Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/O8JKCmoo_Q2dG7qPl_vnJaEiW4w.roa
File: O8JKCmoo_Q2dG7qPl_vnJaEiW4w.roa (raw, json)
Hash identifier: z91XisuVQIxuMTS3O01+fY5txzjkC9el5sPdC8Gpgxk=
Subject key identifier: 3B:C2:4A:0A:6A:28:FD:0D:9D:1B:BA:8F:97:FB:E7:25:A1:22:5B:8C
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 0193E479FDA9312A9DBE80E4B0DCD4F73894
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/O8JKCmoo_Q2dG7qPl_vnJaEiW4w.roa
Signing time: Fri 20 Dec 2024 14:30:20 +0000
ROA not before: Fri 20 Dec 2024 14:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 153.112.128.0/24 maxlen: 24
153.112.195.0/24 maxlen: 24
153.112.200.0/24 maxlen: 24
153.112.205.0/24 maxlen: 24
153.112.216.0/24 maxlen: 24
153.112.217.0/24 maxlen: 24
153.112.223.0/24 maxlen: 24
153.112.224.0/24 maxlen: 24
153.112.225.0/24 maxlen: 24
153.112.226.0/24 maxlen: 24
153.112.227.0/24 maxlen: 24
153.112.228.0/24 maxlen: 24
153.112.229.0/24 maxlen: 24
153.112.230.0/24 maxlen: 24
153.112.231.0/24 maxlen: 24
192.131.25.0/24 maxlen: 24
192.157.12.0/23 maxlen: 23
192.157.12.0/24 maxlen: 24
192.157.13.0/24 maxlen: 24
192.157.14.0/24 maxlen: 24
192.157.15.0/24 maxlen: 24
192.157.16.0/23 maxlen: 23
192.157.16.0/24 maxlen: 24
192.157.17.0/24 maxlen: 24
193.53.25.0/24 maxlen: 24
193.53.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e4:79:fd:a9:31:2a:9d:be:80:e4:b0:dc:d4:f7:38:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: Dec 20 14:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bc24a0a6a28fd0d9d1bba8f97fbe725a1225b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:c8:44:d2:fe:fa:8a:cd:04:e4:a1:e7:bb:
d0:44:9e:d5:5d:3e:47:83:02:57:55:1a:d1:ae:62:
e8:94:d0:d9:51:46:2f:85:c1:c7:39:e3:09:4e:8d:
91:36:b1:97:04:db:b3:76:25:d1:d4:5e:48:bc:23:
74:ae:4c:a2:4c:fe:58:b4:e6:c6:c4:c9:3f:9d:f8:
d2:c1:b8:b2:8e:99:7e:e5:4b:c5:b6:d3:5e:55:ce:
73:15:79:68:97:2b:a2:c9:e4:f4:50:e3:99:d9:5b:
32:44:1a:c6:59:ec:52:22:05:27:6a:2b:ec:f6:e3:
c9:47:dc:d5:56:d7:ce:2b:c4:c8:08:ef:c4:3f:9a:
76:19:e0:0f:11:de:dd:e8:05:04:28:b8:9a:dd:28:
ad:34:cd:2f:24:5a:ad:24:3c:3b:a4:95:47:1b:a8:
b8:06:d2:9b:78:a0:d9:24:6d:10:0a:23:95:bb:a2:
86:ee:80:00:7d:b7:e2:b4:eb:39:22:82:fd:5e:46:
58:c7:b9:fa:32:e2:96:f6:08:87:22:37:74:d5:9e:
cc:da:3c:73:1e:1b:07:96:4c:66:c3:76:21:0b:fc:
d2:a3:66:8d:34:a2:96:f6:0e:6d:55:a0:66:bc:80:
71:05:9f:a4:8f:be:b8:56:c3:82:3a:e6:0f:30:14:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C2:4A:0A:6A:28:FD:0D:9D:1B:BA:8F:97:FB:E7:25:A1:22:5B:8C
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/O8JKCmoo_Q2dG7qPl_vnJaEiW4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.112.128.0/24
