Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/f8nD4Hh8_KaUiOfwEBRfyP3DNmo.roa
File: f8nD4Hh8_KaUiOfwEBRfyP3DNmo.roa (raw, json)
Hash identifier: hbYIDxG3DakOhKOYktvFucVEJUmhrz8rlA+fO2pvb8c=
Subject key identifier: 7F:C9:C3:E0:78:7C:FC:A6:94:88:E7:F0:10:14:5F:C8:FD:C3:36:6A
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0191B6AD65F15BE46FDB53F577C9BE3EF811
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/f8nD4Hh8_KaUiOfwEBRfyP3DNmo.roa
Signing time: Tue 03 Sep 2024 06:58:22 +0000
ROA not before: Tue 03 Sep 2024 06:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.12.0/22 maxlen: 24
152.53.16.0/22 maxlen: 24
152.53.20.0/22 maxlen: 24
152.53.32.0/22 maxlen: 24
152.53.44.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.64.0/22 maxlen: 24
152.53.100.0/22 maxlen: 22
152.53.104.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 03 Sep 2024 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:ad:65:f1:5b:e4:6f:db:53:f5:77:c9:be:3e:f8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Sep 3 06:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7fc9c3e0787cfca69488e7f010145fc8fdc3366a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:0d:5b:79:77:68:a9:de:9a:48:05:c1:c8:
54:24:40:31:d3:f0:3c:0d:5e:50:81:a2:87:1d:6a:
71:ce:a4:29:a9:04:ef:9a:d1:9a:5f:65:26:d6:e8:
9e:94:0a:a3:60:0f:cc:50:f9:1e:25:74:d5:63:8b:
c4:7a:cc:40:36:91:f5:17:73:c2:1b:42:02:48:79:
8f:28:fb:68:61:51:b7:67:ab:02:25:82:23:98:ad:
4a:ca:7c:e7:e7:46:0f:88:ca:bb:dc:3e:0d:3a:eb:
23:ed:79:49:88:41:1c:ed:89:33:9a:ab:cb:4a:5f:
fc:ba:96:38:d1:23:0e:8e:0f:e4:ea:72:65:6c:79:
c9:b7:a6:d5:e0:5a:1d:10:18:50:b5:a6:ac:df:84:
20:14:21:c0:38:25:11:e6:8f:28:3b:62:75:99:c8:
8e:c1:36:35:1d:a5:23:6c:b8:85:46:11:6f:d5:16:
85:49:88:36:cb:01:82:91:a9:58:cf:13:7f:41:d4:
89:5d:8c:46:44:d5:42:43:a4:12:21:14:98:20:6e:
01:d2:25:1f:b5:12:22:c4:af:93:34:a2:f1:a6:24:
87:cc:cc:f1:19:55:64:01:6e:38:5d:61:1b:22:36:
8a:ef:96:a8:e5:3e:61:8f:4a:02:fa:a0:04:c1:4e:
be:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C9:C3:E0:78:7C:FC:A6:94:88:E7:F0:10:14:5F:C8:FD:C3:36:6A
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/f8nD4Hh8_KaUiOfwEBRfyP3DNmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:01:7a:53:5c:3d:f3:21:52:fb:f8:97:af:c3:2c:60:12:fc:
8e:35:e2:6d:3b:2e:19:a2:96:26:4f:be:c4:47:1e:e1:32:4f:
79:47:ce:5e:2d:93:ad:7e:5b:6e:f4:01:dc:c5:2d:d9:ee:03:
d3:d4:aa:ba:09:57:c0:8c:fc:78:b2:1d:4c:ec:12:bc:36:c6:
72:71:e7:97:c1:53:43:5b:e4:da:47:14:6a:ab:37:39:25:e7:
c2:48:14:9f:f4:a6:d5:6a:b2:e0:7c:7b:34:32:32:56:8e:0d:
86:45:57:df:ae:e5:69:a0:d2:10:04:9c:00:47:8c:80:70:e4:
5c:cc:8b:a4:e3:66:f6:df:6d:00:29:11:5e:6f:7d:b2:24:82:
03:f3:06:6e:8e:45:c3:aa:13:16:2b:b8:bd:a3:d6:ed:2c:30:
56:3e:0d:bc:f6:4a:9b:6b:8f:0f:02:92:ab:86:f9:50:23:95:
50:04:9c:60:03:97:ad:cf:0a:39:b4:31:3c:ab:3c:91:a4:6b:
d5:05:30:69:31:41:0b:fc:10:db:a0:6d:6c:56:9d:2d:3d:aa:
e8:1f:53:80:9c:d4:4c:98:3e:3d:8e:42:f3:7e:ba:93:4e:09:
f4:87:69:f4:6b:84:a4:22:40:63:69:eb:09:b6:6e:d7:63:eb:
64:f6:60:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 16:46:29 2024 by rpki-client on console-fra.rpki-client.org