Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CCMkyt-Ac7s98xGNVivEuOZSDcU.roa
File: CCMkyt-Ac7s98xGNVivEuOZSDcU.roa (raw, json)
Hash identifier: LqghspFbaI+JMksfcFYvUjTk9QZhH4E2D2v5isSDF8U=
Subject key identifier: 08:23:24:CA:DF:80:73:BB:3D:F3:11:8D:56:2B:C4:B8:E6:52:0D:C5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019735F8562310B876564F09FBB789702645
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CCMkyt-Ac7s98xGNVivEuOZSDcU.roa
Signing time: Tue 03 Jun 2025 13:25:56 +0000
ROA not before: Tue 03 Jun 2025 13:25:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.202.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.100.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.242.39.0/24 maxlen: 24
151.242.67.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.242.159.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.244.78.0/24 maxlen: 24
151.245.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 14:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:35:f8:56:23:10:b8:76:56:4f:09:fb:b7:89:70:26:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 3 13:25:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=082324cadf8073bb3df3118d562bc4b8e6520dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ed:f2:09:c2:c6:e5:10:fe:e4:d1:84:a4:32:
f8:68:17:5f:4a:7a:0e:58:0f:ba:f7:3a:7c:e5:d5:
37:ab:8e:3f:17:a1:a1:c9:f1:ff:33:ba:98:41:99:
4e:d0:21:93:c9:fe:ff:5e:8a:4f:a6:12:8d:c3:f5:
35:2f:26:68:f7:62:9a:9d:6e:36:3d:97:65:e1:55:
95:b4:1f:b1:ed:2d:74:f5:ab:58:2d:77:2b:33:fb:
d3:0f:5f:0c:85:32:83:9d:69:1f:d3:44:1b:6b:76:
80:2f:3d:ee:48:67:e8:2a:f7:41:ce:8e:2f:a4:92:
ba:81:b4:cc:70:33:9f:c4:78:29:f5:7d:08:51:1f:
69:bb:b9:d1:fb:b9:ed:2f:64:1e:32:b7:00:a3:23:
cd:85:92:d2:d6:bf:4b:55:fe:6f:77:a0:7a:6a:a8:
81:35:07:34:be:f2:0e:e1:65:c4:44:e5:32:f7:d7:
be:62:33:51:c6:3a:b4:5c:9f:28:76:ef:04:d6:a7:
c0:c7:cd:48:8e:16:d6:ac:dc:a2:52:01:2e:fe:25:
9b:30:68:97:5d:47:89:c1:37:1d:28:58:c0:09:de:
5f:3f:5e:13:01:49:29:ea:d9:bb:31:8a:9b:76:5a:
a5:75:dd:de:eb:48:ac:27:27:d8:0b:17:67:4f:46:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:23:24:CA:DF:80:73:BB:3D:F3:11:8D:56:2B:C4:B8:E6:52:0D:C5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CCMkyt-Ac7s98xGNVivEuOZSDcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.240.17.0/24
151.240.100.0/24
151.241.76.0/24
151.242.39.0/24
151.242.67.0/24
151.242.117.0/24
151.242.159.0/24
151.243.6.0/24
151.243.160.0/22
151.244.78.0/24
151.245.112.0/24
Signature Algorithm: sha256WithRSAEncryption
86:62:65:6e:97:f3:86:4f:3a:45:ad:6a:2c:e0:e4:d8:c8:f8:
f6:25:7a:03:39:2f:f4:bc:aa:af:42:32:b6:79:95:45:d5:d8:
00:91:03:8a:f7:bb:68:75:86:c8:29:8f:41:8a:9a:f4:7b:0a:
43:69:5e:15:72:e8:f6:11:77:26:45:16:9b:c6:e6:95:2c:80:
11:10:f2:04:61:a7:42:a6:a6:c4:2c:66:6c:b1:67:8e:1d:70:
67:5e:4d:e1:9b:4c:14:8d:e7:70:95:86:06:11:bb:f4:96:13:
9f:82:83:8d:f0:e1:8e:a1:5d:b8:94:07:68:53:99:1a:8a:47:
b4:df:cd:3a:ec:d1:e7:93:0f:c1:81:88:9f:00:a6:b9:29:92:
d1:72:6a:7d:a6:bc:c3:c5:d0:cc:6e:08:2a:ed:be:df:a8:20:
ec:94:09:c5:e6:10:cd:57:92:5c:13:76:23:6b:17:e8:a9:76:
e2:13:de:1c:b7:66:60:dd:41:ce:27:82:7e:6f:ae:61:e0:48:
a4:9e:87:c8:ac:46:e5:62:7b:9a:48:f8:d4:13:8d:53:bb:26:
55:35:a0:9a:20:ec:dd:9f:73:78:75:5d:b5:bd:3e:72:a3:62:
eb:3d:1d:fc:fd:60:b0:7c:93:f1:5e:c6:e1:1c:71:99:6c:49:
dc:e9:0b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:43:42 2025 by rpki-client