Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/73s00QOjQFvhjpkjbVN83DVf9fw.roa
File: 73s00QOjQFvhjpkjbVN83DVf9fw.roa (raw, json)
Hash identifier: f50gj/1EKZTSdK0jG/Akxq0KtTl5+5K8jjt+0XLuhZ0=
Subject key identifier: EF:7B:34:D1:03:A3:40:5B:E1:8E:99:23:6D:53:7C:DC:35:5F:F5:FC
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 01936EB7596969A92309F909747334850F88
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/73s00QOjQFvhjpkjbVN83DVf9fw.roa
Signing time: Wed 27 Nov 2024 17:42:09 +0000
ROA not before: Wed 27 Nov 2024 17:42:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 137.174.0.0/17 maxlen: 22
137.174.128.0/18 maxlen: 22
137.174.192.0/19 maxlen: 22
147.123.32.0/19 maxlen: 22
147.123.36.0/22 maxlen: 24
147.123.128.0/17 maxlen: 22
155.204.0.0/17 maxlen: 22
155.204.64.0/20 maxlen: 20
155.204.80.0/21 maxlen: 21
155.204.88.0/21 maxlen: 21
155.204.96.0/21 maxlen: 21
155.204.104.0/21 maxlen: 21
155.204.119.0/24 maxlen: 24
155.204.128.0/19 maxlen: 22
155.204.136.0/21 maxlen: 21
155.204.208.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 28 Nov 2024 12:52:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:b7:59:69:69:a9:23:09:f9:09:74:73:34:85:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Nov 27 17:42:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef7b34d103a3405be18e99236d537cdc355ff5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:24:89:67:f7:3a:18:66:12:4b:0b:ea:38:3d:
97:4b:0b:65:73:31:f8:ce:25:47:8d:7b:5d:4d:dd:
f7:c4:cb:78:eb:d3:6d:5f:06:59:96:6e:9d:40:5f:
9c:0f:bf:db:99:53:ef:15:c6:cc:13:7e:cd:ff:90:
a6:88:dc:11:66:04:49:50:80:8c:15:7f:16:6c:14:
5a:46:82:c9:77:cc:c0:cc:a2:e8:37:d4:b5:3b:3e:
7d:14:34:99:bc:22:85:2c:eb:c8:81:39:eb:04:41:
af:4f:cc:5a:96:dc:7b:09:ea:c5:72:14:10:f0:c6:
44:44:03:ad:cb:ec:ea:fa:9d:69:76:8e:36:ee:81:
6b:d8:b6:26:ea:12:3c:7c:cc:1a:96:f5:5c:25:cf:
e5:c9:49:32:d5:b4:09:63:63:ad:b0:ab:01:ff:7b:
7b:be:83:e6:59:f7:fd:02:7d:2c:35:e4:71:75:29:
3f:a8:0c:43:12:67:82:b3:10:1d:c5:3b:97:21:45:
10:8f:0e:cd:cf:43:8a:0b:b0:29:60:ed:5c:b6:55:
6b:80:d7:35:99:bf:b0:e9:39:6e:56:99:5d:a8:28:
c4:dc:97:0c:9a:03:07:65:61:65:fd:9c:45:24:e9:
eb:21:c5:80:1e:85:77:db:7a:c3:3f:16:fe:54:1a:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7B:34:D1:03:A3:40:5B:E1:8E:99:23:6D:53:7C:DC:35:5F:F5:FC
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/73s00QOjQFvhjpkjbVN83DVf9fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.174.0.0-137.174.223.255
147.123.32.0/19
147.123.128.0/17
155.204.0.0-155.204.159.255
