Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/oujTJ4EAWzNgdHPMXF1cOG5rWaU.roa
File: oujTJ4EAWzNgdHPMXF1cOG5rWaU.roa (raw, json)
Hash identifier: VPJylJGuzIi2BRhgcXzmyMjX0r9LkuX+7RuIJxkrquE=
Subject key identifier: A2:E8:D3:27:81:00:5B:33:60:74:73:CC:5C:5D:5C:38:6E:6B:59:A5
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 01951898D0112DA88976E6E6B172BEA5BBDC
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/oujTJ4EAWzNgdHPMXF1cOG5rWaU.roa
Signing time: Tue 18 Feb 2025 10:27:02 +0000
ROA not before: Tue 18 Feb 2025 10:27:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42473
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.6.0/24 maxlen: 24
152.53.7.0/24 maxlen: 24
152.53.8.0/24 maxlen: 24
152.53.9.0/24 maxlen: 24
152.53.24.0/24 maxlen: 24
152.53.25.0/24 maxlen: 24
152.53.30.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.59.0/24 maxlen: 24
152.53.62.0/24 maxlen: 24
152.53.63.0/24 maxlen: 24
152.53.64.0/22 maxlen: 24
152.53.69.0/24 maxlen: 24
152.53.75.0/24 maxlen: 24
152.53.78.0/24 maxlen: 24
152.53.79.0/24 maxlen: 24
152.53.80.0/22 maxlen: 22
152.53.84.0/22 maxlen: 22
152.53.88.0/22 maxlen: 22
152.53.92.0/22 maxlen: 22
152.53.98.0/24 maxlen: 24
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
152.53.108.0/22 maxlen: 22
152.53.112.0/22 maxlen: 22
152.53.116.0/22 maxlen: 22
152.53.124.0/22 maxlen: 22
152.53.128.0/20 maxlen: 22
152.53.224.0/22 maxlen: 22
152.53.228.0/22 maxlen: 22
152.53.236.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 25 Feb 2025 10:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:98:d0:11:2d:a8:89:76:e6:e6:b1:72:be:a5:bb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Feb 18 10:27:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2e8d32781005b33607473cc5c5d5c386e6b59a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:73:bb:16:e3:21:92:d3:9b:bf:94:d0:76:
ac:e2:9f:4b:48:12:93:f9:0b:d2:68:0b:8f:83:1e:
e5:de:e9:8a:89:53:f3:9d:cc:3f:c2:21:77:16:f9:
3c:66:32:85:4d:10:99:ff:59:ce:b0:31:37:70:94:
ff:45:31:84:3c:59:07:4d:ab:e9:78:8c:f7:40:f4:
48:07:fa:33:91:20:ab:61:4c:00:c7:fc:af:52:c0:
b4:dc:4f:bb:0b:f5:4d:89:b4:83:40:92:fc:cc:5f:
03:37:27:9e:03:15:34:ae:f3:dc:5e:4d:90:b6:8a:
66:6e:25:c9:63:0e:96:a9:cf:2e:61:0e:5a:1a:f0:
40:97:0f:84:0f:11:14:e3:ae:54:f1:38:28:7d:13:
bd:b6:fd:dc:28:ae:63:3c:b6:cd:f3:6e:9b:1f:6a:
94:43:c7:5d:80:90:dd:9d:e0:1e:e7:3c:2a:34:b6:
c1:06:64:02:7b:ea:a2:e9:e8:cf:f6:02:0b:48:e8:
bd:c9:8b:26:59:f8:26:83:37:2f:62:96:33:04:f2:
d0:9b:28:3e:8f:d5:f7:21:38:6c:b5:2e:7c:32:be:
8a:dd:a0:da:72:65:09:50:61:92:a5:22:03:96:fb:
ee:b0:5c:8a:53:1b:24:00:93:2a:5a:72:60:cf:d4:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E8:D3:27:81:00:5B:33:60:74:73:CC:5C:5D:5C:38:6E:6B:59:A5
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/oujTJ4EAWzNgdHPMXF1cOG5rWaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:7b:64:10:99:2f:16:16:94:27:f6:53:0c:01:4d:0f:e6:6d:
4d:98:5d:cb:18:d6:e6:02:a7:4e:3a:89:89:8b:ee:62:15:25:
e8:77:32:8d:74:c8:49:57:83:76:be:3b:98:68:07:a5:12:4c:
56:66:fc:6b:6a:3a:4f:68:b4:62:06:6c:99:b5:5c:07:a0:4e:
ab:3e:40:0e:d2:38:29:b8:5e:ee:cd:b1:0c:05:29:b0:ba:ed:
af:a4:6a:f7:7e:dd:76:47:a9:b7:07:2c:13:47:45:88:50:0e:
77:5f:ee:0c:b6:92:36:4f:95:72:83:57:57:e3:ac:31:9f:d3:
c0:05:11:b8:85:7e:ec:38:a1:15:88:74:78:5e:38:f5:95:91:
f5:0e:5c:e8:f7:8d:5b:49:8a:c3:b0:a4:35:cc:12:f6:5c:3b:
ed:0a:e2:f7:b3:42:19:0b:b8:d9:50:64:2f:df:27:28:1f:53:
14:72:3e:ce:c3:ab:0d:09:50:cd:bc:5e:01:83:b7:6e:6b:21:
d2:9c:3c:1c:99:b4:94:e9:df:76:85:7b:40:fa:f4:1c:b5:3e:
3a:a7:63:1f:68:4a:84:93:8e:a0:60:90:ef:e9:1d:af:60:c5:
9e:bc:5d:ba:2b:51:e1:ee:cb:f3:4e:1c:30:3d:df:dd:8a:be:
c7:22:39:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:46:58 2025 by rpki-client