Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/Ey-FWyOoz7cTHBOWno9FD911CWs.roa
File: Ey-FWyOoz7cTHBOWno9FD911CWs.roa (raw, json)
Hash identifier: kmkoSUIZBCXuTFXyKYtJQTVnsuyKBE6WzrY7myPSyG8=
Subject key identifier: 13:2F:85:5B:23:A8:CF:B7:13:1C:13:96:9E:8F:45:0F:DD:75:09:6B
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0194DA793EF9EB197370E745764A15952B3C
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/Ey-FWyOoz7cTHBOWno9FD911CWs.roa
Signing time: Thu 06 Feb 2025 08:56:06 +0000
ROA not before: Thu 06 Feb 2025 08:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42473
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.8.0/24 maxlen: 24
152.53.9.0/24 maxlen: 24
152.53.24.0/24 maxlen: 24
152.53.25.0/24 maxlen: 24
152.53.30.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.59.0/24 maxlen: 24
152.53.62.0/24 maxlen: 24
152.53.63.0/24 maxlen: 24
152.53.64.0/22 maxlen: 24
152.53.69.0/24 maxlen: 24
152.53.75.0/24 maxlen: 24
152.53.78.0/24 maxlen: 24
152.53.79.0/24 maxlen: 24
152.53.80.0/22 maxlen: 22
152.53.84.0/22 maxlen: 22
152.53.88.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.98.0/24 maxlen: 24
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.124.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
Validation: Failed, certificate revoked on Thu 06 Feb 2025 12:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:79:3e:f9:eb:19:73:70:e7:45:76:4a:15:95:2b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Feb 6 08:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=132f855b23a8cfb7131c13969e8f450fdd75096b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:d3:ac:bc:ec:d0:0d:3f:a0:7a:3f:0f:ae:
a1:af:c5:72:a4:b0:8f:4d:93:92:8a:f3:fe:96:42:
86:90:50:ab:79:40:37:c1:f3:b8:4d:6f:48:57:e5:
25:af:40:d1:b3:12:59:58:6d:65:b0:53:8c:f3:da:
7b:38:f1:10:a1:ca:27:d7:d3:41:2f:5d:ca:64:61:
a6:b7:f0:d2:5d:f9:b2:07:84:43:77:a3:dd:c8:a6:
1b:ec:91:ce:c7:21:75:f6:0b:22:a4:c8:4c:27:d5:
ff:db:e9:59:04:49:fd:e7:37:b8:11:59:73:9e:71:
c6:66:a8:5c:bc:27:ab:57:87:46:d8:4f:14:14:e9:
27:a4:62:52:3f:0f:01:ea:f1:d1:ab:7f:da:95:f3:
0e:71:b6:a3:3f:95:89:81:74:4b:b8:b4:53:3c:7c:
74:8e:a4:59:4e:bb:67:aa:cb:c7:78:dc:2d:e2:91:
aa:91:15:c4:74:fd:91:4f:a2:27:e1:86:17:ad:0a:
c5:3a:cb:b0:9a:7e:c8:00:47:fe:8d:7c:46:5e:2e:
db:fd:e6:8c:7a:91:9a:17:23:66:c3:fa:40:f4:ac:
eb:fd:1d:da:cf:5d:a9:cc:3b:3c:b5:ff:23:c8:f4:
2e:28:d3:18:b8:84:6f:aa:5c:e1:94:f4:98:5f:8c:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2F:85:5B:23:A8:CF:B7:13:1C:13:96:9E:8F:45:0F:DD:75:09:6B
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/Ey-FWyOoz7cTHBOWno9FD911CWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:dd:10:bb:75:65:86:98:d2:80:0e:da:3b:15:ce:f8:23:c3:
67:ee:65:c9:34:bc:90:b9:6f:ca:0f:d4:cb:94:0f:fa:cc:06:
bd:97:a8:11:d3:9b:57:2a:37:fd:ec:50:44:f4:26:9a:b8:61:
32:bb:d9:da:db:93:32:a0:e2:ce:4a:da:a8:0a:6e:49:5f:36:
2f:98:93:af:de:df:3c:3c:66:a3:fc:21:75:85:01:3b:0d:e7:
34:52:90:43:12:ee:b3:52:4f:01:70:b5:1d:9a:c0:8d:27:bd:
c9:39:64:88:28:a1:99:46:36:3f:b6:40:ff:70:ca:49:c2:4f:
a0:11:7b:ce:43:37:ba:91:ee:94:49:21:18:8b:03:15:69:42:
28:c4:5d:60:83:92:9f:05:1c:d4:39:f5:72:da:90:e3:ef:df:
f7:fb:16:07:a8:5e:f4:da:48:4e:86:1e:42:11:b7:5d:6f:d0:
33:c9:da:10:ca:e4:75:d0:64:33:3e:ab:d4:fc:8b:2a:71:01:
a6:80:79:6b:3a:e4:fa:54:ea:e3:3d:89:05:ee:d6:4e:32:eb:
05:10:22:89:33:28:d9:91:4c:d0:b8:86:3d:bc:f2:0f:2c:07:
fa:11:c3:3d:2e:ef:34:88:ca:36:07:af:a6:bb:8d:64:d2:b8:
40:18:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:41:39 2025 by rpki-client