Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/UN7bzCNPHb8V3rM-Ipp3L6EqLWM.roa
File: UN7bzCNPHb8V3rM-Ipp3L6EqLWM.roa (raw, json)
Hash identifier: pt62Af1+iqaaI1waO4UngSsFUOHHWO24xLsXysLH1wU=
Subject key identifier: 50:DE:DB:CC:23:4F:1D:BF:15:DE:B3:3E:22:9A:77:2F:A1:2A:2D:63
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 01942220145DB3CDDC9B7518C87DB99078D7
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/UN7bzCNPHb8V3rM-Ipp3L6EqLWM.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204720
IP address blocks: 148.253.60.0/24 maxlen: 24
148.253.61.0/24 maxlen: 24
148.253.62.0/24 maxlen: 24
148.253.63.0/24 maxlen: 24
163.171.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Jan 2025 06:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:14:5d:b3:cd:dc:9b:75:18:c8:7d:b9:90:78:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50dedbcc234f1dbf15deb33e229a772fa12a2d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b5:c7:3a:6d:df:c6:35:a7:87:ae:dc:14:fa:
3c:db:68:16:b4:8a:01:7c:1c:2b:29:5d:7d:7c:40:
68:d3:22:12:e8:10:cc:3a:ad:3b:6c:8e:df:fe:bf:
6e:cc:12:3c:9b:f8:07:c7:33:05:20:29:d0:47:b9:
64:6e:93:e3:e6:78:0e:e3:ed:ad:e5:3e:1c:e1:84:
14:4d:ff:f4:39:c1:59:14:26:a4:34:c1:37:f4:75:
55:0d:85:ff:11:5c:71:a2:a8:67:04:6f:cf:bf:d7:
a7:68:f3:6a:0a:6a:f2:73:a5:4b:e9:11:a1:ff:b2:
da:90:be:b1:38:c0:67:1e:a2:75:32:10:cb:3e:2b:
c1:7b:6f:9c:bc:e3:bf:70:b0:c9:da:13:f7:a6:a1:
ee:e4:56:a1:06:30:30:fd:94:b2:7e:3d:d9:b2:18:
12:b9:09:b8:54:03:13:96:a0:fa:82:06:eb:98:f6:
00:fa:f2:c5:83:af:79:31:cd:0d:63:c8:2b:85:ea:
60:4d:bb:0e:23:7e:cb:c9:b5:c9:94:0e:ac:47:90:
57:26:03:69:5c:ea:ab:aa:d2:dd:24:a2:95:61:5d:
73:c3:19:44:27:3f:fa:5d:8a:20:6a:4e:08:be:4a:
46:fd:98:4d:77:a2:8e:b9:a2:e7:0c:da:ca:86:cc:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DE:DB:CC:23:4F:1D:BF:15:DE:B3:3E:22:9A:77:2F:A1:2A:2D:63
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/UN7bzCNPHb8V3rM-Ipp3L6EqLWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.253.60.0/22
163.171.153.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:18:75:e1:e3:bf:6c:3b:f9:44:b1:ac:21:03:22:c9:f7:e6:
6f:d0:08:06:35:c8:e6:5a:9b:66:e0:1e:58:1a:e7:78:5b:fe:
d6:e4:aa:19:d0:9a:f5:10:24:9e:d8:c4:56:d2:f4:8c:23:a5:
b6:fa:d4:0a:5c:e4:30:7e:ad:e1:4c:4c:f3:b6:20:1d:a6:4c:
fd:11:e5:30:ec:dc:3b:19:51:10:7d:ab:1a:d4:df:c6:a7:85:
cf:b9:c6:54:91:fe:20:4d:e1:48:af:d2:08:a2:39:91:eb:d0:
a1:3b:00:8f:01:fe:38:85:a7:a9:bd:b9:29:0e:1e:44:68:a1:
cb:0a:42:24:a5:01:d5:d1:c9:cd:bd:b0:0c:da:2d:19:08:72:
0a:a7:93:1b:25:00:a3:fc:48:a4:f1:4a:c7:4d:39:f9:d6:5b:
26:3c:fa:83:26:6e:2f:ff:a6:c4:24:aa:d4:46:b2:44:44:5d:
93:c2:5d:70:09:e0:44:0b:cc:9b:9c:45:7b:50:a4:09:91:03:
8d:0c:1d:59:87:3e:bf:0e:ac:9d:32:56:77:62:6b:96:59:17:
53:8e:21:2c:f2:97:94:c4:7c:41:7e:1b:d5:f1:cb:82:75:b0:
a5:8b:5e:5f:6d:bc:f7:d4:41:7b:ce:11:d6:7c:79:2a:96:11:
c2:3f:2a:ee
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiIBRds83cm3UYyH25kHjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YjViMDJkYzQwMTY2NmVlMDQ1YWI5MGNjODg4MTdmZTA5
ZDcwNmEwHhcNMjUwMTAxMTM0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGRlZGJjYzIzNGYxZGJmMTVkZWIzM2UyMjlhNzcyZmExMmEyZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7XHOm3fxjWnh67cFPo822gWtIoB
fBwrKV19fEBo0yIS6BDMOq07bI7f/r9uzBI8m/gHxzMFICnQR7lkbpPj5ngO4+2t
5T4c4YQUTf/0OcFZFCakNME39HVVDYX/EVxxoqhnBG/Pv9enaPNqCmryc6VL6RGh
/7LakL6xOMBnHqJ1MhDLPivBe2+cvOO/cLDJ2hP3pqHu5FahBjAw/ZSyfj3ZshgS
uQm4VAMTlqD6ggbrmPYA+vLFg695Mc0NY8grhepgTbsOI37LybXJlA6sR5BXJgNp
XOqrqtLdJKKVYV1zwxlEJz/6XYogak4IvkpG/ZhNd6KOuaLnDNrKhswgzwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFDe28wjTx2/Fd6zPiKady+hKi1jMB8GA1UdIwQY
MBaAFGe1sC3EAWZu4EWrkMyIgX/gnXBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQt
YjVkODg4YWRmZDM3LzEvVU43YnpDTlBIYjhWM3JNLUlwcDNMNkVxTFdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82NGEzZGUtODEyYS00YWNlLTgxNGQtYjVkODg4YWRmZDM3
LzEvWjdXd0xjUUJabTdnUmF1UXpJaUJmLUNkY0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQClP08AwQA
o6uZMA0GCSqGSIb3DQEBCwUAA4IBAQC3GHXh479sO/lEsawhAyLJ9+Zv0AgGNcjm
Wptm4B5YGud4W/7W5KoZ0Jr1ECSe2MRW0vSMI6W2+tQKXOQwfq3hTEzztiAdpkz9
EeUw7Nw7GVEQfasa1N/Gp4XPucZUkf4gTeFIr9IIojmR69ChOwCPAf44haepvbkp
Dh5EaKHLCkIkpQHV0cnNvbAM2i0ZCHIKp5MbJQCj/Eik8UrHTTn51lsmPPqDJm4v
/6bEJKrURrJERF2Twl1wCeBEC8ybnEV7UKQJkQONDB1Zhz6/DqydMlZ3YmuWWRdT
jiEs8peUxHxBfhvV8cuCdbCli15fbbz31EF7zhHWfHkqlhHCPyru
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:21:50 2025 by rpki-client