Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/cI1qFFeQv-6tmDlJXHdCtLb_xvk.roa
File: cI1qFFeQv-6tmDlJXHdCtLb_xvk.roa (raw, json)
Hash identifier: N30f4uK70/lBJN5T3lYk5uifE1IRPljUC2AIj2qvivY=
Subject key identifier: 70:8D:6A:14:57:90:BF:EE:AD:98:39:49:5C:77:42:B4:B6:FF:C6:F9
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0194A7CEF82CFB7615B4C6E6D6EC99CF2693
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/cI1qFFeQv-6tmDlJXHdCtLb_xvk.roa
Signing time: Mon 27 Jan 2025 12:49:06 +0000
ROA not before: Mon 27 Jan 2025 12:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42473
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.9.0/24 maxlen: 24
152.53.24.0/24 maxlen: 24
152.53.30.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.59.0/24 maxlen: 24
152.53.62.0/24 maxlen: 24
152.53.63.0/24 maxlen: 24
152.53.64.0/22 maxlen: 24
152.53.69.0/24 maxlen: 24
152.53.75.0/24 maxlen: 24
152.53.78.0/24 maxlen: 24
152.53.80.0/22 maxlen: 22
152.53.84.0/22 maxlen: 22
152.53.88.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.98.0/24 maxlen: 24
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.124.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
Validation: Failed, certificate revoked on Tue 04 Feb 2025 07:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:ce:f8:2c:fb:76:15:b4:c6:e6:d6:ec:99:cf:26:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Jan 27 12:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=708d6a145790bfeead9839495c7742b4b6ffc6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:66:89:dd:f6:dc:d5:15:0c:01:a3:46:f1:
39:4b:2d:b3:e6:61:6c:bc:65:04:bd:be:8d:fc:ed:
e2:22:e2:d0:74:71:48:dd:15:b4:84:87:c6:fe:49:
07:bf:51:32:da:31:f7:ec:90:1b:ba:07:06:0a:e5:
f6:99:be:04:9c:b9:2a:a7:bc:15:fd:bb:5d:1e:25:
ea:af:15:a7:d4:ea:c3:32:73:bc:b3:5f:8f:54:ea:
54:e9:a8:68:53:62:87:fa:7a:af:a1:88:0e:48:16:
0b:07:7c:40:d6:12:4a:23:d8:41:94:9e:dc:22:de:
8c:1d:30:33:b8:7b:ef:be:c5:71:5d:76:0d:f8:1a:
2e:ce:59:d6:55:f1:1d:92:04:c9:b3:86:18:8f:26:
34:7e:ba:e9:e9:f5:b1:50:3e:36:ec:b1:b9:01:9c:
7c:0f:93:2d:c0:21:f8:89:18:46:9d:e6:5e:ca:e9:
a5:dc:28:35:43:09:09:53:fc:21:f5:ff:4c:d9:0c:
cc:a7:9e:b0:97:9d:1b:36:23:01:3e:b5:c9:c5:bf:
ff:7a:84:34:3a:87:94:84:b7:06:05:09:e1:90:3d:
dd:8c:f2:ba:90:f0:3d:92:5e:a7:6d:25:c3:a0:b0:
8c:89:96:14:48:b2:11:fa:34:df:1d:fc:ab:c3:b1:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8D:6A:14:57:90:BF:EE:AD:98:39:49:5C:77:42:B4:B6:FF:C6:F9
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/cI1qFFeQv-6tmDlJXHdCtLb_xvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:3b:7c:29:d6:70:1a:d2:d3:85:12:96:c1:2b:16:df:51:a8:
2a:96:91:25:f5:85:fa:45:18:b6:a0:43:88:ae:92:7d:85:10:
32:17:74:b8:bc:d0:cd:65:87:05:ad:ad:71:1e:ac:66:98:47:
a3:c9:38:c0:a3:aa:c4:94:a2:e3:49:0a:4c:27:ea:a7:b9:8d:
1d:bf:9b:f5:88:68:ff:0d:66:75:bf:cc:b9:03:62:27:d5:37:
9d:0c:09:64:11:79:a4:b8:1f:4b:27:24:03:ae:de:79:d6:33:
b9:25:d9:01:39:8c:72:81:fa:64:a6:ce:8a:33:b8:b6:fb:e0:
d5:6e:2e:bc:d9:f3:c4:e5:2a:65:f3:f4:eb:fe:96:17:a6:35:
40:3a:45:9c:01:3d:dc:91:ef:96:2f:b4:bf:4b:e5:6d:c0:2e:
4f:7f:ed:72:e1:d2:cb:a6:7d:1f:6c:aa:08:8b:9a:6b:29:d9:
b9:05:1f:4c:4c:2f:36:e0:ce:38:aa:c2:5b:0a:c8:f4:4a:48:
e5:0a:f9:ab:e4:e9:8d:a0:9f:ad:b1:f5:59:0e:dd:76:6d:78:
b0:6f:de:f2:03:ad:0f:aa:bd:7b:c9:b3:1a:6e:4e:d4:15:5c:
5c:03:67:90:bc:6b:7b:b4:1f:88:a1:b0:30:70:3f:c1:4b:e7:
48:8d:5c:23
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZSnzvgs+3YVtMbm1uyZzyaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0
MjVmMGUwHhcNMjUwMTI3MTI0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDhkNmExNDU3OTBiZmVlYWQ5ODM5NDk1Yzc3NDJiNGI2ZmZjNmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu65mid323NUVDAGjRvE5Sy2z5mFs
vGUEvb6N/O3iIuLQdHFI3RW0hIfG/kkHv1Ey2jH37JAbugcGCuX2mb4EnLkqp7wV
/btdHiXqrxWn1OrDMnO8s1+PVOpU6ahoU2KH+nqvoYgOSBYLB3xA1hJKI9hBlJ7c
It6MHTAzuHvvvsVxXXYN+BouzlnWVfEdkgTJs4YYjyY0frrp6fWxUD427LG5AZx8
D5MtwCH4iRhGneZeyuml3Cg1QwkJU/wh9f9M2QzMp56wl50bNiMBPrXJxb//eoQ0
OoeUhLcGBQnhkD3djPK6kPA9kl6nbSXDoLCMiZYUSLIR+jTfHfyrw7HotQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFHCNahRXkL/urZg5SVx3QrS2/8b5MB8GA1UdIwQY
MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt
N2RiNjg2OGQ4NDc0LzEvY0kxcUZGZVF2LTZ0bURsSlhIZEN0TGJfeHZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0
LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDUwDQYJ
KoZIhvcNAQELBQADggEBALE7fCnWcBrS04USlsErFt9RqCqWkSX1hfpFGLagQ4iu
kn2FEDIXdLi80M1lhwWtrXEerGaYR6PJOMCjqsSUouNJCkwn6qe5jR2/m/WIaP8N
ZnW/zLkDYifVN50MCWQReaS4H0snJAOu3nnWM7kl2QE5jHKB+mSmzoozuLb74NVu
LrzZ88TlKmXz9Ov+lhemNUA6RZwBPdyR75YvtL9L5W3ALk9/7XLh0sumfR9sqgiL
mmsp2bkFH0xMLzbgzjiqwlsKyPRKSOUK+avk6Y2gn62x9VkO3XZteLBv3vIDrQ+q
vXvJsxpuTtQVXFwDZ5C8a3u0H4ihsDBwP8FL50iNXCM=
-----END CERTIFICATE-----
Generated at Sun Apr 13 12:23:37 2025 by rpki-client