Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/IwQ0_hj0-rZAINEN0a2NRvWpWZc.roa
File: IwQ0_hj0-rZAINEN0a2NRvWpWZc.roa (raw, json)
Hash identifier: GcqTT5JVHUpc8HNevVZNjdwrdnte1QL5P5JahaLtylQ=
Subject key identifier: 23:04:34:FE:18:F4:FA:B6:40:20:D1:0D:D1:AD:8D:46:F5:A9:59:97
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0194DB35D7CE743973D0610FFF4C4EE2A54A
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/IwQ0_hj0-rZAINEN0a2NRvWpWZc.roa
Signing time: Thu 06 Feb 2025 12:22:06 +0000
ROA not before: Thu 06 Feb 2025 12:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42473
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.6.0/24 maxlen: 24
152.53.8.0/24 maxlen: 24
152.53.9.0/24 maxlen: 24
152.53.24.0/24 maxlen: 24
152.53.25.0/24 maxlen: 24
152.53.30.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.59.0/24 maxlen: 24
152.53.62.0/24 maxlen: 24
152.53.63.0/24 maxlen: 24
152.53.64.0/22 maxlen: 24
152.53.69.0/24 maxlen: 24
152.53.75.0/24 maxlen: 24
152.53.78.0/24 maxlen: 24
152.53.79.0/24 maxlen: 24
152.53.80.0/22 maxlen: 22
152.53.84.0/22 maxlen: 22
152.53.88.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.98.0/24 maxlen: 24
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.124.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
Validation: Failed, certificate revoked on Fri 07 Feb 2025 09:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:db:35:d7:ce:74:39:73:d0:61:0f:ff:4c:4e:e2:a5:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Feb 6 12:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=230434fe18f4fab64020d10dd1ad8d46f5a95997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:b7:72:1a:d7:f2:1b:74:3a:81:dc:ed:5a:
a7:4a:71:89:62:e6:70:0a:fb:4e:a4:bb:eb:36:83:
8d:17:28:8b:22:c6:da:8a:67:ff:87:76:8e:30:27:
42:d3:87:3a:60:ce:a1:44:f4:70:43:ee:55:33:d3:
a6:07:a7:7d:de:df:d5:a4:b1:f9:f0:56:34:c5:d1:
6f:51:ab:57:81:12:ca:da:73:79:12:4e:a4:5b:81:
2b:7e:e0:e6:bd:4d:52:d1:3c:40:e3:61:00:a6:9c:
66:15:92:82:4e:50:11:cd:7a:e6:8c:7d:fa:16:6e:
fa:a0:d8:76:8f:bf:41:68:11:ef:da:8d:65:2e:07:
38:1f:48:11:df:df:03:dd:13:eb:6d:7d:d3:f4:2f:
cd:eb:37:cc:cc:4e:0a:ed:90:ed:88:59:74:41:82:
b0:26:f9:a3:9d:c7:10:4f:cd:77:82:1e:24:e2:14:
f3:64:2a:56:ad:7e:2a:2b:37:63:0f:82:80:86:af:
96:34:6b:b7:e1:7d:6c:3c:3a:d0:20:b2:84:e1:7b:
07:62:5d:7a:a4:b2:20:9b:91:f1:7e:e1:94:65:5f:
28:98:26:e0:18:a8:f9:69:49:20:72:61:f1:15:03:
ac:c3:0e:ad:f6:f2:30:05:02:3b:ee:e3:29:ab:34:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:04:34:FE:18:F4:FA:B6:40:20:D1:0D:D1:AD:8D:46:F5:A9:59:97
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/IwQ0_hj0-rZAINEN0a2NRvWpWZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
40:68:3a:b5:34:24:26:48:4b:78:a7:40:be:56:08:f4:73:25:
63:34:ef:01:ca:f8:60:e3:3e:86:2c:34:28:76:87:b2:dc:20:
f8:32:2a:ce:cc:af:87:7c:1a:28:4c:84:4c:34:af:7b:3f:8d:
3e:e0:c9:17:04:bd:e0:5b:a7:b8:a2:bd:b4:05:b1:9a:f8:ac:
64:4a:85:dc:e4:e5:01:75:09:fe:8a:83:6e:50:2e:1b:e8:d1:
e3:24:6d:d2:1d:0c:f0:ce:68:18:a0:e0:20:98:ce:33:9b:6c:
af:70:f9:9c:a6:5f:d4:32:cb:65:31:29:b8:46:02:33:d6:a1:
a4:74:b0:e0:1e:52:f5:07:c6:f1:dc:ee:6a:a9:48:8f:b4:79:
a9:b0:07:a0:d0:89:ed:61:d5:de:19:81:f4:55:97:7a:65:8f:
4f:44:79:e4:46:55:3e:1d:e8:4a:a5:33:71:bb:6b:b1:4e:c2:
a8:a4:78:5c:31:32:e3:22:1d:fc:04:2c:e3:45:94:71:26:5b:
4f:62:e5:51:47:07:44:f6:fa:07:06:93:e0:35:a4:a5:cb:d7:
58:23:de:be:56:11:e2:4c:f6:ac:bd:92:6b:77:b1:d1:53:73:
b3:d5:4c:4c:a4:42:6b:4b:e1:6c:3a:d8:b7:05:c9:0f:c1:15:
b0:f0:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:51:49 2025 by rpki-client