Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KO3Myex-OlLXZ_bduuJKv9oe8h4.roa
File: KO3Myex-OlLXZ_bduuJKv9oe8h4.roa (raw, json)
Hash identifier: A7igmfO8YeAPnQpD6lXa9wl/ULBOHLpxzY9EvwIEJA4=
Subject key identifier: 28:ED:CC:C9:EC:7E:3A:52:D7:67:F6:DD:BA:E2:4A:BF:DA:1E:F2:1E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196706BBCD73A3A4B03325BF9032ADCB070
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KO3Myex-OlLXZ_bduuJKv9oe8h4.roa
Signing time: Sat 26 Apr 2025 04:47:11 +0000
ROA not before: Sat 26 Apr 2025 04:47:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13347
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.249.0/24 maxlen: 24
151.243.250.0/24 maxlen: 24
151.243.251.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
151.243.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Apr 2025 04:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:70:6b:bc:d7:3a:3a:4b:03:32:5b:f9:03:2a:dc:b0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 26 04:47:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28edccc9ec7e3a52d767f6ddbae24abfda1ef21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:9a:8f:8d:11:26:bc:09:4f:d2:60:89:35:
c7:81:1b:6e:5f:1b:6d:b0:7f:da:d4:62:08:6d:3d:
1d:70:d8:35:32:4b:1d:a5:b0:20:b7:aa:31:ae:31:
c6:09:8c:68:c3:d9:4e:cb:73:dc:8d:61:10:a2:4d:
fd:38:d9:9c:8b:43:1d:8c:63:d5:69:96:57:e1:9e:
03:ab:ea:5f:94:fb:31:04:93:ad:d6:88:4b:28:0d:
9a:0f:2e:10:f4:46:94:4d:0c:a4:8f:77:df:8e:b9:
b9:9c:8d:53:40:ab:98:02:a0:dd:d0:e7:da:02:d2:
98:40:e1:64:79:b6:ee:77:80:a0:e7:24:88:d8:5f:
6c:13:8f:26:8b:44:46:b7:57:a8:d2:4a:12:95:0a:
9f:76:ef:ab:d1:74:7e:64:29:99:16:d1:c4:47:60:
e7:3c:15:17:d0:01:00:9f:f7:a3:ac:23:ce:bf:01:
e0:04:46:10:02:47:9c:ab:85:fe:fa:5f:56:e9:b1:
41:f1:7f:50:94:10:37:8d:37:ed:2a:a9:cc:d9:f8:
a0:b1:02:0a:50:e0:72:f1:51:6e:55:1c:0b:ab:86:
65:85:ee:a6:96:d3:8e:16:01:51:88:86:37:f1:c8:
b7:f1:95:fc:47:ad:15:c4:e9:0d:93:09:0e:7c:4c:
4e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:ED:CC:C9:EC:7E:3A:52:D7:67:F6:DD:BA:E2:4A:BF:DA:1E:F2:1E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KO3Myex-OlLXZ_bduuJKv9oe8h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
151.243.246.0-151.243.253.255
Signature Algorithm: sha256WithRSAEncryption
0a:20:fa:33:92:82:55:3e:60:ac:7c:bf:bb:39:fe:b0:14:f5:
2d:cb:78:36:a4:99:42:fe:58:e1:51:d4:d4:9e:ba:dc:6b:75:
5e:9b:b7:41:8e:7f:1c:76:ed:3d:2a:f1:6e:ba:b1:fb:29:f9:
f6:5b:2a:4e:ee:d4:a0:1f:5a:62:ad:40:c7:b0:b0:cf:2a:1a:
40:6c:87:56:cd:80:38:7d:36:e2:cf:0f:6a:32:44:9e:b7:13:
99:72:ee:05:32:56:83:a7:ae:fd:5d:ab:12:ca:3b:c1:c7:27:
fa:4d:9c:41:96:d9:11:63:a5:28:0a:92:e4:03:69:5e:02:c9:
0d:af:c0:fc:38:bd:e6:9c:0c:9e:3b:34:8e:29:60:01:bf:f8:
a1:72:7e:61:58:f6:92:20:e2:56:57:aa:c5:06:9c:49:7d:0b:
18:7a:26:71:09:cb:cf:02:a7:a3:be:00:1f:be:2f:7d:3f:9c:
60:17:67:c7:e0:5f:87:8b:e2:9e:1d:0c:3b:78:07:fb:a1:73:
fe:d9:c7:40:9b:29:28:55:50:f7:74:b8:56:73:cd:f4:35:9d:
59:af:c9:4e:44:38:95:dc:36:f2:55:c2:15:5f:32:99:26:67:
7b:e3:f2:30:08:02:ad:63:1b:ee:c2:ec:28:63:43:84:bc:23:
d6:03:7d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:18 2025 by rpki-client