Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/a4wJd8bwSOFKHRLxvrLkyH9d4Mo.roa
File: a4wJd8bwSOFKHRLxvrLkyH9d4Mo.roa (raw, json)
Hash identifier: 7PDX6aji9d/agIborRp9GCSGmT/QX4eUnqJZUYmomuI=
Subject key identifier: 6B:8C:09:77:C6:F0:48:E1:4A:1D:12:F1:BE:B2:E4:C8:7F:5D:E0:CA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01979CA2B880ABC81B050C5C097CC7B9D152
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/a4wJd8bwSOFKHRLxvrLkyH9d4Mo.roa
Signing time: Mon 23 Jun 2025 11:53:19 +0000
ROA not before: Mon 23 Jun 2025 11:53:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 37.202.202.0/24 maxlen: 24
151.240.9.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.242.39.0/24 maxlen: 24
151.242.67.0/24 maxlen: 24
151.242.117.0/24 maxlen: 24
151.242.159.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.244.78.0/24 maxlen: 24
151.245.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jun 2025 11:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:a2:b8:80:ab:c8:1b:05:0c:5c:09:7c:c7:b9:d1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 23 11:53:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b8c0977c6f048e14a1d12f1beb2e4c87f5de0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:96:74:9d:ed:e3:9b:36:9b:b0:fe:98:29:c2:
75:b9:6d:b4:7d:76:63:48:6d:f3:14:a2:9e:37:31:
c2:56:bc:fd:70:5f:eb:d8:8f:d8:a7:d8:b4:54:ec:
48:63:9a:40:58:6d:95:95:c7:ef:0b:3d:33:24:16:
dc:0f:6e:24:3b:99:d0:d8:c7:6a:80:98:29:f1:08:
a7:e6:f8:67:4e:6c:ee:27:f6:e7:b9:c8:6d:21:f2:
ec:8d:dc:d5:ec:90:1f:30:04:d3:be:f3:a4:8b:e0:
ef:ed:51:98:79:e4:da:52:50:cf:35:ac:fa:8b:1f:
98:bc:b0:86:53:2d:98:68:b2:f0:a0:89:01:aa:00:
1f:19:6b:7b:99:2f:f3:bf:37:da:2e:af:d1:ca:21:
cb:5b:89:ed:f2:bd:f1:e6:64:12:26:10:d4:88:c0:
d0:68:f6:6f:71:e9:11:44:0c:0f:83:f9:ae:71:e5:
a4:98:d7:59:f4:ea:6a:eb:c1:32:81:95:82:75:f0:
84:e2:e6:ab:24:9b:7b:4f:b2:d0:f0:f3:89:7a:73:
d4:e0:ed:9d:ec:aa:a3:bd:b3:76:b5:94:15:78:e7:
bc:14:d3:42:b7:3a:80:b7:9b:b7:ba:b5:0c:22:4e:
36:b0:61:65:87:9e:c6:44:56:ba:3c:1d:6b:c8:86:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8C:09:77:C6:F0:48:E1:4A:1D:12:F1:BE:B2:E4:C8:7F:5D:E0:CA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/a4wJd8bwSOFKHRLxvrLkyH9d4Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.240.9.0/24
151.240.14.0/24
151.240.17.0/24
151.242.39.0/24
151.242.67.0/24
151.242.117.0/24
151.242.159.0/24
151.243.6.0/24
151.243.160.0/22
151.244.78.0/24
151.245.112.0/24
Signature Algorithm: sha256WithRSAEncryption
49:47:7d:1d:f7:57:19:b8:c6:4c:ac:6d:e8:9e:39:7f:e8:9d:
0f:61:fe:4f:3c:13:86:96:a4:e5:b8:42:03:aa:f2:97:b9:ae:
96:7f:eb:c8:cb:2b:d0:62:07:bf:24:cc:15:c9:58:d1:9e:64:
e7:50:11:f5:8c:ff:f8:60:a1:b1:2a:09:6a:3d:ac:96:7d:87:
06:1e:2a:27:40:5d:5f:1d:f8:4f:a8:6f:3d:a6:b3:ae:e5:36:
66:cd:c5:57:bc:e3:af:4c:3e:8c:b9:c2:d0:52:b4:74:f5:c1:
5f:a0:a4:55:9e:34:c1:f6:80:32:4e:10:ca:92:1c:a0:11:c2:
38:dc:c8:bf:e4:f8:4b:c9:14:74:f7:6b:68:4d:4b:65:4a:20:
d0:62:90:a7:f7:aa:aa:4a:8e:4a:62:6e:3f:b0:ae:41:b2:36:
3e:4c:71:38:ea:f2:1e:f5:4c:e3:fb:14:a0:0c:dc:13:ce:bf:
ef:86:14:04:b6:17:1e:07:96:c4:d8:43:33:ad:57:f6:c9:ce:
e4:fd:a2:18:ad:c4:c5:3e:77:61:db:de:f5:d3:5e:17:09:fb:
63:8c:64:ce:f0:db:d4:c0:70:80:2c:8b:87:a0:a9:31:56:94:
51:9c:a2:ad:d3:ac:11:25:00:be:4c:a7:f4:c6:09:df:0f:b7:
b3:c7:2e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:14:57 2025 by rpki-client