Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FO2WcL-eQp5VjAAziF2Y-Kf42U8.roa
File: FO2WcL-eQp5VjAAziF2Y-Kf42U8.roa (raw, json)
Hash identifier: OrxjlqAzAkXjzscCtMJe1lGJIiIOXEBOaCFHwl7cC2Q=
Subject key identifier: 14:ED:96:70:BF:9E:42:9E:55:8C:00:33:88:5D:98:F8:A7:F8:D9:4F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019748B3488E90E8FD30A666041993DB4BDB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FO2WcL-eQp5VjAAziF2Y-Kf42U8.roa
Signing time: Sat 07 Jun 2025 04:43:18 +0000
ROA not before: Sat 07 Jun 2025 04:43:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 37.202.220.0/24 maxlen: 24
151.240.28.0/24 maxlen: 24
151.240.60.0/23 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.242.4.0/24 maxlen: 24
151.242.13.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.17.0/24 maxlen: 24
151.242.27.0/24 maxlen: 24
151.242.32.0/24 maxlen: 24
151.242.134.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.242.236.0/22 maxlen: 24
151.243.25.0/24 maxlen: 24
151.244.48.0/24 maxlen: 24
151.244.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Jun 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:b3:48:8e:90:e8:fd:30:a6:66:04:19:93:db:4b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 7 04:43:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14ed9670bf9e429e558c0033885d98f8a7f8d94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:4e:38:8e:77:b2:c7:75:01:68:fe:18:bd:
a4:68:b6:60:a7:60:39:6d:47:2c:cf:e2:e5:28:cb:
b2:d8:2a:13:52:aa:78:ce:88:c4:60:87:ca:96:fe:
03:78:0a:59:27:0e:d6:29:08:72:37:38:a1:72:86:
c6:9e:44:66:c5:89:6a:fa:93:9b:37:da:9b:26:3a:
f9:60:c3:73:0c:b1:b2:7e:e1:85:ee:81:49:a2:95:
b3:2e:68:4b:63:1c:aa:25:e4:c7:1b:7f:82:3f:8c:
1d:01:64:c4:4d:37:bc:be:c5:a6:36:4f:bc:72:8f:
ba:83:ce:c4:98:a4:8a:70:ff:7c:01:e5:7f:b0:52:
1f:76:92:36:37:22:2b:da:72:40:e3:c0:00:72:4f:
82:f4:f8:cd:90:fb:66:08:04:a3:eb:be:26:77:5d:
01:20:9f:b3:ad:1e:90:a5:b3:63:b6:e7:25:98:17:
61:1a:14:07:9c:53:ce:e0:31:bd:39:45:b8:26:cf:
06:7b:b7:17:2e:99:2c:20:68:35:c6:da:58:d4:e9:
02:25:90:56:5b:d9:d3:ff:5e:63:7b:67:6c:21:e9:
3d:d2:d0:31:42:2a:89:26:5f:b7:b1:24:91:96:a7:
12:25:3e:0e:ce:61:43:60:df:c9:98:7f:f5:b2:57:
d9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:ED:96:70:BF:9E:42:9E:55:8C:00:33:88:5D:98:F8:A7:F8:D9:4F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FO2WcL-eQp5VjAAziF2Y-Kf42U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.220.0/24
151.240.28.0/24
151.240.60.0/23
151.240.72.0/24
151.240.74.0/24
151.242.4.0/24
151.242.13.0-151.242.14.255
151.242.17.0/24
151.242.27.0/24
151.242.32.0/24
151.242.134.0/23
151.242.236.0/22
151.243.25.0/24
151.244.48.0/24
151.244.102.0/24
Signature Algorithm: sha256WithRSAEncryption
59:58:3d:1d:c5:36:4c:e2:68:fd:a3:ee:7b:17:9a:ab:c4:5a:
7c:f0:c4:96:3d:e3:b8:21:59:54:2b:a5:7d:ca:48:59:a6:4d:
f0:b4:f6:cf:ac:fe:b8:4e:ea:3c:37:7e:1f:4e:9f:b8:4f:b6:
59:d6:51:53:44:51:89:20:4d:9c:45:95:b5:00:85:ad:5e:74:
6d:4a:4c:62:73:f4:0d:2b:70:03:ac:72:ee:7d:ac:8f:32:f3:
df:50:3c:56:67:d9:52:2f:78:7f:ab:6c:a6:43:0e:29:5d:bd:
a9:a7:fd:9c:dd:83:4b:73:46:51:aa:84:fb:1b:97:a9:3f:b3:
26:5f:85:26:80:be:23:c4:84:11:51:70:52:f4:1f:00:56:57:
c3:10:02:e8:b1:a4:ae:1e:1b:d2:47:66:29:19:84:8d:18:3e:
fc:8c:03:75:7c:40:88:c7:b9:8d:76:0c:ec:37:5b:47:ff:d3:
32:28:8c:6c:73:23:90:fa:70:c5:09:88:c6:37:0f:6a:92:6c:
ea:98:92:23:93:92:eb:85:ab:86:85:17:ee:9b:0a:b1:7f:ef:
6e:77:06:ee:36:35:9a:90:24:34:5c:0d:61:00:bb:28:b1:0e:
f2:2e:fd:11:fc:92:84:d4:90:23:c8:83:19:c8:58:bf:8e:a9:
66:ae:9a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:41:55 2025 by rpki-client