80:12:c6:f7:0d:20:35:b4:c0:d1:77:
e2:35:fa:51:07:ac:cb:22:8c:0f:64:c9:21:6e:67:c4:93:03:
65:0c:b8:9d:c8:6e:b4:07:70:64:a2:d7:32:c9:f9:51:ce:e7:
20:52:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:09:35 2025 by rpki-client