Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EVQTuqUPWEAT9d4jLIh3xoMNsCM.roa
File: EVQTuqUPWEAT9d4jLIh3xoMNsCM.roa (raw, json)
Hash identifier: 9NduuSLoTdhqawzwwQkGDex+xDzdO1L3r5lUkGg3Nco=
Subject key identifier: 11:54:13:BA:A5:0F:58:40:13:F5:DE:23:2C:88:77:C6:83:0D:B0:23
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019869263CED71EA5F9380E91E2B87E019C0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EVQTuqUPWEAT9d4jLIh3xoMNsCM.roa
Signing time: Sat 02 Aug 2025 04:59:30 +0000
ROA not before: Sat 02 Aug 2025 04:59:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.242.81.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.244.180.0/24 maxlen: 24
151.244.224.0/24 maxlen: 24
151.245.3.0/24 maxlen: 24
151.245.128.0/24 maxlen: 24
151.245.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Aug 2025 04:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:26:3c:ed:71:ea:5f:93:80:e9:1e:2b:87:e0:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 2 04:59:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=115413baa50f584013f5de232c8877c6830db023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:d8:3a:43:83:4a:69:10:29:ea:6d:59:da:
a0:1e:68:43:6f:73:07:c3:4c:77:e6:7a:c4:f0:c2:
69:6c:d2:27:3c:5a:1f:88:7a:72:b5:e7:7c:20:c8:
bd:43:4b:ea:26:eb:9a:92:d0:ee:82:21:7d:c8:87:
1b:6a:ed:a3:19:f2:19:f7:ad:a5:44:5b:fa:20:76:
ce:dd:f5:aa:37:35:29:2d:b6:45:37:6f:8c:79:1d:
d8:bb:51:95:a9:99:3a:6c:42:ed:6c:c4:b3:83:9e:
c4:91:9f:63:ae:b5:c6:33:d4:51:db:8e:e1:86:9d:
7e:5f:70:dd:9a:60:83:80:3a:18:26:b4:50:b4:ab:
6f:60:d3:38:c9:7a:13:d1:fe:9d:49:d7:c3:95:86:
21:3a:47:ca:74:0b:ce:21:ed:65:0f:52:4e:25:7c:
3c:4f:94:3c:6d:ac:5f:1e:06:bd:0f:fc:5b:b7:b1:
f4:b0:05:95:2a:9b:a3:43:4b:52:b1:55:7e:bb:7b:
a4:b3:1d:8a:9e:2e:c4:48:fa:cc:5a:da:cd:df:d8:
59:a8:f1:41:07:a7:bd:1d:3f:07:93:31:3e:6f:41:
9d:4c:51:13:72:e5:58:db:dd:23:26:9e:35:8f:39:
d1:d9:51:88:5f:07:1a:39:7e:dc:b1:64:a4:5d:d1:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:54:13:BA:A5:0F:58:40:13:F5:DE:23:2C:88:77:C6:83:0D:B0:23
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EVQTuqUPWEAT9d4jLIh3xoMNsCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.201.0/24
151.242.81.0/24
151.243.7.0/24
151.243.228.0/24
151.243.243.0/24
151.244.54.0/24
151.244.180.0/24
151.244.224.0/24
151.245.3.0/24
151.245.128.0/24
151.245.133.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:2e:5b:d5:3b:32:59:37:5c:8a:6e:bf:cb:db:19:ae:82:db:
2f:87:0a:48:ae:16:bc:97:6f:9c:61:09:39:42:73:29:1d:b3:
44:bc:b6:87:fa:bf:bc:7b:36:5a:cb:33:c7:0b:5c:5f:13:2b:
ca:cd:35:f2:4c:d5:d8:fb:f1:9a:53:19:27:0b:68:1e:67:81:
96:a1:d2:57:95:35:ea:fb:4f:fa:02:80:3b:47:a8:90:6b:09:
7d:86:86:b0:a3:c5:d0:77:79:ef:a5:b0:4d:8e:e9:2b:42:65:
89:e7:b9:5f:43:53:cd:32:f9:d1:fd:43:38:32:ad:69:ed:e7:
28:bb:84:f7:fa:b7:1f:45:89:60:7f:8b:c1:cf:c3:7c:03:41:
61:45:44:e4:a5:b7:f3:a3:87:a0:7a:8e:a1:5c:c9:34:f1:d9:
13:c6:d2:ef:63:97:9d:3d:bb:69:16:2e:5f:a4:87:32:92:6c:
75:a5:ec:57:b4:98:1e:c1:1a:89:a1:9b:9f:aa:b9:39:da:57:
b5:bc:56:75:d1:1d:8a:93:17:a8:c9:a8:2c:1d:72:49:5f:d8:
a0:7b:b9:c9:69:d4:85:5a:1f:22:5b:58:e3:ab:ac:21:50:99:
a1:16:60:3f:06:1e:f2:4a:56:fa:42:91:58:c3:29:44:7f:a7:
af:5d:21:10
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZhpJjztcepfk4DpHiuH4BnAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODAyMDQ1OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTU0MTNiYWE1MGY1ODQwMTNmNWRlMjMyYzg4NzdjNjgzMGRiMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5zYOkODSmkQKeptWdqgHmhDb3MH
w0x35nrE8MJpbNInPFofiHpyted8IMi9Q0vqJuuaktDugiF9yIcbau2jGfIZ962l
RFv6IHbO3fWqNzUpLbZFN2+MeR3Yu1GVqZk6bELtbMSzg57EkZ9jrrXGM9RR247h
hp1+X3DdmmCDgDoYJrRQtKtvYNM4yXoT0f6dSdfDlYYhOkfKdAvOIe1lD1JOJXw8
T5Q8baxfHga9D/xbt7H0sAWVKpujQ0tSsVV+u3uksx2Kni7ESPrMWtrN39hZqPFB
B6e9HT8HkzE+b0GdTFETcuVY290jJp41jznR2VGIXwcaOX7csWSkXdHaewIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFBFUE7qlD1hAE/XeIyyId8aDDbAjMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRVZRVHVxVVBXRUFUOWQ0akxJaDN4b01Oc0NNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAJcrCAwQA
JcrJAwQAl/JRAwQAl/MHAwQAl/PkAwQAl/PzAwQAl/Q2AwQAl/S0AwQAl/TgAwQA
l/UDAwQAl/WAAwQAl/WFMA0GCSqGSIb3DQEBCwUAA4IBAQAuLlvVOzJZN1yKbr/L
2xmugtsvhwpIrha8l2+cYQk5QnMpHbNEvLaH+r+8ezZayzPHC1xfEyvKzTXyTNXY
+/GaUxknC2geZ4GWodJXlTXq+0/6AoA7R6iQawl9hoawo8XQd3nvpbBNjukrQmWJ
57lfQ1PNMvnR/UM4Mq1p7ecou4T3+rcfRYlgf4vBz8N8A0FhRUTkpbfzo4egeo6h
XMk08dkTxtLvY5edPbtpFi5fpIcykmx1pexXtJgewRqJoZufqrk52le1vFZ10R2K
kxeoyagsHXJJX9ige7nJadSFWh8iW1jjq6whUJmhFmA/Bh7ySlb6QpFYwylEf6ev
XSEQ
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:04:17 2025 by rpki-client