153.112.195.0/24
153.112.200.0/24
153.112.205.0/24
153.112.216.0/23
153.112.223.0-153.112.231.255
192.131.25.0/24
192.157.12.0-192.157.17.255
193.53.25.0/24
193.53.29.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6b:cf:c0:8b:e7:90:0e:13:22:29:e8:5f:90:79:3a:30:72:
24:81:40:22:62:85:fe:ca:fb:fd:b7:27:0b:b2:1d:cf:d4:b3:
ba:ab:ba:3d:d1:86:f2:22:8c:c4:af:60:37:8e:25:e6:4a:64:
1b:96:68:77:ae:17:33:94:21:68:82:68:77:45:2d:67:18:8d:
64:50:e7:43:45:d2:ac:c3:0f:ee:fd:da:5e:38:9e:8a:fe:31:
ad:54:12:7c:02:16:44:0a:fe:7f:b8:d5:98:7c:a6:e2:e1:83:
04:0c:e2:83:55:5c:9c:1c:94:76:79:b4:b3:61:29:43:16:f3:
7a:4b:88:79:1c:e5:1f:ca:24:e3:4a:6d:b1:86:9b:94:ed:7d:
1f:4a:4f:6b:0f:9f:80:47:ad:29:3a:d8:32:5e:01:d9:ef:23:
79:d0:bd:a6:f2:1e:1f:13:c6:45:9a:fd:53:0a:fd:46:58:01:
30:d0:27:da:45:f9:6f:47:74:3f:17:ca:b2:a4:ae:f3:e4:e3:
ca:6c:d8:20:f2:21:e6:56:ea:59:aa:3f:76:06:8c:12:cc:06:
72:8f:42:d2:8f:d6:93:08:ef:90:53:e4:0a:d4:fa:8d:a9:04:
5f:f7:76:9d:9a:9f:50:a3:42:6e:01:92:1e:e7:39:9c:e8:5c:
4a:56:cd:36
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAZPkef2pMSqdvoDksNzU9ziUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw
YzE0NWEwHhcNMjQxMjIwMTQzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmMyNGEwYTZhMjhmZDBkOWQxYmJhOGY5N2ZiZTcyNWExMjI1YjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRjIRNL++orNBOSh57vQRJ7VXT5H
gwJXVRrRrmLolNDZUUYvhcHHOeMJTo2RNrGXBNuzdiXR1F5IvCN0rkyiTP5YtObG
xMk/nfjSwbiyjpl+5UvFttNeVc5zFXlolyuiyeT0UOOZ2VsyRBrGWexSIgUnaivs
9uPJR9zVVtfOK8TICO/EP5p2GeAPEd7d6AUEKLia3SitNM0vJFqtJDw7pJVHG6i4
BtKbeKDZJG0QCiOVu6KG7oAAfbfitOs5IoL9XkZYx7n6MuKW9giHIjd01Z7M2jxz
HhsHlkxmw3YhC/zSo2aNNKKW9g5tVaBmvIBxBZ+kj764VsOCOuYPMBQT6wIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFDvCSgpqKP0NnRu6j5f75yWhIluMMB8GA1UdIwQY
MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt
ZjcxMDM4ZTk2N2E0LzEvTzhKS0Ntb29fUTJkRzdxUGxfdm5KYUVpVzR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0
LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQAmXCAAwQA
mXDDAwQAmXDIAwQAmXDNAwQBmXDYMAwDBACZcN8DBAOZcOADBADAgxkwDAMEAsCd
DAMEAcCdEAMEAME1GQMEAME1HTANBgkqhkiG9w0BAQsFAAOCAQEABGvPwIvnkA4T
IinoX5B5OjByJIFAImKF/sr7/bcnC7Idz9Szuqu6PdGG8iKMxK9gN44l5kpkG5Zo
d64XM5QhaIJod0UtZxiNZFDnQ0XSrMMP7v3aXjieiv4xrVQSfAIWRAr+f7jVmHym
4uGDBAzig1VcnByUdnm0s2EpQxbzekuIeRzlH8ok40ptsYablO19H0pPaw+fgEet
KTrYMl4B2e8jedC9pvIeHxPGRZr9Uwr9RlgBMNAn2kX5b0d0PxfKsqSu8+TjymzY
IPIh5lbqWao/dgaMEswGco9C0o/WkwjvkFPkCtT6jakEX/d2nZqfUKNCbgGSHuc5
nOhcSlbNNg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:12:25 2025 by rpki-client