Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/U0xmi3HjB7g0I_U5zV09vqpSc4I.roa
File: U0xmi3HjB7g0I_U5zV09vqpSc4I.roa (raw, json)
Hash identifier: weiwQ8iyKYwMQDLpe7e0X55yKXzLt0K0VCeklFpOUCQ=
Subject key identifier: 53:4C:66:8B:71:E3:07:B8:34:23:F5:39:CD:5D:3D:BE:AA:52:73:82
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 018B61FF30FDF5156AFB5DDC6F3C82430DFF
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/U0xmi3HjB7g0I_U5zV09vqpSc4I.roa
Signing time: Tue 24 Oct 2023 14:03:16 +0000
ROA not before: Tue 24 Oct 2023 14:03:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.12.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:ff:30:fd:f5:15:6a:fb:5d:dc:6f:3c:82:43:0d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Oct 24 14:03:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=534c668b71e307b83423f539cd5d3dbeaa527382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:67:e6:5a:af:95:a0:08:bf:11:f2:d3:d5:
79:b5:23:58:c5:1f:80:84:bc:15:d8:0c:0e:0c:96:
a0:12:7e:20:f9:a9:f6:43:19:89:be:61:78:fa:a9:
33:ad:f6:cb:83:85:b9:a3:15:b8:88:3f:5b:ab:83:
2c:c4:e1:a5:bf:13:2a:cd:2f:a1:da:84:ae:4f:ff:
25:ba:95:0a:e2:c4:99:09:32:94:e6:d2:77:85:f6:
f2:5b:ec:98:13:54:2f:78:24:c8:be:c0:f7:e6:c2:
cc:c9:4b:7d:3e:62:7c:1f:54:a3:93:da:fc:4e:a8:
9d:0a:1a:36:91:02:af:81:1b:ab:92:93:b9:13:28:
b6:7a:4e:77:b0:bb:08:41:19:2b:64:ee:ee:af:da:
d0:e8:4b:96:b5:c3:2c:0c:e9:31:4e:48:7f:0d:5f:
6c:0e:d9:c6:90:61:3b:2d:92:0e:18:09:fb:e2:e3:
37:12:02:8e:d0:45:ee:a8:db:16:48:ba:9d:46:0d:
56:e3:e9:3f:51:7d:f4:41:5a:2a:e9:3c:70:18:8e:
5e:74:c6:02:50:18:6f:43:3b:f0:1a:cd:8c:a4:79:
a7:3b:32:f6:15:d7:93:3c:18:92:b3:b1:26:5e:e7:
97:49:21:7a:0c:08:b0:5c:07:51:00:11:13:a6:f6:
1a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4C:66:8B:71:E3:07:B8:34:23:F5:39:CD:5D:3D:BE:AA:52:73:82
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/U0xmi3HjB7g0I_U5zV09vqpSc4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:ed:41:f8:57:72:c8:6d:3d:0f:e8:cb:ea:39:48:1f:16:b3:
df:9d:a5:88:f0:98:4c:70:5a:c9:c1:cd:6d:11:0c:17:83:6e:
ae:d1:1b:e7:78:b2:5b:b8:54:0c:9b:49:96:4d:9f:35:28:7a:
ea:3c:09:23:06:52:37:98:18:e3:cf:a3:4f:62:df:12:22:ba:
50:79:07:42:58:ec:66:8f:77:29:db:0f:8c:7d:0f:86:8e:cb:
e5:c5:13:e5:3a:e5:30:f5:53:3b:58:53:ca:4f:ec:ce:f0:5e:
2a:3d:93:76:00:6d:8d:d2:f6:81:93:e2:37:a6:be:dd:8c:73:
07:f0:70:6b:88:2d:2f:35:89:3d:15:61:01:5d:40:5f:f3:e4:
f6:ea:9e:a6:33:09:a8:eb:75:75:d5:95:13:68:27:b8:62:e8:
5f:c8:89:61:97:d2:32:d6:13:0c:81:1e:34:c0:41:f1:a6:2d:
fa:23:f0:0d:46:8f:27:8f:52:f3:e5:e5:c9:76:36:0b:69:c6:
25:2f:33:62:cf:b8:c5:24:79:84:76:f9:3b:4b:90:c2:1b:04:
9b:77:a2:9c:95:ad:4c:e5:27:47:c0:33:21:0a:30:69:5c:c6:
4b:a1:6f:6c:83:f0:4e:58:07:f9:41:55:fa:7a:26:94:52:24:
a8:60:0c:95
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYth/zD99RVq+13cbzyCQw3/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGIzN2I2ZjRiNDQ1NjQ1ZTY5OTNhOWM1ZWM2MDg0OTI0
MjVmMGUwHhcNMjMxMDI0MTQwMzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzRjNjY4YjcxZTMwN2I4MzQyM2Y1MzljZDVkM2RiZWFhNTI3MzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZxn5lqvlaAIvxHy09V5tSNYxR+A
hLwV2AwODJagEn4g+an2QxmJvmF4+qkzrfbLg4W5oxW4iD9bq4MsxOGlvxMqzS+h
2oSuT/8lupUK4sSZCTKU5tJ3hfbyW+yYE1QveCTIvsD35sLMyUt9PmJ8H1Sjk9r8
TqidCho2kQKvgRurkpO5Eyi2ek53sLsIQRkrZO7ur9rQ6EuWtcMsDOkxTkh/DV9s
DtnGkGE7LZIOGAn74uM3EgKO0EXuqNsWSLqdRg1W4+k/UX30QVoq6TxwGI5edMYC
UBhvQzvwGs2MpHmnOzL2FdeTPBiSs7EmXueXSSF6DAiwXAdRABETpvYaEQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFFNMZotx4we4NCP1Oc1dPb6qUnOCMB8GA1UdIwQY
MBaAFNALN7b0tEVkXmmTqcXsYISSQl8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEt
N2RiNjg2OGQ4NDc0LzEvVTB4bWkzSGpCN2cwSV9VNXpWMDl2cXBTYzRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MzBmYzUtNzMwMS00YTYwLTg2ZDEtN2RiNjg2OGQ4NDc0
LzEvMEFzM3R2UzBSV1JlYVpPcHhleGdoSkpDWHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDUwDQYJ
KoZIhvcNAQELBQADggEBABrtQfhXcshtPQ/oy+o5SB8Ws9+dpYjwmExwWsnBzW0R
DBeDbq7RG+d4slu4VAybSZZNnzUoeuo8CSMGUjeYGOPPo09i3xIiulB5B0JY7GaP
dynbD4x9D4aOy+XFE+U65TD1UztYU8pP7M7wXio9k3YAbY3S9oGT4jemvt2Mcwfw
cGuILS81iT0VYQFdQF/z5PbqnqYzCajrdXXVlRNoJ7hi6F/IiWGX0jLWEwyBHjTA
QfGmLfoj8A1GjyePUvPl5cl2NgtpxiUvM2LPuMUkeYR2+TtLkMIbBJt3opyVrUzl
J0fAMyEKMGlcxkuhb2yD8E5YB/lBVfp6JpRSJKhgDJU=
-----END CERTIFICATE-----
Generated at Tue Nov 14 15:54:35 2023 by rpki-client on console-ams.rpki-client.org