Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/KbiAZKVcAVP5Q_yPUSrL3u3UJbY.roa
File: KbiAZKVcAVP5Q_yPUSrL3u3UJbY.roa (raw, json)
Hash identifier: //SaFVhFBWCLoZNSUqNq/CbyvfWgWOzOxKAL2DSCs9c=
Subject key identifier: 29:B8:80:64:A5:5C:01:53:F9:43:FC:8F:51:2A:CB:DE:ED:D4:25:B6
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 019409E6F835B4770859C906EA2C29642630
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/KbiAZKVcAVP5Q_yPUSrL3u3UJbY.roa
Signing time: Fri 27 Dec 2024 20:55:19 +0000
ROA not before: Fri 27 Dec 2024 20:55:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60790
IP address blocks: 37.153.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:09:e6:f8:35:b4:77:08:59:c9:06:ea:2c:29:64:26:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Dec 27 20:55:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=29b88064a55c0153f943fc8f512acbdeedd425b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:76:76:1c:ec:d8:84:57:00:1d:39:73:d7:
b3:35:73:9b:31:c4:dd:64:39:c5:58:a2:11:cc:7a:
72:bf:81:4b:94:6e:14:78:56:e6:46:5e:b8:a2:16:
37:eb:86:67:a8:92:ad:0f:12:7f:49:56:bd:b1:de:
e4:34:6b:f3:16:07:e1:46:f3:9a:a5:04:e5:fe:4d:
92:b0:d1:0b:b8:0e:1b:3e:7b:80:f5:fe:da:82:fb:
32:a7:f0:11:ad:9f:af:76:24:49:fa:6f:47:94:28:
72:01:d9:c6:5a:34:65:cd:6f:f7:88:95:5f:f7:c8:
52:c8:9c:70:0f:72:a0:84:a5:91:d9:89:75:e6:ae:
7a:a6:0f:5a:ff:05:09:cd:f1:a3:1d:10:59:42:1d:
dc:8d:1e:fa:77:c5:e1:e9:d2:f4:76:32:1e:27:ca:
0f:30:dd:37:91:0e:fe:98:09:c7:6a:53:9c:15:0e:
30:cb:11:1f:15:c0:a4:0d:b4:be:01:d9:f8:c7:80:
ef:4c:11:a8:ba:dd:00:99:26:74:01:a7:32:db:aa:
50:87:b3:b0:85:f1:e1:d3:15:d1:c4:9b:57:9f:f6:
76:7e:90:b5:1d:f0:e8:cc:c6:e3:3f:aa:3c:78:f0:
19:c8:aa:17:79:74:1f:4e:5a:c9:d5:62:4e:33:90:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:80:64:A5:5C:01:53:F9:43:FC:8F:51:2A:CB:DE:ED:D4:25:B6
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/KbiAZKVcAVP5Q_yPUSrL3u3UJbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.157.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a2:2d:36:b6:9e:bb:75:86:bf:5e:4d:db:39:5a:15:bd:9e:
dc:c9:dd:fe:4a:38:48:f5:25:1d:d4:d1:66:9f:9e:92:29:a4:
64:ef:c9:9d:31:6c:8d:4b:25:ec:e1:4b:43:47:00:81:01:c4:
86:77:2a:8b:45:c9:4b:09:c2:1d:2b:c0:37:1e:1b:95:5e:41:
ce:3e:eb:6d:30:84:d1:1b:c2:b2:fd:d4:4a:f1:5c:d4:20:e1:
7f:a5:0b:34:37:a5:24:58:bc:23:e1:44:4d:05:a5:02:a1:76:
eb:a9:40:13:18:c7:54:53:95:fc:8e:1c:b9:4b:d3:16:a3:41:
90:a0:cf:af:da:05:a4:75:d0:55:fa:b8:5b:2b:bf:5f:72:10:
b8:e9:25:bf:29:cd:1c:7e:c3:9d:59:2d:87:2c:4d:a1:a8:29:
ca:b3:bc:20:64:2a:11:9e:59:c1:82:6b:35:e2:2d:2f:4a:05:
2f:7f:2f:ae:1a:52:cd:8f:0f:0c:7d:ce:6e:e5:ed:17:12:d5:
6a:d1:30:ef:ab:3e:9e:a7:ad:47:79:4c:f3:ee:3d:0c:72:28:
2f:14:37:d5:0c:0c:49:f7:66:59:ac:7b:d3:25:2c:c4:23:9f:
b2:87:87:9e:3d:1f:6c:e5:91:3b:78:fd:27:a3:27:39:92:d5:
71:72:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:54:24 2025 by rpki-client