Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Np9H-qVggxhZNiei49LFZDiDscw.roa
File: Np9H-qVggxhZNiei49LFZDiDscw.roa (raw, json)
Hash identifier: j0OfAwDs3xzQc8lUa3E3w40MekB+6UdT8fZIv9OR280=
Subject key identifier: 36:9F:47:FA:A5:60:83:18:59:36:27:A2:E3:D2:C5:64:38:83:B1:CC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196E1CD9CE959B62729B8E7E066CE76BD07
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Np9H-qVggxhZNiei49LFZDiDscw.roa
Signing time: Sun 18 May 2025 05:11:10 +0000
ROA not before: Sun 18 May 2025 05:11:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20326
IP address blocks: 37.202.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 18:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e1:cd:9c:e9:59:b6:27:29:b8:e7:e0:66:ce:76:bd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 18 05:11:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=369f47faa5608318593627a2e3d2c5643883b1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:2e:f3:63:ce:85:bc:e6:99:1a:4e:2b:cd:
57:17:60:a2:c0:af:a0:1a:fb:8f:ed:e4:03:d7:4c:
08:6f:9b:b9:06:8f:f8:31:2a:5e:d3:5d:25:de:f4:
a0:c8:2c:e2:fc:89:b5:fd:61:84:2b:07:4e:d6:eb:
33:3a:f1:95:e6:ab:e4:92:aa:91:33:9c:aa:f7:a6:
be:52:fe:4f:1c:66:4b:e8:b0:ba:fd:42:3d:f2:09:
83:ff:f7:a5:c4:98:23:fb:51:14:e8:31:50:39:7a:
ec:17:b2:76:63:9d:a2:37:7e:ef:86:08:2e:c4:a1:
1a:7f:9d:16:5a:cb:66:f3:0f:9f:58:66:66:6e:9e:
92:b5:08:99:24:ad:57:12:37:f1:4a:79:41:f3:d3:
19:d6:0d:a2:58:37:da:90:df:ec:8d:76:9d:ad:2f:
d5:46:08:7b:f6:f3:b5:82:29:ce:31:d9:3e:72:27:
22:f9:1f:f0:a1:10:a3:ce:46:28:d8:4a:d4:b1:9b:
16:40:cd:36:cd:9b:20:af:73:d6:14:bc:d1:c3:53:
72:20:19:08:7e:c2:32:16:89:f3:46:aa:bf:f1:32:
77:82:c7:6e:87:89:3c:d0:5a:fc:fb:e2:c8:a6:4f:
04:16:05:8d:3e:4e:32:d9:8e:e6:65:1e:43:41:9b:
cc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9F:47:FA:A5:60:83:18:59:36:27:A2:E3:D2:C5:64:38:83:B1:CC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Np9H-qVggxhZNiei49LFZDiDscw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:10:c5:a8:89:36:25:94:6c:44:90:a8:8d:4c:b6:14:e7:c2:
15:51:b2:64:57:e2:20:7f:16:ad:fd:92:56:72:95:8d:8d:44:
3d:c4:97:72:10:83:72:01:b7:bf:a6:ca:c6:72:6a:a3:2e:e1:
6c:c5:48:1e:dd:df:e2:80:39:de:b8:9e:20:42:88:21:53:5a:
16:dc:c9:65:2b:0d:ca:a2:28:49:ee:b5:c7:28:47:52:f6:09:
6a:c5:8c:aa:52:51:88:61:f7:cf:da:52:08:13:bd:0b:cd:57:
4e:05:f4:8c:92:0e:61:76:37:0f:ef:57:a9:e7:8d:ef:72:ec:
99:43:3e:3c:09:9f:c3:9e:69:71:d0:9c:de:bc:9d:be:5a:a3:
6f:70:76:ce:01:79:3b:32:bf:d2:4b:d5:0c:44:51:0e:9e:60:
a5:23:79:43:2a:fd:23:6a:7e:a4:2d:1e:f4:5a:13:24:1e:87:
4f:c4:f9:08:e8:9e:5f:df:c0:04:0b:e4:7d:23:b3:6e:bb:88:
44:ee:44:23:9a:69:01:33:08:c7:72:9d:2f:fc:42:db:74:24:
da:fb:33:95:61:c0:80:e2:6e:c4:eb:bf:0b:2d:0b:de:cc:09:
c4:8e:0a:7e:02:8e:f9:4d:20:e4:aa:bc:6c:a1:62:c1:56:8d:
37:ff:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:56:26 2025 by rpki-client