155.204.208.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:fb:92:3c:22:36:87:c8:b5:87:8c:7a:14:36:d6:89:fe:28:
25:b7:55:0d:04:77:2d:17:2e:8e:8c:f8:ec:fd:5f:80:38:4d:
b8:03:4f:53:6a:86:40:3f:c2:81:e3:ad:90:84:8b:ed:f2:db:
b4:5f:a2:a2:82:17:9f:33:76:ce:4b:ac:d6:c0:9f:a0:01:11:
97:3f:f5:d7:1c:28:24:21:8c:07:e1:00:88:66:7b:b6:11:7d:
22:02:db:10:77:96:2a:59:56:13:d7:e3:34:17:61:4a:c5:2f:
7a:be:3c:c8:67:f0:08:5d:54:cd:8b:f7:47:d3:1c:87:98:32:
02:d5:03:f3:ab:64:c7:f3:e5:fe:05:bb:7f:0e:99:fd:e7:e1:
a7:99:cf:a4:53:1e:98:9d:6f:93:6f:33:49:e9:8b:1c:a4:bf:
02:da:41:ae:98:71:05:93:ed:33:3c:70:5c:9a:d3:62:36:16:
b8:5a:25:8e:60:e9:1b:fc:67:45:92:73:c3:89:79:6c:fc:3f:
23:32:85:d2:23:98:c9:cf:c6:48:4e:a8:ec:3a:20:b7:db:19:
3e:28:84:bb:77:76:0d:83:91:ec:9a:16:99:16:ac:3d:e9:a2:
84:f2:8a:a1:80:b2:18:ab:57:05:7f:35:15:5a:f5:05:a5:75:
7c:c4:da:ce
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZNut1lpaakjCfkJdHM0hQ+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTVkODQwNTNlMmIwYzMxM2FmMWUzYmE1MTAyNDY2YTVm
Nzk2NzgwHhcNMjQxMTI3MTc0MjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjdiMzRkMTAzYTM0MDViZTE4ZTk5MjM2ZDUzN2NkYzM1NWZmNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiSJZ/c6GGYSSwvqOD2XSwtlczH4
ziVHjXtdTd33xMt469NtXwZZlm6dQF+cD7/bmVPvFcbME37N/5CmiNwRZgRJUICM
FX8WbBRaRoLJd8zAzKLoN9S1Oz59FDSZvCKFLOvIgTnrBEGvT8xaltx7CerFchQQ
8MZERAOty+zq+p1pdo427oFr2LYm6hI8fMwalvVcJc/lyUky1bQJY2OtsKsB/3t7
voPmWff9An0sNeRxdSk/qAxDEmeCsxAdxTuXIUUQjw7Nz0OKC7ApYO1ctlVrgNc1
mb+w6TluVpldqCjE3JcMmgMHZWFl/ZxFJOnrIcWAHoV323rDPxb+VBpwvwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFO97NNEDo0Bb4Y6ZI21TfNw1X/X8MB8GA1UdIwQY
MBaAFCKl2EBT4rDDE68eO6UQJGal95Z4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUt
NTkxY2FmNTM2ZWNjLzEvNzNzMDBRT2pRRnZoanBramJWTjgzRFZmOWZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lM2ZiN2QtZGQ0Yi00ZDg1LWIwOGUtNTkxY2FmNTM2ZWNj
LzEvSXFYWVFGUGlzTU1Ucng0N3BSQWtacVgzbG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAsDAwGJrgME
BYmuwAMEBZN7IAMEB5N7gDALAwMCm8wDBAWbzIADBAObzNAwDQYJKoZIhvcNAQEL
BQADggEBACv7kjwiNofItYeMehQ21on+KCW3VQ0Edy0XLo6M+Oz9X4A4TbgDT1Nq
hkA/woHjrZCEi+3y27RfoqKCF58zds5LrNbAn6ABEZc/9dccKCQhjAfhAIhme7YR
fSIC2xB3lipZVhPX4zQXYUrFL3q+PMhn8AhdVM2L90fTHIeYMgLVA/OrZMfz5f4F
u38Omf3n4aeZz6RTHpidb5NvM0npixykvwLaQa6YcQWT7TM8cFya02I2FrhaJY5g
6Rv8Z0WSc8OJeWz8PyMyhdIjmMnPxkhOqOw6ILfbGT4ohLt3dg2DkeyaFpkWrD3p
ooTyiqGAshirVwV/NRVa9QWldXzE2s4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:07 2025 by rpki-client