Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DVRnVLV8NzpmBjVx5CqMvCI3jm0.roa
File: DVRnVLV8NzpmBjVx5CqMvCI3jm0.roa (raw, json)
Hash identifier: uP4RJsraBT5leTYR4mb5y7nQ7ZCmSL1rIEd6wEDhe9A=
Subject key identifier: 0D:54:67:54:B5:7C:37:3A:66:06:35:71:E4:2A:8C:BC:22:37:8E:6D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197B1486D0FFE6EE7274A826BD4F468F2F7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DVRnVLV8NzpmBjVx5CqMvCI3jm0.roa
Signing time: Fri 27 Jun 2025 12:06:43 +0000
ROA not before: Fri 27 Jun 2025 12:06:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 37.202.222.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.242.87.0/24 maxlen: 24
151.242.174.0/23 maxlen: 23
151.242.192.0/23 maxlen: 23
151.242.205.0/24 maxlen: 24
151.243.3.0/24 maxlen: 24
151.243.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Jul 2025 04:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b1:48:6d:0f:fe:6e:e7:27:4a:82:6b:d4:f4:68:f2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 27 12:06:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d546754b57c373a66063571e42a8cbc22378e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:89:30:48:77:41:81:23:9c:13:c2:09:de:
70:85:c6:ca:8a:5d:77:f8:56:a3:1c:92:85:78:c1:
f0:14:c9:9f:6a:d9:cc:ae:74:61:f5:02:c6:bf:af:
cc:0e:50:45:f3:75:f3:d2:e4:eb:ee:70:45:3c:08:
8b:c2:f3:ff:05:90:3b:4f:5c:c4:3d:fa:fc:ce:31:
13:d4:a3:2c:73:41:d6:98:b0:2e:9f:f2:ec:86:35:
b6:bf:a5:4d:11:5c:1e:0a:e7:21:85:6b:58:6f:76:
61:41:f1:5d:9a:3b:00:e6:62:ee:69:05:87:aa:29:
c1:68:76:a1:02:5d:69:0c:5d:dd:20:99:f3:2a:fb:
42:34:64:ff:21:07:69:99:33:9b:48:c5:d2:fe:64:
a1:03:0b:dd:77:4b:34:a8:36:e7:c6:dc:bc:c0:94:
63:b9:5c:08:5d:2a:60:ee:73:65:19:b5:34:5f:67:
3a:55:80:68:4d:e7:75:50:7a:14:c7:6a:d6:be:98:
53:d7:13:78:f3:ac:fd:21:40:39:d6:db:ea:8a:45:
cf:fd:bf:98:44:0a:3c:6b:ce:da:89:dc:4d:39:9b:
32:27:22:7a:23:7a:c3:42:4d:b0:10:53:17:d5:39:
4c:7a:a8:c9:22:ec:ba:86:68:2b:14:49:0e:31:f8:
ed:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:54:67:54:B5:7C:37:3A:66:06:35:71:E4:2A:8C:BC:22:37:8E:6D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DVRnVLV8NzpmBjVx5CqMvCI3jm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.222.0/24
151.240.79.0/24
151.240.177.0/24
151.242.87.0/24
151.242.174.0/23
151.242.192.0/23
151.242.205.0/24
151.243.3.0/24
151.243.101.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:19:65:ef:3c:a2:2b:c9:26:be:2c:fb:fd:7b:9f:0d:7a:ba:
73:06:8d:2a:72:2b:3d:03:64:55:ee:71:25:ce:a5:41:d9:2e:
23:a4:44:64:5f:d5:7e:5a:59:87:a3:b0:e9:79:29:fe:bc:62:
ae:d1:d7:9e:26:3c:79:89:a1:32:e8:00:7d:82:1e:bb:a8:8a:
6c:e6:36:5a:f3:1a:94:7b:d5:e8:44:d2:2f:1f:e1:95:e5:3d:
7b:cf:19:3e:bc:f9:36:ef:fd:9d:d6:0f:b9:f0:ea:84:89:88:
2a:a5:5b:3e:37:b6:3a:b9:55:ed:6d:33:c0:e2:2c:ad:0b:dd:
1c:8b:1a:45:02:92:68:ff:68:43:b4:8d:c2:b4:f2:7c:ae:c3:
eb:be:85:ce:f6:e9:2b:92:ae:c7:d6:90:3b:9d:1c:88:51:41:
2c:87:96:bf:47:ab:35:14:19:0c:c0:cc:e6:b6:9a:18:08:34:
c5:47:f8:2c:cc:ab:4d:53:c7:c1:63:8d:9f:8b:8c:7e:e0:98:
1d:67:48:19:2a:bd:f4:e3:47:e4:a0:a0:1b:fa:5d:88:07:d1:
65:55:bc:f1:ee:c6:e8:25:04:c6:4d:b4:d8:a0:6a:16:d1:93:
48:09:1d:bc:ec:8d:67:e9:9f:19:64:06:f1:1b:09:25:eb:31:
1f:8b:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:20:26 2025 by rpki-client