Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_ndlhvy4u4_5asVla3rzbP4ND44.roa
File: _ndlhvy4u4_5asVla3rzbP4ND44.roa (raw, json)
Hash identifier: HFiiHaxV03mCvvqvufmv0QBMznW0dsXUw0qiz4xJ9Gg=
Subject key identifier: FE:77:65:86:FC:B8:BB:8F:F9:6A:C5:65:6B:7A:F3:6C:FE:0D:0F:8E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196009E345162BBBDFAB5BE572981AD0281
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_ndlhvy4u4_5asVla3rzbP4ND44.roa
Signing time: Fri 04 Apr 2025 11:44:50 +0000
ROA not before: Fri 04 Apr 2025 11:44:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.240.3.0/24 maxlen: 24
151.240.110.0/24 maxlen: 24
151.242.33.0/24 maxlen: 24
151.243.13.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Apr 2025 18:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:9e:34:51:62:bb:bd:fa:b5:be:57:29:81:ad:02:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 4 11:44:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe776586fcb8bb8ff96ac5656b7af36cfe0d0f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:56:b9:92:e6:b4:51:d1:1e:99:3e:26:54:
f7:00:92:81:ff:3b:6e:b9:ac:e5:a9:1c:9c:54:98:
20:ff:d8:ad:02:12:33:78:be:f0:aa:88:90:97:8e:
f8:6b:92:d6:af:4c:ca:1d:2e:af:ca:b8:26:00:54:
93:fd:3f:8c:ac:ca:01:da:af:30:82:17:29:84:88:
48:49:b9:f0:7f:e3:b6:f8:54:bb:5c:5d:01:4a:e0:
00:8f:70:5a:e1:97:0f:7a:a7:4d:30:8d:12:4d:7e:
70:a3:f0:04:9e:f7:0c:c6:1a:2f:b1:a8:2a:f7:7b:
99:26:60:4e:d1:31:d6:5d:49:d4:d8:84:bb:78:a6:
5e:04:d5:ef:33:43:fc:cb:0e:30:14:29:81:8b:b0:
20:06:fb:19:65:77:4f:a0:1d:53:e3:b1:62:8b:82:
1f:2a:24:d3:56:8d:03:74:e6:80:65:6f:f1:6d:e3:
08:99:5f:8e:9d:e4:1e:fc:2c:80:07:ab:47:a6:bd:
4d:39:c6:5e:ba:b2:7c:92:75:be:62:0c:f1:95:e7:
36:84:37:1e:12:41:7c:26:84:1e:b3:da:21:65:b1:
c1:d3:cc:c7:c0:07:5a:a6:8c:42:0e:ee:20:de:77:
a0:fc:34:0d:08:04:ad:27:7d:5d:af:dc:0a:e9:fe:
35:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:77:65:86:FC:B8:BB:8F:F9:6A:C5:65:6B:7A:F3:6C:FE:0D:0F:8E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_ndlhvy4u4_5asVla3rzbP4ND44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.240.3.0/24
151.240.110.0/24
151.242.33.0/24
151.243.13.0/24
151.243.101.0/24
Signature Algorithm: sha256WithRSAEncryption
55:bd:a7:8a:9d:3b:05:36:73:d6:f5:d4:de:97:02:c4:5f:cb:
c2:ed:47:48:3f:e3:22:1d:b8:ba:97:bd:12:67:ef:0d:9e:20:
c7:53:a2:f3:ba:64:eb:ab:bc:73:a6:c1:26:91:5d:8c:45:2b:
0d:0c:a9:90:29:42:39:6e:04:cf:31:e4:dd:9d:5e:52:2f:42:
89:cb:95:2d:b1:76:1d:2b:41:b1:71:a6:4e:27:5f:cd:b6:6e:
af:6b:a0:d4:b8:cf:0b:0b:db:25:44:cc:81:56:30:87:ed:ae:
5f:63:35:b2:32:59:0d:89:c8:fb:9c:7e:77:cd:80:a7:61:9d:
4e:d2:5e:0d:d5:7b:eb:f0:fe:c4:25:8f:67:ad:13:2f:67:f2:
1c:87:ed:32:dd:37:1e:1c:92:c0:78:2d:18:d8:d3:ad:03:28:
ab:b4:89:01:c3:47:f2:59:33:e9:06:8b:26:d4:21:d0:91:de:
2d:8e:a5:c9:0b:c4:6a:7d:92:4c:33:84:ef:3a:a5:2c:95:58:
3e:43:58:8e:e7:a2:47:5a:2b:0f:4d:8d:ed:65:28:3f:4a:9c:
72:7b:55:11:26:e0:e4:e7:e3:d5:3c:3e:0c:db:2b:fd:60:80:
cc:6f:ee:7e:69:b3:ef:45:4d:0c:32:92:ef:cb:66:e0:29:30:
bc:e8:bf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 11:11:00 2025 by rpki-client