Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/cTmq63XbdDjx8rMQflgph7yM-uY.roa
File: cTmq63XbdDjx8rMQflgph7yM-uY.roa (raw, json)
Hash identifier: FpWIL4VbHD1B/s9f4tqDUEFU12SlGX5QaIOLyXPREDs=
Subject key identifier: 71:39:AA:EB:75:DB:74:38:F1:F2:B3:10:7E:58:29:87:BC:8C:FA:E6
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 018F765C37C5D7F3F1C8DFB541014F30EBEC
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/cTmq63XbdDjx8rMQflgph7yM-uY.roa
Signing time: Tue 14 May 2024 09:08:25 +0000
ROA not before: Tue 14 May 2024 09:08:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.12.0/22 maxlen: 24
152.53.16.0/22 maxlen: 24
152.53.20.0/22 maxlen: 24
152.53.32.0/22 maxlen: 24
152.53.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Jun 2024 12:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:5c:37:c5:d7:f3:f1:c8:df:b5:41:01:4f:30:eb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: May 14 09:08:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7139aaeb75db7438f1f2b3107e582987bc8cfae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:21:8e:6b:88:1b:bd:85:bf:78:03:82:c0:
cc:bb:18:bc:1a:fb:77:2b:39:1b:29:01:4e:0a:15:
66:ff:fe:40:29:2b:5b:35:c1:5a:92:f9:63:d2:e2:
2c:a6:17:18:f2:1a:c0:ba:95:a6:03:c5:50:2a:a6:
c2:96:70:7c:10:44:2a:ca:24:a3:1b:d5:44:7f:55:
03:fb:47:6b:a3:7d:4f:61:3d:22:ff:7c:e6:a5:fd:
24:87:54:d6:72:9b:ae:4f:9b:c4:7b:75:d8:0e:0d:
d6:15:c4:8c:9f:34:3e:4f:8f:74:9e:cc:ae:d2:eb:
eb:df:09:9d:8a:9c:66:13:43:7a:da:0a:9f:86:f9:
f0:ac:0b:3b:e1:7f:18:a7:5e:66:8e:ee:08:81:eb:
22:f5:c9:09:44:d5:9c:9a:71:e5:3a:7f:fd:b5:a5:
d6:86:65:8b:d7:77:28:4a:1b:9e:25:0f:16:f4:6a:
ed:c1:84:62:28:f5:34:64:65:84:04:70:46:28:60:
28:6f:40:6c:db:88:4a:82:9b:f9:a9:30:d7:b4:b8:
cc:9d:a1:c2:dc:da:a4:d6:4a:40:f5:17:b8:6f:7c:
98:48:d5:4d:0b:6e:f3:aa:e5:a3:c2:ff:3b:19:65:
69:87:24:cf:fe:88:88:a3:57:e3:02:f1:1e:06:f4:
9b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:39:AA:EB:75:DB:74:38:F1:F2:B3:10:7E:58:29:87:BC:8C:FA:E6
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/cTmq63XbdDjx8rMQflgph7yM-uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7e:80:51:0e:ba:d0:41:71:fe:1d:33:4a:f2:13:f0:1e:c3:5a:
0a:8f:6d:88:e5:9b:f2:ec:53:0f:1e:2c:60:9f:d2:9c:0d:31:
81:91:7a:d1:c9:0d:a4:07:f3:41:b9:85:48:96:bc:eb:b6:9d:
06:ec:49:f2:67:b9:9e:7c:11:ea:79:a4:03:7c:ff:17:0f:c0:
93:5c:18:2b:59:f7:dd:0b:d4:11:2e:96:61:32:19:8f:a1:d1:
cc:99:83:32:d6:39:fb:79:da:4f:f1:2c:48:79:d1:82:fa:c1:
8c:30:61:a1:1c:15:12:44:8c:76:40:a2:d0:f5:39:c0:8b:6c:
a7:87:36:5d:82:69:06:4a:f2:8c:00:52:29:78:36:ee:58:a3:
49:ea:58:cb:42:73:87:4c:40:08:f7:18:89:c2:23:6d:2f:7b:
a9:ce:71:aa:f9:cf:22:ce:a0:b3:e4:55:ad:f5:0e:09:fe:8c:
46:f0:4d:f2:64:14:4b:8e:4c:a0:47:e6:d9:1f:7e:3a:f7:2a:
93:1b:01:35:13:b8:86:dc:4f:86:1b:5c:e6:d9:81:bd:f7:a6:
67:8b:8e:60:f2:da:02:63:65:43:99:eb:20:0b:c5:ab:76:b0:
84:07:ee:07:ce:e9:10:38:30:cd:77:b5:a7:e7:eb:22:11:42:
d5:b1:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 14:14:14 2024 by rpki-client on console-fra.rpki-client.org