Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/7mL304LFNAamRxmVHbTfYP_SfT8.roa
File: 7mL304LFNAamRxmVHbTfYP_SfT8.roa (raw, json)
Hash identifier: eXIx9HeP/k11t+2j/qSpt9/wjOMAKDSgVf1SrN3+abo=
Subject key identifier: EE:62:F7:D3:82:C5:34:06:A6:47:19:95:1D:B4:DF:60:FF:D2:7D:3F
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 019409E60E412B7F142FB242CCFD6B58342B
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/7mL304LFNAamRxmVHbTfYP_SfT8.roa
Signing time: Fri 27 Dec 2024 20:54:19 +0000
ROA not before: Fri 27 Dec 2024 20:54:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137409
IP address blocks: 37.153.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:09:e6:0e:41:2b:7f:14:2f:b2:42:cc:fd:6b:58:34:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Dec 27 20:54:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee62f7d382c53406a64719951db4df60ffd27d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:1b:c4:96:e7:14:31:94:b9:ef:5f:2f:66:
92:7f:01:5a:a1:72:c8:2f:fe:15:ed:c9:1c:16:d6:
a7:f9:7b:e9:a0:97:b5:bb:c3:34:eb:33:83:40:ce:
e6:97:a6:b2:1b:3e:d9:35:fd:2e:e2:a3:6c:44:97:
9b:8b:22:c6:26:cf:f0:d8:db:1e:39:26:25:d3:9a:
e3:28:90:8e:09:a2:b9:88:19:26:c9:03:38:d9:72:
62:cf:ba:c2:b7:22:d0:02:e8:c7:52:8d:b8:68:ad:
d5:0c:f4:9b:df:88:0b:a2:fb:4e:24:21:20:fc:15:
88:cb:a3:01:4a:75:bb:08:19:85:d8:9e:fc:5a:12:
03:34:fa:ca:1c:7a:27:ae:8c:ac:eb:19:be:b8:b5:
39:08:79:2d:43:89:f0:7f:1f:6f:8e:08:9f:7b:a1:
1c:56:de:31:45:97:3d:21:e4:5a:0b:ff:8b:95:50:
72:e1:b5:f6:a5:34:aa:58:9d:df:20:6c:fc:7c:ca:
50:e4:1e:1f:96:7f:d6:0c:de:8a:d7:90:da:b7:5b:
21:e3:a6:6a:5a:ce:04:95:d8:56:03:e2:73:84:a9:
d2:a1:e3:2f:7e:49:58:f2:e1:c4:22:05:49:15:de:
a5:81:51:ae:83:63:5b:98:92:27:c3:62:2b:83:15:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:62:F7:D3:82:C5:34:06:A6:47:19:95:1D:B4:DF:60:FF:D2:7D:3F
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/7mL304LFNAamRxmVHbTfYP_SfT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:ea:a3:f3:f7:f5:9c:08:9f:1c:41:26:d2:a9:3e:e7:92:c8:
1a:ed:e7:38:8e:10:ec:27:c8:f9:b7:ba:0d:11:8e:2c:b0:c7:
85:5a:d6:f1:d9:3e:c1:84:f0:50:ac:b4:90:d1:ad:c0:4c:75:
c1:95:7c:ab:86:18:71:65:b5:73:43:3e:2a:14:a4:18:6b:b1:
ae:8f:3a:a5:1e:9e:cd:c8:7b:14:c4:be:d8:82:a2:ad:16:d7:
7f:2c:45:9c:42:7c:c4:45:2b:c9:77:25:99:c6:24:f1:89:45:
65:7f:96:44:d4:85:88:5f:31:df:92:15:ed:b1:e8:e9:0d:e6:
e9:00:d4:80:31:3c:ea:c2:f2:8c:93:ff:f6:1e:64:d6:c7:f2:
b5:16:b8:82:58:59:ee:b0:86:55:77:5a:b0:45:de:0d:fe:0e:
a5:fc:bb:d6:6b:3c:6f:40:e3:94:ce:5d:8b:aa:c2:81:81:4b:
66:1d:cf:a8:25:52:a9:e8:a2:8e:07:5b:70:41:9e:f0:4a:75:
e6:36:e3:4b:0a:ef:dc:28:a4:96:ed:de:80:8b:94:43:47:22:
4d:c4:59:b0:dc:d0:0f:0e:b8:3f:a4:29:ad:40:fe:03:33:7d:
b2:30:8f:f1:2d:1f:1a:6a:ff:df:80:a4:13:f3:3a:58:00:18:
1c:2c:6f:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQJ5g5BK38UL7JCzP1rWDQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0
MzI2MTIwHhcNMjQxMjI3MjA1NDE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTYyZjdkMzgyYzUzNDA2YTY0NzE5OTUxZGI0ZGY2MGZmZDI3ZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr8bxJbnFDGUue9fL2aSfwFaoXLI
L/4V7ckcFtan+XvpoJe1u8M06zODQM7ml6ayGz7ZNf0u4qNsRJebiyLGJs/w2Nse
OSYl05rjKJCOCaK5iBkmyQM42XJiz7rCtyLQAujHUo24aK3VDPSb34gLovtOJCEg
/BWIy6MBSnW7CBmF2J78WhIDNPrKHHonroys6xm+uLU5CHktQ4nwfx9vjgife6Ec
Vt4xRZc9IeRaC/+LlVBy4bX2pTSqWJ3fIGz8fMpQ5B4fln/WDN6K15Dat1sh46Zq
Ws4EldhWA+JzhKnSoeMvfklY8uHEIgVJFd6lgVGug2NbmJInw2IrgxUxBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5i99OCxTQGpkcZlR2032D/0n0/MB8GA1UdIwQY
MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt
MmNkZTY1ZjMxMTJhLzEvN21MMzA0TEZOQWFtUnhtVkhiVGZZUF9TZlQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh
LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJZmdMA0G
CSqGSIb3DQEBCwUAA4IBAQAa6qPz9/WcCJ8cQSbSqT7nksga7ec4jhDsJ8j5t7oN
EY4ssMeFWtbx2T7BhPBQrLSQ0a3ATHXBlXyrhhhxZbVzQz4qFKQYa7GujzqlHp7N
yHsUxL7YgqKtFtd/LEWcQnzERSvJdyWZxiTxiUVlf5ZE1IWIXzHfkhXtsejpDebp
ANSAMTzqwvKMk//2HmTWx/K1FriCWFnusIZVd1qwRd4N/g6l/LvWazxvQOOUzl2L
qsKBgUtmHc+oJVKp6KKOB1twQZ7wSnXmNuNLCu/cKKSW7d6Ai5RDRyJNxFmw3NAP
Drg/pCmtQP4DM32yMI/xLR8aav/fgKQT8zpYABgcLG9p
-----END CERTIFICATE-----
Generated at Thu Apr 17 18:45:34 2025 by rpki-client