Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RYVKU0NFBj_AmaD7hzVwQpCudDM.roa
File: RYVKU0NFBj_AmaD7hzVwQpCudDM.roa (raw, json)
Hash identifier: Dvlg0VilT8eTiZZpjKR3bSLd48lGsYTbW1q2oMRQWtI=
Subject key identifier: 45:85:4A:53:43:45:06:3F:C0:99:A0:FB:87:35:70:42:90:AE:74:33
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196759EE924DA626C5D77867B08B783E1E3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RYVKU0NFBj_AmaD7hzVwQpCudDM.roa
Signing time: Sun 27 Apr 2025 05:01:10 +0000
ROA not before: Sun 27 Apr 2025 05:01:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5650
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.195.0/24 maxlen: 24
37.202.196.0/24 maxlen: 24
37.202.197.0/24 maxlen: 24
37.202.198.0/24 maxlen: 24
37.202.199.0/24 maxlen: 24
37.202.200.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.243.54.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.249.0/24 maxlen: 24
151.243.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Apr 2025 05:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:e9:24:da:62:6c:5d:77:86:7b:08:b7:83:e1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 27 05:01:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45854a534345063fc099a0fb8735704290ae7433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:bf:df:e1:ae:78:f6:64:57:77:4c:5b:6a:
07:34:81:96:58:07:ca:fd:d9:4b:d2:77:ff:4c:ca:
5a:1a:78:2c:7d:c6:2d:42:50:e7:69:f3:31:b7:a2:
52:6f:db:00:9c:a8:64:da:76:40:14:35:b6:fd:49:
98:8d:c6:13:f9:20:ff:82:77:78:61:30:0e:de:82:
ee:83:11:26:33:27:43:f0:18:36:a8:4c:f7:71:63:
74:d3:fb:29:63:58:c4:3c:a5:1d:41:20:93:62:8e:
b3:e1:a6:80:11:30:eb:ff:f9:ee:c2:12:b7:0a:dc:
4b:57:cf:c1:32:46:e1:4c:6c:4a:32:00:e8:6e:29:
03:fa:f2:88:a0:8c:a5:d8:97:be:54:94:cf:56:3d:
a6:0e:98:7b:89:96:06:44:52:90:28:9a:5c:66:77:
56:94:1f:00:01:e8:e3:ff:ba:a6:be:8f:53:fa:de:
26:b5:18:a6:27:83:15:a4:c0:1d:98:96:b8:36:16:
93:79:02:1c:77:6e:13:f5:2d:26:ad:02:f5:af:dd:
55:fc:cb:cd:f6:3e:32:f9:13:e3:0e:3c:58:c4:4c:
2c:c2:4a:98:21:73:7f:c5:4e:d8:aa:be:15:4d:f2:
ae:1d:d8:d3:70:35:ea:29:69:7e:f5:fa:cb:7a:b1:
02:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:85:4A:53:43:45:06:3F:C0:99:A0:FB:87:35:70:42:90:AE:74:33
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RYVKU0NFBj_AmaD7hzVwQpCudDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.195.0-37.202.201.255
151.243.54.0/24
151.243.246.0/24
151.243.248.0/23
151.243.252.0/24
Signature Algorithm: sha256WithRSAEncryption
19:48:86:30:51:c1:e7:7b:80:58:18:34:37:89:92:2e:1a:0f:
d6:6b:da:4c:c6:f4:87:a0:04:81:c0:50:4d:b3:cd:27:b4:21:
5e:13:df:80:70:ec:5e:78:03:c9:22:e2:35:ba:0c:5f:35:2c:
3a:7e:35:7c:72:0a:fb:94:b7:b8:89:4d:c1:2e:df:99:34:ea:
d7:2c:1b:21:b5:e4:ac:33:51:61:15:48:b5:4a:25:fa:b8:84:
49:fe:1a:e0:ab:93:c7:72:94:98:1b:5f:ce:01:9f:f6:26:cf:
ff:ee:4e:55:13:1d:33:b5:55:c4:4a:8f:14:87:81:fd:b3:6a:
ed:66:ef:91:de:fe:24:d9:46:ff:59:b7:46:cc:7a:2b:8a:e3:
e5:87:0d:f2:74:c9:e9:8d:97:81:7c:3d:0f:b6:7c:7c:28:96:
97:74:67:62:b8:f3:b5:58:b1:68:63:59:46:e3:c6:57:ab:56:
ba:73:39:71:3e:f5:19:9a:b6:54:3f:3d:ce:a0:77:fa:59:70:
03:81:21:01:4f:aa:dd:c2:1f:0d:33:46:cc:eb:45:de:30:bb:
60:b1:04:77:81:c5:09:a7:2e:4f:96:7b:10:49:96:8a:d5:12:
08:bd:2b:97:c9:40:8c:ca:7b:b8:6a:e2:34:bf:85:50:1b:49:
f0:5c:04:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:38:55 2025 by rpki-client