Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/1-uvnypTJiAMYurnKwWyxcRmz-Wc.roa
File: 1-uvnypTJiAMYurnKwWyxcRmz-Wc.roa (raw, json)
Hash identifier: 7L5a1973Cj72sdBiVUnYBHk5jL2kwGUH8Rr/4w9T8q0=
Subject key identifier: FA:EB:E7:CA:94:C9:88:03:18:BA:B9:CA:C1:6C:B1:71:19:B3:F9:67
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 019425FDD9C995F923E8543D84F18002246B
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/1-uvnypTJiAMYurnKwWyxcRmz-Wc.roa
Signing time: Thu 02 Jan 2025 07:49:40 +0000
ROA not before: Thu 02 Jan 2025 07:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.5.0/24 maxlen: 24
152.53.12.0/22 maxlen: 24
152.53.16.0/22 maxlen: 24
152.53.20.0/22 maxlen: 24
152.53.32.0/22 maxlen: 24
152.53.44.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.64.0/22 maxlen: 24
152.53.84.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
Validation: Failed, certificate revoked on Mon 27 Jan 2025 12:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d9:c9:95:f9:23:e8:54:3d:84:f1:80:02:24:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Jan 2 07:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faebe7ca94c9880318bab9cac16cb17119b3f967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:ef:b6:c9:0a:fb:a7:23:6d:b0:ce:b4:81:
4b:2b:e2:6c:04:35:d6:82:b3:b7:00:af:a8:24:f6:
bf:d9:a1:d6:38:7a:ef:68:33:77:03:0a:06:ea:5d:
1d:34:cb:5d:56:e0:0b:22:92:b8:25:b7:c0:83:43:
eb:94:d9:e9:8f:07:d6:a2:b7:fe:a1:07:5f:c2:de:
d3:e1:ef:4e:f2:f5:0b:06:d0:86:a9:b9:21:d9:0c:
8e:81:62:38:15:50:63:e3:e1:37:4d:55:93:e8:58:
37:80:a1:24:44:0b:cf:b3:29:70:47:42:b8:40:48:
66:ec:27:77:46:93:bb:1b:52:bb:ad:87:06:f2:af:
38:96:73:c4:ac:22:da:e9:2b:7d:d4:69:8f:dc:43:
43:45:6c:d5:d5:cb:eb:31:e6:58:2f:0e:f2:06:c7:
44:da:3d:97:84:1c:68:a2:32:89:e4:f0:f3:c9:ca:
11:b7:87:df:3a:7c:f8:56:e9:8b:55:37:24:14:fa:
68:14:b9:b0:7b:45:3b:53:82:96:72:af:a3:db:b6:
c8:7f:a9:d7:7b:a2:36:f6:0c:07:16:34:f1:35:14:
d3:62:b7:36:86:4b:0f:7c:9e:e4:59:f6:89:09:71:
e5:b1:78:ae:79:ec:2a:3d:75:6f:23:10:70:33:e2:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EB:E7:CA:94:C9:88:03:18:BA:B9:CA:C1:6C:B1:71:19:B3:F9:67
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/1-uvnypTJiAMYurnKwWyxcRmz-Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:de:44:3b:e3:44:9b:05:cd:71:99:f4:a8:e6:4d:92:6f:2c:
73:0e:34:8e:d0:fe:cb:42:25:d9:46:b1:97:48:ef:98:77:a8:
bd:1d:65:02:22:dd:0d:b4:6a:89:17:6c:45:c2:56:d7:03:c6:
cd:75:aa:c6:ac:b8:cf:18:15:35:fb:06:c2:43:ff:0d:dc:66:
d1:1a:75:84:13:21:37:e6:2c:6b:25:78:35:a7:87:8e:ee:97:
bc:59:61:fe:c9:8f:68:d0:9c:c9:88:5a:f3:be:27:32:7e:10:
24:81:a0:a8:e8:e6:17:9c:05:59:32:a7:53:bf:db:da:24:e6:
b9:62:d1:c2:c8:ba:52:98:59:63:13:79:b9:b0:2b:f2:d4:fd:
4f:54:ec:64:81:58:0b:09:fd:90:62:44:d6:f2:b4:f5:09:f1:
17:c8:1b:27:fb:e5:4f:30:e3:d1:4c:31:b4:d0:4d:59:e2:8b:
03:8c:b9:be:80:d5:ea:93:67:a6:8f:01:86:f8:2e:a1:fc:79:
1a:23:e3:2e:d9:62:90:68:4f:ca:00:19:c1:69:48:d6:a7:97:
63:8a:09:24:ac:db:66:e6:c1:32:8e:2c:69:79:2f:0f:cd:ce:
e0:ff:94:03:d8:88:dd:a3:4f:c7:92:94:cb:18:37:dd:91:bc:
cc:ec:da:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:31:16 2025 by rpki-client