Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/EHYtBKi14KjB16wvMlI0no_0nbs.roa
File: EHYtBKi14KjB16wvMlI0no_0nbs.roa (raw, json)
Hash identifier: mzd9GlQ2PAwVyzcHoNGUtPC1R0dmLIQwB5c1G4g9BoM=
Subject key identifier: 10:76:2D:04:A8:B5:E0:A8:C1:D7:AC:2F:32:52:34:9E:8F:F4:9D:BB
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 01937325B0E95C29FFE83399F7087D8F3D57
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/EHYtBKi14KjB16wvMlI0no_0nbs.roa
Signing time: Thu 28 Nov 2024 14:21:10 +0000
ROA not before: Thu 28 Nov 2024 14:21:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.5.0/24 maxlen: 24
152.53.12.0/22 maxlen: 24
152.53.16.0/22 maxlen: 24
152.53.20.0/22 maxlen: 24
152.53.32.0/22 maxlen: 24
152.53.44.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.64.0/22 maxlen: 24
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
Validation: Failed, certificate revoked on Fri 29 Nov 2024 09:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:25:b0:e9:5c:29:ff:e8:33:99:f7:08:7d:8f:3d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Nov 28 14:21:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10762d04a8b5e0a8c1d7ac2f3252349e8ff49dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:1d:3c:5f:2b:11:aa:22:1b:4e:54:db:22:
bc:97:b0:4d:82:98:c2:d8:ff:34:c9:af:e2:b4:d3:
25:52:7e:23:8e:bd:39:30:85:4d:26:9f:b7:90:98:
50:3e:75:24:16:f8:91:bf:d1:8c:e9:c5:b5:42:bd:
0b:3b:b9:1f:b2:01:42:e1:65:73:69:a9:6d:a8:42:
a3:af:1b:22:34:58:19:12:1e:8b:47:0f:5a:2d:e0:
57:bd:0e:03:dc:51:34:e7:02:9d:59:55:67:37:7e:
4b:b1:cd:c2:37:2c:1b:11:b9:2a:c4:12:86:69:18:
7d:42:6c:58:5d:d9:e8:75:8c:c8:59:1a:4b:15:fa:
0c:f7:b3:3e:38:f9:36:7c:9f:fe:e9:f6:3f:51:87:
7f:b2:99:37:d9:be:03:18:9e:fb:5d:80:b5:91:a7:
fd:00:36:d3:35:3e:20:ee:be:76:33:38:12:3c:a3:
38:bd:bc:ad:2f:1a:40:c5:39:1c:e8:a0:30:f1:6c:
95:5e:2e:fa:b2:8d:4f:36:fa:1a:22:0f:00:04:ae:
4e:e3:83:d4:c1:94:a4:a2:47:c9:1e:cb:77:8d:9a:
de:3e:66:ec:01:56:cb:f2:9b:bf:27:d1:3a:e1:10:
7b:da:a4:07:af:88:bf:8a:17:31:0a:88:86:a5:fa:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:76:2D:04:A8:B5:E0:A8:C1:D7:AC:2F:32:52:34:9E:8F:F4:9D:BB
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/EHYtBKi14KjB16wvMlI0no_0nbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5a:aa:cb:3e:3a:9c:b2:c5:c4:27:78:fe:fe:52:3b:f7:5e:d7:
96:54:b5:5d:59:7a:5e:5f:c7:4a:11:da:87:0a:49:9d:57:da:
c4:d1:92:88:e0:07:a7:e4:9c:dc:24:f7:02:74:e2:e6:8e:1e:
a1:1d:d1:b0:57:cf:14:d9:d8:4c:c8:b0:f9:23:80:c0:3d:d7:
b9:20:1d:32:22:33:a7:59:25:7f:6c:66:48:18:c2:95:44:f4:
5b:0c:c8:5b:e0:e0:12:91:3c:f0:30:24:18:54:a9:69:a2:7b:
fa:bd:a4:4c:75:41:b7:64:13:34:42:26:e1:92:f8:be:be:c0:
a1:f6:b0:a6:e0:0c:e1:f0:0a:dc:cf:ca:da:f3:f2:6a:88:bb:
4e:65:2d:86:b6:bf:bc:0b:fb:d3:c3:06:39:90:04:bf:37:9d:
51:0b:17:43:6d:fe:af:ca:d8:66:e1:56:6d:06:ac:15:9d:bd:
37:66:01:53:61:db:8c:62:92:d1:6e:b8:39:5f:be:df:cd:d1:
49:20:56:9f:9f:43:24:0b:d3:a5:f9:de:16:53:53:09:8b:43:
bb:0a:c2:5b:e5:4e:04:a8:97:81:8f:3e:54:be:30:0a:ac:14:
3a:b6:75:37:6e:cd:98:2c:4d:f0:e9:bc:a5:59:d8:28:ca:12:
74:62:df:a5
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZNzJbDpXCn/6DOZ9wh9jz1XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0
MjVmMGUwHhcNMjQxMTI4MTQyMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDc2MmQwNGE4YjVlMGE4YzFkN2FjMmYzMjUyMzQ5ZThmZjQ5ZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKMdPF8rEaoiG05U2yK8l7BNgpjC
2P80ya/itNMlUn4jjr05MIVNJp+3kJhQPnUkFviRv9GM6cW1Qr0LO7kfsgFC4WVz
aaltqEKjrxsiNFgZEh6LRw9aLeBXvQ4D3FE05wKdWVVnN35Lsc3CNywbEbkqxBKG
aRh9QmxYXdnodYzIWRpLFfoM97M+OPk2fJ/+6fY/UYd/spk32b4DGJ77XYC1kaf9
ADbTNT4g7r52MzgSPKM4vbytLxpAxTkc6KAw8WyVXi76so1PNvoaIg8ABK5O44PU
wZSkokfJHst3jZrePmbsAVbL8pu/J9E64RB72qQHr4i/ihcxCoiGpfqloQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFBB2LQSoteCowdesLzJSNJ6P9J27MB8GA1UdIwQY
MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt
N2RiNjg2OGQ4NDc0LzEvRUhZdEJLaTE0S2pCMTZ3dk1sSTBub18wbmJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0
LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDUwDQYJ
KoZIhvcNAQELBQADggEBAFqqyz46nLLFxCd4/v5SO/de15ZUtV1Zel5fx0oR2ocK
SZ1X2sTRkojgB6fknNwk9wJ04uaOHqEd0bBXzxTZ2EzIsPkjgMA917kgHTIiM6dZ
JX9sZkgYwpVE9FsMyFvg4BKRPPAwJBhUqWmie/q9pEx1QbdkEzRCJuGS+L6+wKH2
sKbgDOHwCtzPytrz8mqIu05lLYa2v7wL+9PDBjmQBL83nVELF0Nt/q/K2GbhVm0G
rBWdvTdmAVNh24xiktFuuDlfvt/N0UkgVp+fQyQL06X53hZTUwmLQ7sKwlvlTgSo
l4GPPlS+MAqsFDq2dTduzZgsTfDpvKVZ2CjKEnRi36U=
-----END CERTIFICATE-----
Generated at Sun Apr 13 12:26:02 2025 by rpki-client