Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Iinz6-olEUe3h0AyNVIyfiO8Co8.roa
File: Iinz6-olEUe3h0AyNVIyfiO8Co8.roa (raw, json)
Hash identifier: dj1Y48dY1Tt7ytVXetOWnz0dxO+R759s2eYiW9czPsk=
Subject key identifier: 22:29:F3:EB:EA:25:11:47:B7:87:40:32:35:52:32:7E:23:BC:0A:8F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196B3DBD592D4CDB246EFD3863200CE6999
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Iinz6-olEUe3h0AyNVIyfiO8Co8.roa
Signing time: Fri 09 May 2025 07:04:10 +0000
ROA not before: Fri 09 May 2025 07:04:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.202.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.100.0/24 maxlen: 24
151.241.76.0/24 maxlen: 24
151.242.39.0/24 maxlen: 24
151.242.67.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.242.159.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.50.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 15 May 2025 19:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:db:d5:92:d4:cd:b2:46:ef:d3:86:32:00:ce:69:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 9 07:04:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2229f3ebea251147b78740323552327e23bc0a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:ad:02:37:60:29:2f:0c:21:17:83:f5:7a:
ef:ef:2a:95:49:3b:e9:d3:ff:7d:5d:3c:18:53:e8:
dd:36:c1:f1:12:5f:bb:2f:4e:ce:25:7f:07:eb:91:
ca:b3:ec:31:f3:01:ea:89:25:c5:84:fa:cf:6a:7f:
6f:ce:45:f6:ea:45:73:c2:49:79:c5:be:5a:05:c0:
50:00:0b:d4:17:47:09:d9:5c:94:72:c0:1a:90:d1:
5b:4d:07:37:89:5e:9b:a2:4a:4f:82:5b:07:40:03:
36:b9:6f:a5:f9:b6:24:e7:c3:7a:af:e6:6a:61:7b:
52:2d:38:36:9e:ae:6b:05:fd:f6:ab:d9:67:db:7a:
32:80:8f:1b:e7:99:5b:10:1f:a4:18:75:d6:a0:c7:
05:e0:22:6c:ec:19:54:15:0e:ec:7c:61:9e:1c:e5:
cf:f2:2c:fa:39:16:24:7b:83:2c:cc:66:6d:8e:ca:
25:1d:b9:e5:6b:8e:2b:67:a1:a9:f8:7c:72:85:3b:
18:da:be:cd:43:88:d3:f6:90:f3:d8:a8:1f:84:2b:
e8:55:f6:74:84:15:ae:26:c0:04:54:4d:c5:2f:e3:
c4:48:14:10:21:ae:98:8a:90:10:cc:03:f0:46:e1:
33:ac:1f:e4:bb:e0:3b:10:2f:a3:7c:6a:05:94:57:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:29:F3:EB:EA:25:11:47:B7:87:40:32:35:52:32:7E:23:BC:0A:8F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Iinz6-olEUe3h0AyNVIyfiO8Co8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.240.17.0/24
151.240.100.0/24
151.241.76.0/24
151.242.39.0/24
151.242.67.0/24
151.242.117.0/24
151.242.159.0/24
151.243.6.0/24
151.243.50.0/24
151.243.160.0/22
Signature Algorithm: sha256WithRSAEncryption
62:78:3e:75:54:54:36:93:5a:11:a7:59:c8:7c:60:f9:c2:9e:
7f:da:b2:5d:27:4e:7c:13:84:24:ea:60:97:70:28:cd:33:ff:
49:5b:8c:06:bc:56:81:c8:6a:23:9d:1b:05:b1:34:30:f0:bf:
fa:f4:7a:bd:4d:52:57:53:2a:23:21:3a:a5:55:04:b2:73:6c:
25:ba:a1:97:db:b9:9d:78:18:dd:39:88:ce:9e:54:6c:0c:74:
d9:ac:19:a0:3a:51:44:f8:d9:80:c8:3a:c6:fc:64:37:5a:c0:
03:d7:81:7b:17:88:eb:0b:cd:d0:dc:07:f8:6c:cd:ed:07:60:
fa:99:07:e5:29:3d:f4:b5:58:76:7b:cf:e8:93:cd:0e:15:b6:
c8:27:e9:6d:de:c2:a1:6b:7f:63:7f:35:67:ac:3c:70:bd:8d:
3f:b5:1f:16:52:1a:42:4d:a7:c5:82:f1:13:42:5b:97:4f:6a:
b4:a0:ab:a8:62:58:77:19:44:be:f0:df:68:09:b6:d8:d2:dd:
cf:de:32:2e:fb:9f:d5:a9:fa:ca:15:17:f7:1b:e0:11:7c:44:
2d:22:9a:d9:43:a7:a4:bb:59:9c:ab:a3:6b:a3:9a:13:5b:ef:
09:6a:f5:dc:f9:b1:28:63:4c:93:91:3a:b5:c5:5f:e1:82:7c:
cd:b1:6a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 00:14:52 2025 by rpki-client