Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/VM4xZ1T7V1a0i0CTAaMpXjV9nCQ.roa
File: VM4xZ1T7V1a0i0CTAaMpXjV9nCQ.roa (raw, json)
Hash identifier: s76S+r9LciRoTcJACFRkjSVccC2o0cWbPSTDMYFspMc=
Subject key identifier: 54:CE:31:67:54:FB:57:56:B4:8B:40:93:01:A3:29:5E:35:7D:9C:24
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0193DF23C6740A645BBD9AD2335CA7376CCE
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/VM4xZ1T7V1a0i0CTAaMpXjV9nCQ.roa
Signing time: Thu 19 Dec 2024 13:38:03 +0000
ROA not before: Thu 19 Dec 2024 13:38:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.5.0/24 maxlen: 24
152.53.12.0/22 maxlen: 24
152.53.16.0/22 maxlen: 24
152.53.20.0/22 maxlen: 24
152.53.32.0/22 maxlen: 24
152.53.44.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.64.0/22 maxlen: 24
152.53.84.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:23:c6:74:0a:64:5b:bd:9a:d2:33:5c:a7:37:6c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Dec 19 13:38:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54ce316754fb5756b48b409301a3295e357d9c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:f2:e6:84:e2:5a:f8:95:92:ce:6f:f3:14:
78:f6:3d:19:bf:1e:30:25:d5:4a:05:76:a5:6d:7b:
15:9c:6b:19:a8:61:05:06:45:e3:0f:38:14:d0:74:
40:e8:a0:99:ef:26:91:d1:7b:8b:da:38:26:1a:37:
6c:b7:a2:09:09:17:9e:08:08:5a:fe:a2:6b:fb:11:
0a:ef:95:19:6e:36:a6:7c:53:fa:90:24:da:5f:5e:
97:76:69:5b:25:93:1a:75:6e:8b:34:76:64:d3:2c:
6c:c2:83:61:77:a8:3a:3c:f5:ef:94:0a:72:1e:e9:
42:5d:6e:4d:c7:cf:e1:6c:da:82:c9:ac:f1:cb:fa:
da:4d:4f:a1:e2:b4:f7:25:13:b1:36:b1:f3:d0:87:
a9:df:f9:94:18:b1:cb:e2:47:a3:23:82:bf:d2:d5:
72:c3:cd:9d:e3:10:8e:42:5c:b8:da:fa:25:8f:85:
86:63:9a:6a:24:5e:4b:aa:a7:a3:2f:99:a8:1b:b4:
e1:54:67:03:da:fa:4b:8b:51:47:d8:d4:e3:37:08:
95:a9:01:eb:87:5a:65:00:6e:a7:5a:59:05:cb:0c:
bd:8e:a2:26:37:fa:29:3a:cb:7b:a4:a6:ce:00:98:
56:ae:c0:ac:cd:af:d1:22:4e:3f:b8:f2:ac:d8:df:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CE:31:67:54:FB:57:56:B4:8B:40:93:01:A3:29:5E:35:7D:9C:24
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/VM4xZ1T7V1a0i0CTAaMpXjV9nCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:48:53:dd:3d:69:7e:b8:d2:97:78:d7:da:47:05:14:08:63:
d4:9b:6a:3a:07:b5:03:c3:ce:84:bf:10:89:9b:5c:03:33:c9:
15:9b:0a:be:24:23:d0:f9:32:90:ca:5c:3e:62:84:b1:8e:15:
4f:ae:7c:02:26:7e:06:ad:86:1d:64:ce:ab:82:30:8c:d2:e8:
62:d0:44:3b:de:7b:32:06:12:08:ed:58:0e:b0:f2:f2:fb:f1:
6e:2f:52:67:67:39:96:6c:21:a1:23:e9:e9:20:5d:85:9d:0e:
13:0d:17:8e:5e:cd:21:8a:ad:56:df:f3:ef:55:65:7a:af:b1:
73:9e:13:ae:1a:14:14:99:3c:28:c1:a1:2e:ab:ab:94:da:ad:
08:77:97:7c:2c:09:38:27:81:b0:4f:8e:43:2f:99:0b:3b:dd:
ca:73:bd:d7:a2:d5:d7:68:26:36:df:0c:92:18:66:7b:87:43:
f9:5c:76:fa:4e:2f:ce:ab:ba:32:33:e2:3e:7c:60:29:19:15:
4c:78:9f:86:f7:35:79:1a:ed:2c:b8:99:14:7c:2c:60:0f:90:
5e:80:99:a9:3a:ac:d4:c6:6b:17:d1:ef:b5:52:6c:29:87:4c:
cf:dc:8f:c2:f3:3d:a8:25:80:d2:0f:50:4f:18:c5:10:be:d6:
ca:09:2d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:54:31 2025 by rpki-client