Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/Q0H-aU1Dkoejnw8wmlLV3jxdusM.roa
File: Q0H-aU1Dkoejnw8wmlLV3jxdusM.roa (raw, json)
Hash identifier: 8yxPgIhPFoqUFCmsL3kYLRZLvLB4jTIo5Dcz3v0SN5o=
Subject key identifier: 43:41:FE:69:4D:43:92:87:A3:9F:0F:30:9A:52:D5:DE:3C:5D:BA:C3
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 01917F4262EAEDD188922A7898A705534013
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/Q0H-aU1Dkoejnw8wmlLV3jxdusM.roa
Signing time: Fri 23 Aug 2024 12:42:22 +0000
ROA not before: Fri 23 Aug 2024 12:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42473
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.9.0/24 maxlen: 24
152.53.24.0/24 maxlen: 24
152.53.30.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.59.0/24 maxlen: 24
152.53.62.0/24 maxlen: 24
152.53.64.0/22 maxlen: 24
152.53.69.0/24 maxlen: 24
152.53.75.0/24 maxlen: 24
152.53.78.0/24 maxlen: 24
152.53.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 03 Sep 2024 06:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7f:42:62:ea:ed:d1:88:92:2a:78:98:a7:05:53:40:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Aug 23 12:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4341fe694d439287a39f0f309a52d5de3c5dbac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:64:be:b0:e5:32:06:1a:d4:a3:d4:13:33:
8a:00:6b:14:b2:1d:a7:ec:52:e6:ca:ba:22:c7:6d:
9a:e7:25:3f:40:4b:c1:38:67:26:7b:28:f6:d5:b4:
4c:53:f7:27:0e:a1:f6:70:a3:9d:86:4a:f9:8a:e2:
76:f4:9f:79:06:8c:64:ac:cd:2d:95:f6:7a:66:db:
f2:5c:74:21:5e:c1:ae:90:f8:64:2e:18:05:57:fe:
87:57:86:0b:b9:5b:e8:71:d0:5f:be:f9:e6:2a:3e:
c3:ce:9b:16:06:b1:1a:ca:0e:22:9b:7c:f6:08:f2:
9f:ef:d7:62:73:df:a9:26:72:45:71:50:d6:e3:55:
d8:80:dd:94:f9:5b:05:fb:5e:a3:2e:bb:37:ea:c2:
03:36:86:52:50:25:22:af:c8:50:93:03:11:bc:6a:
1b:a2:f6:93:aa:12:fa:24:95:82:9b:21:ba:29:a2:
fc:83:b7:1c:04:8b:ea:2a:1f:17:2a:d7:75:b1:a5:
dd:a5:c8:81:9a:7a:e3:e1:bd:b2:67:c1:f6:51:6a:
3e:23:13:e6:f0:4d:3f:47:71:6a:00:db:55:0d:e4:
7c:da:e0:1c:87:59:08:99:5c:f0:c3:a0:f6:b0:3a:
6c:80:50:9b:b9:3b:24:07:12:b4:d6:0c:08:e9:c4:
b3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:FE:69:4D:43:92:87:A3:9F:0F:30:9A:52:D5:DE:3C:5D:BA:C3
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/Q0H-aU1Dkoejnw8wmlLV3jxdusM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:f1:a7:ee:4f:77:3e:c6:fc:1b:50:65:df:53:b0:3d:13:29:
53:9d:e3:35:a3:4f:f0:ba:b0:8f:3e:8f:6c:a4:1f:8b:4c:94:
84:28:51:25:6c:02:c5:7e:bc:28:dd:61:25:21:78:68:b1:5c:
b3:48:b8:4d:b3:ba:62:b0:9c:cc:d6:a2:a4:b0:92:cf:42:62:
60:4d:df:c4:6d:b1:6f:6c:2e:47:35:d9:ff:03:91:69:3d:c0:
60:1a:07:68:19:b1:58:83:e5:12:1c:06:e6:15:2c:c5:6c:6f:
ae:bf:de:30:13:62:1b:15:1e:a7:a2:a1:b4:95:aa:8d:b8:82:
c2:51:12:f7:8d:c9:0b:1b:a8:72:cb:7d:72:59:11:49:dd:85:
70:d7:03:fb:5c:32:f5:77:f6:73:5a:0e:83:b7:2b:9e:ae:79:
d1:25:21:c0:4c:c4:1c:a8:0a:09:87:25:98:18:17:1f:e3:ec:
dc:92:f9:03:cf:ad:a7:4a:ae:1c:db:52:eb:ad:88:07:3b:aa:
a2:ea:bf:ba:a9:90:b7:46:8b:8f:66:60:e5:9b:3c:12:f4:20:
d0:a8:db:cf:a1:cf:a8:46:78:6f:94:84:5c:e8:73:6b:4a:cb:
ae:2e:14:b4:95:c7:6b:91:8a:be:aa:6d:80:d5:7a:4f:5b:14:
dd:c5:f6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 08:22:49 2024 by rpki-client on console-ams.rpki-client.org