Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TE6d7cQDMKOZr0AJZyGAswyRCtU.roa
File: TE6d7cQDMKOZr0AJZyGAswyRCtU.roa (raw, json)
Hash identifier: wZs2uVh6J/2+g68trerx01Kcy3aWnZjRtMrPlc/oRMk=
Subject key identifier: 4C:4E:9D:ED:C4:03:30:A3:99:AF:40:09:67:21:80:B3:0C:91:0A:D5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019855AEC71C62327F53BE1B8C442E89A085
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TE6d7cQDMKOZr0AJZyGAswyRCtU.roa
Signing time: Tue 29 Jul 2025 10:16:14 +0000
ROA not before: Tue 29 Jul 2025 10:16:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.242.87.0/24 maxlen: 24
151.242.174.0/23 maxlen: 23
151.242.192.0/23 maxlen: 23
151.242.205.0/24 maxlen: 24
151.243.3.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
151.244.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Aug 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:ae:c7:1c:62:32:7f:53:be:1b:8c:44:2e:89:a0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 29 10:16:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c4e9dedc40330a399af4009672180b30c910ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:f8:1c:f8:92:ad:6d:f2:ba:7b:7a:72:13:
4a:5e:f1:ce:5a:6b:29:c1:af:ba:11:b3:4e:51:a6:
c4:9f:54:8b:ab:ad:da:ba:d3:b4:c8:5b:da:04:fb:
96:41:2a:10:8c:fc:e3:6a:49:a8:15:d3:62:e1:a2:
de:c2:ae:ee:70:94:e3:c1:28:da:cb:cb:40:6b:0a:
df:52:19:c6:24:15:9e:42:83:e9:6e:31:6f:81:cb:
0f:f2:f1:b9:3c:62:21:9a:3b:5a:8f:9c:f0:c5:3f:
b3:0b:88:e8:4e:ad:20:db:86:af:78:0c:28:2f:86:
74:7d:32:ff:3d:70:17:ba:38:58:2c:cd:a9:9c:c6:
36:20:87:29:24:0e:3a:96:4b:5b:cc:aa:8e:8b:4f:
25:a1:e8:47:3e:d1:1c:27:ad:8c:c4:2c:9b:d5:2d:
3e:87:89:a7:16:01:54:5d:a7:4e:d1:27:47:3f:7f:
38:4d:90:ee:4d:01:5f:20:64:31:d4:04:a8:a1:75:
c4:f3:2b:40:1e:d3:79:c3:86:ec:d4:d9:bb:f8:b5:
6c:57:fe:5f:17:97:73:a0:22:47:1a:2c:7b:66:9e:
ea:af:88:e0:22:63:a8:63:72:bc:4a:43:0f:b7:21:
b9:b4:1d:d5:7c:86:1c:78:38:dc:03:a5:59:7e:22:
25:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4E:9D:ED:C4:03:30:A3:99:AF:40:09:67:21:80:B3:0C:91:0A:D5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TE6d7cQDMKOZr0AJZyGAswyRCtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.240.79.0/24
151.240.177.0/24
151.241.8.0/24
151.242.87.0/24
151.242.174.0/23
151.242.192.0/23
151.242.205.0/24
151.243.3.0/24
151.243.101.0/24
151.244.188.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6a:b9:f9:59:b4:d4:14:5b:80:7b:67:8a:2c:14:e0:68:86:
92:46:17:c6:da:1d:94:20:65:d9:5a:07:98:0d:79:11:ad:1f:
12:0f:e4:ff:6a:67:b9:88:68:9f:38:16:a8:60:18:6e:8e:a9:
bb:00:6f:2c:01:0e:1b:50:b0:72:eb:8b:99:d4:d2:0d:4f:cc:
0e:a9:c5:17:9b:9b:bf:56:ee:fc:71:d6:a2:62:41:d4:f8:5f:
7a:fb:05:2c:73:13:85:96:54:04:98:c6:e2:f4:27:04:36:25:
30:9a:76:54:d5:c8:23:bb:93:d2:21:a6:ee:0f:6c:12:fd:75:
22:a2:74:f2:22:ad:a6:ad:f6:fc:6a:34:f6:08:04:2a:5f:6c:
b1:c9:02:85:2e:5d:3a:72:51:9b:68:e0:96:f1:94:fe:3f:23:
cd:12:f9:a2:6b:67:b3:00:7f:5d:b6:33:65:0a:56:63:68:ca:
62:57:4c:73:7e:8b:85:7e:50:05:3c:ea:f9:3d:5a:3d:cc:44:
15:68:02:e7:e5:cf:d2:d6:c5:c1:40:51:86:73:c7:55:01:ec:
e2:2e:45:d8:b3:a1:63:db:4d:74:4b:9d:92:ac:b7:8b:52:72:
a2:08:f8:98:61:aa:0e:71:6d:dd:bf:bb:b7:c3:db:99:37:8d:
c3:b8:41:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:35:04 2025 by rpki-client