Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/vVtmQjL1TpiUSyL-JtEgFtQGQKk.roa
File: vVtmQjL1TpiUSyL-JtEgFtQGQKk.roa (raw, json)
Hash identifier: wbiY2k8obIyuf3i0ORgmtVM0EICvGWZdkFNBj72fMEw=
Subject key identifier: BD:5B:66:42:32:F5:4E:98:94:4B:22:FE:26:D1:20:16:D4:06:40:A9
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 01953CC2A0730E6A8DB82CD689AFEA23E64A
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/vVtmQjL1TpiUSyL-JtEgFtQGQKk.roa
Signing time: Tue 25 Feb 2025 10:59:02 +0000
ROA not before: Tue 25 Feb 2025 10:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214996
IP address blocks: 152.53.31.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
152.53.52.0/22 maxlen: 22
152.53.68.0/24 maxlen: 24
152.53.80.0/22 maxlen: 22
152.53.88.0/22 maxlen: 22
152.53.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 08 Apr 2025 12:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:c2:a0:73:0e:6a:8d:b8:2c:d6:89:af:ea:23:e6:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Feb 25 10:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd5b664232f54e98944b22fe26d12016d40640a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:2c:c1:e1:0b:25:a1:17:13:19:c3:06:99:
46:0b:55:af:3d:dc:8a:bc:4d:73:dc:38:f3:d6:70:
f1:5f:81:ba:b9:c0:a0:5d:65:f3:5e:7c:f4:e2:14:
23:f8:a8:6d:3e:2e:d5:1b:36:1a:89:dd:52:90:d1:
b0:e3:a3:60:3e:4b:cf:f7:6e:92:6b:ba:c2:87:8b:
b0:bc:d3:60:51:cd:38:67:d8:0b:20:ed:25:64:cc:
96:85:79:a6:56:3d:c8:e1:be:5e:b3:52:e8:05:40:
cb:4a:e8:95:5b:02:33:9b:09:89:ba:24:18:76:df:
e0:d1:30:e2:03:39:80:b0:42:73:c3:83:2f:39:15:
7e:13:56:be:a7:98:a7:b5:ca:86:b8:55:aa:ad:82:
d1:5e:2f:9f:db:c7:6f:81:db:a3:85:53:53:e2:84:
4a:20:ae:c9:2b:13:c2:ec:8a:21:a3:1a:34:cd:07:
02:d0:eb:c7:f8:24:03:ae:2f:1a:dd:6d:f8:42:8f:
57:74:b3:48:bc:0f:04:65:92:c3:04:d6:0c:cd:d4:
b2:bc:dc:1a:97:a0:25:46:5c:68:e5:a5:52:d7:fc:
f1:2b:72:ef:08:02:76:fc:0c:26:56:ab:bd:a2:3c:
fb:bc:d9:c8:e9:4d:14:36:26:81:fb:4a:5d:77:73:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5B:66:42:32:F5:4E:98:94:4B:22:FE:26:D1:20:16:D4:06:40:A9
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/vVtmQjL1TpiUSyL-JtEgFtQGQKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.31.0/24
152.53.36.0/22
152.53.52.0/22
152.53.68.0/24
152.53.80.0/22
152.53.88.0/22
152.53.240.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:1b:8e:a1:85:07:3a:d5:33:75:77:f4:ae:33:f9:6c:b3:f8:
cb:c9:23:ff:d0:0c:21:91:8e:3a:c0:58:90:fa:fa:eb:8e:57:
bb:af:17:31:cf:62:b9:9f:82:0b:ac:cc:89:ff:16:14:b7:0f:
a8:20:54:8d:37:0d:b4:0c:6b:fc:87:65:60:8d:89:de:f0:2b:
f5:6c:a5:cc:c8:d5:1a:43:d1:d0:60:da:77:66:2a:50:d5:27:
86:03:d6:64:17:cb:1a:08:a4:78:d1:1a:5f:b7:7d:de:a1:86:
b6:05:c1:4b:2e:8b:95:eb:27:ff:37:0d:06:ad:f4:a3:ab:e1:
26:ed:b2:e0:eb:e1:99:fe:d0:6c:ee:68:e9:ef:88:47:aa:e3:
2b:2d:64:b2:15:b3:2e:1a:6a:ab:22:05:d7:36:d6:b6:98:ef:
c8:78:f2:73:d4:da:3d:53:8f:b6:d4:ac:c9:04:29:b7:4b:0d:
2e:ad:bc:f2:c0:68:26:30:bd:bb:9c:f8:83:c3:d0:b0:a2:3c:
62:c2:2c:80:c3:65:57:65:46:7e:3b:d1:26:59:e3:6b:4d:85:
74:69:33:6f:66:fa:e2:ee:32:59:06:f3:75:01:3c:23:ad:d8:
10:af:97:bc:72:94:39:10:e0:63:0a:55:75:f6:9a:49:3e:c7:
62:0a:c5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:26:13 2025 by rpki-client