Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/mGmLc78rqrWogfqs9LdlNZGzRNI.roa
File: mGmLc78rqrWogfqs9LdlNZGzRNI.roa (raw, json)
Hash identifier: igdAyjf+XatTSKheXj2LwkpZe2aKON6Ce7yEddzym5M=
Subject key identifier: 98:69:8B:73:BF:2B:AA:B5:A8:81:FA:AC:F4:B7:65:35:91:B3:44:D2
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0194CFE6F1D1B1819D2F59AE87FCFFDD4D41
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/mGmLc78rqrWogfqs9LdlNZGzRNI.roa
Signing time: Tue 04 Feb 2025 07:40:06 +0000
ROA not before: Tue 04 Feb 2025 07:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42473
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.8.0/24 maxlen: 24
152.53.9.0/24 maxlen: 24
152.53.24.0/24 maxlen: 24
152.53.30.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.59.0/24 maxlen: 24
152.53.62.0/24 maxlen: 24
152.53.63.0/24 maxlen: 24
152.53.64.0/22 maxlen: 24
152.53.69.0/24 maxlen: 24
152.53.75.0/24 maxlen: 24
152.53.78.0/24 maxlen: 24
152.53.80.0/22 maxlen: 22
152.53.84.0/22 maxlen: 22
152.53.88.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.98.0/24 maxlen: 24
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.124.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
Validation: Failed, certificate revoked on Thu 06 Feb 2025 07:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cf:e6:f1:d1:b1:81:9d:2f:59:ae:87:fc:ff:dd:4d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Feb 4 07:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98698b73bf2baab5a881faacf4b7653591b344d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:57:38:99:4b:23:98:0c:2b:fa:48:c1:af:0d:
be:16:75:05:e8:53:08:42:e7:3a:63:2c:77:16:83:
8a:44:e6:c5:0c:ff:40:7a:59:b0:3b:3b:d9:ff:6e:
87:9e:df:5f:ce:7f:0e:8e:cc:76:81:4e:a8:30:fa:
19:1e:3c:eb:c2:02:e5:40:2a:f2:1f:d1:4b:24:e5:
69:96:58:b6:03:8a:ab:57:ae:3c:da:dc:7f:5e:fc:
68:8e:b3:5e:b6:47:70:c1:7e:b7:1f:39:02:49:9e:
04:56:d5:25:6a:11:ab:2f:86:c6:ae:8f:d9:71:89:
9a:c4:fa:a1:ae:2b:f2:59:51:3b:55:d0:6c:5c:90:
3d:60:a0:bf:3f:b6:d5:cc:4c:47:78:42:56:2a:21:
34:41:7a:0d:c5:a8:bb:64:bb:5d:9a:ac:c0:ad:0e:
44:95:f2:9a:6d:59:72:11:9f:80:b0:ff:37:3c:49:
7a:45:9f:60:a7:16:63:3b:fb:e0:21:d2:90:14:f0:
c4:8d:c2:e0:2f:20:47:71:f1:03:60:1c:b8:0a:82:
4b:e3:5c:48:cf:32:e8:67:3b:e3:03:f6:a4:7c:82:
ec:cf:c9:6a:4c:2e:ab:a0:2e:4e:e1:12:b2:d4:18:
ab:97:d5:0f:6f:ec:97:00:b2:3b:07:92:1b:cf:10:
5f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:8B:73:BF:2B:AA:B5:A8:81:FA:AC:F4:B7:65:35:91:B3:44:D2
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/mGmLc78rqrWogfqs9LdlNZGzRNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:0f:61:15:ae:3d:b7:7e:87:d0:58:9d:ce:a0:a5:10:59:29:
dc:98:5d:10:3c:5e:87:7e:b7:c6:10:57:36:48:89:83:78:dd:
88:8e:47:8e:ae:a3:45:4c:5a:74:5f:f6:1b:64:a6:b5:4d:b7:
9b:47:c1:ed:73:f3:a1:76:92:92:1b:d6:c5:15:77:65:0f:6d:
25:10:2b:9f:5c:ab:7d:07:13:98:fe:46:c0:d2:88:3a:4a:3a:
48:d6:87:13:41:b3:d8:ce:3d:74:5f:cf:10:e5:fb:ef:b2:c3:
04:f8:dc:90:e8:30:04:9f:41:78:7e:45:fb:09:61:00:26:3c:
bf:0d:99:02:90:2a:b0:0f:81:bc:5c:03:6d:08:2a:ac:11:4b:
bc:f8:80:e8:ab:96:b9:c6:ea:83:6f:05:8f:85:bd:bc:75:12:
03:b0:46:37:17:22:39:ea:05:54:cb:ba:8b:91:c2:da:3d:88:
94:74:bb:f7:d8:01:bc:1d:fa:0d:82:4b:02:00:6a:fc:be:de:
e2:0e:aa:7c:b2:13:2b:51:97:74:aa:03:c4:05:b9:f8:9c:a1:
f5:d9:72:07:4f:d1:12:73:36:50:61:c1:e7:a7:d4:65:36:6b:
77:c3:50:34:9b:cf:3d:0d:b7:37:36:20:04:46:59:ae:b2:40:
60:ac:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:21:08 2025 by rpki-client