Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/FsuzKehdTFvL9nOiW8E3nKRD1hI.roa
File: FsuzKehdTFvL9nOiW8E3nKRD1hI.roa (raw, json)
Hash identifier: wFAr7PggomPchLzDtfj7zLLjEVHTf3J2249UAQKkMY4=
Subject key identifier: 16:CB:B3:29:E8:5D:4C:5B:CB:F6:73:A2:5B:C1:37:9C:A4:43:D6:12
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 018BCE66600657AC07B7905D543372F72178
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/FsuzKehdTFvL9nOiW8E3nKRD1hI.roa
Signing time: Tue 14 Nov 2023 15:14:57 +0000
ROA not before: Tue 14 Nov 2023 15:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.12.0/22 maxlen: 24
152.53.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 10:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:66:60:06:57:ac:07:b7:90:5d:54:33:72:f7:21:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Nov 14 15:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16cbb329e85d4c5bcbf673a25bc1379ca443d612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:26:fd:60:a3:48:6a:7a:b0:ff:56:f2:cc:76:
b3:0a:4e:03:cc:70:ca:c3:fc:bc:33:1c:f4:a1:07:
b2:ac:9d:ad:2b:fc:0f:56:41:40:7d:74:df:1e:13:
65:44:b8:92:06:fa:de:ea:da:24:aa:63:7c:bc:f7:
a9:17:f2:e6:41:f1:5b:30:bd:ae:09:e6:82:46:7d:
3e:6e:dc:ed:54:ef:e6:e2:db:0a:40:70:95:4a:5d:
90:95:d9:e3:e0:40:ca:36:92:4f:0d:c4:90:45:f1:
95:05:5a:1c:89:2e:95:90:51:d6:00:9d:46:67:f9:
e6:a2:7f:b3:36:90:10:90:fb:a9:3e:df:61:74:68:
ed:68:4a:93:8a:a3:53:fa:e2:23:7e:95:13:39:1d:
aa:d7:08:d3:c6:6c:e2:2c:52:7a:f4:0c:db:54:03:
4c:46:d5:fa:bf:5d:13:2a:88:11:1b:92:ca:52:ef:
de:ee:d8:08:42:32:08:e9:d4:55:02:01:40:ff:15:
5b:47:20:cd:d0:81:3c:7d:e7:5e:1e:57:93:dd:15:
ca:f6:4b:76:67:f7:db:3e:6c:e6:f7:7f:d2:e3:0a:
5b:e9:53:f2:6e:80:ef:91:c3:48:bf:5f:c8:10:a1:
c4:e0:3c:94:98:1c:99:65:b8:d6:62:3b:bf:38:19:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CB:B3:29:E8:5D:4C:5B:CB:F6:73:A2:5B:C1:37:9C:A4:43:D6:12
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/FsuzKehdTFvL9nOiW8E3nKRD1hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c1:ed:83:11:2d:68:0d:55:9c:6b:89:c6:61:80:68:dd:c5:65:
3a:4b:ce:76:7c:00:87:30:67:fc:4d:55:21:af:ff:4c:b6:dc:
98:96:e8:99:83:eb:92:a6:54:fd:d0:0a:ae:8d:6a:d7:6a:bb:
8a:b8:b5:07:4d:dc:fa:4e:ad:c5:92:95:b2:65:1f:62:ae:bc:
63:7c:55:9d:ab:60:b1:91:59:15:b1:d2:d4:a8:7d:99:c2:e3:
0a:b2:cd:d2:f9:a6:34:bd:aa:f0:04:18:a3:5c:0c:92:87:69:
e1:2c:f7:a2:7e:33:f0:dd:45:00:79:0f:8a:6f:55:d0:10:31:
d1:e3:3d:c7:4c:8c:ff:37:10:e5:c5:55:91:a4:3a:6d:fa:e5:
b4:d2:d3:be:79:38:ed:7b:92:94:e6:fa:4e:31:5b:8d:25:15:
7c:f9:25:20:ef:f8:06:29:d8:59:77:45:46:5b:bf:c6:44:a0:
41:25:99:12:ef:3f:9e:1a:5b:14:4a:81:48:29:62:1a:9a:e3:
f3:74:44:56:07:e4:ef:cb:0d:9a:ca:b2:54:39:26:55:b9:62:
1a:c0:d3:19:12:eb:9f:70:a4:5e:30:1e:58:83:1d:b7:f0:17:
d4:f8:c5:2a:7a:c7:5a:ff:87:72:e3:1c:6d:75:ca:66:bc:47:
67:d1:52:7d
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYvOZmAGV6wHt5BdVDNy9yF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0
MjVmMGUwHhcNMjMxMTE0MTUxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmNiYjMyOWU4NWQ0YzViY2JmNjczYTI1YmMxMzc5Y2E0NDNkNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyb9YKNIanqw/1byzHazCk4DzHDK
w/y8Mxz0oQeyrJ2tK/wPVkFAfXTfHhNlRLiSBvre6tokqmN8vPepF/LmQfFbML2u
CeaCRn0+btztVO/m4tsKQHCVSl2Qldnj4EDKNpJPDcSQRfGVBVociS6VkFHWAJ1G
Z/nmon+zNpAQkPupPt9hdGjtaEqTiqNT+uIjfpUTOR2q1wjTxmziLFJ69AzbVANM
RtX6v10TKogRG5LKUu/e7tgIQjII6dRVAgFA/xVbRyDN0IE8fedeHleT3RXK9kt2
Z/fbPmzm93/S4wpb6VPyboDvkcNIv1/IEKHE4DyUmByZZbjWYju/OBkX1wIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFBbLsynoXUxby/ZzolvBN5ykQ9YSMB8GA1UdIwQY
MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt
N2RiNjg2OGQ4NDc0LzEvRnN1ektlaGRURnZMOW5PaVc4RTNuS1JEMWhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0
LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDUwDQYJ
KoZIhvcNAQELBQADggEBAMHtgxEtaA1VnGuJxmGAaN3FZTpLznZ8AIcwZ/xNVSGv
/0y23JiW6JmD65KmVP3QCq6Natdqu4q4tQdN3PpOrcWSlbJlH2KuvGN8VZ2rYLGR
WRWx0tSofZnC4wqyzdL5pjS9qvAEGKNcDJKHaeEs96J+M/DdRQB5D4pvVdAQMdHj
PcdMjP83EOXFVZGkOm365bTS0755OO17kpTm+k4xW40lFXz5JSDv+AYp2Fl3RUZb
v8ZEoEElmRLvP54aWxRKgUgpYhqa4/N0RFYH5O/LDZrKslQ5JlW5YhrA0xkS659w
pF4wHliDHbfwF9T4xSp6x1r/h3LjHG11yma8R2fRUn0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:28 2024 by rpki-client on console-ams.rpki-client.org