Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/pZRk9ZawpJXxyv55cd94lkLS1ec.roa
File: pZRk9ZawpJXxyv55cd94lkLS1ec.roa (raw, json)
Hash identifier: /5WrLzzMI5McHUxJxCAayMkIYU/58NrTzbab8GHKuTk=
Subject key identifier: A5:94:64:F5:96:B0:A4:95:F1:CA:FE:79:71:DF:78:96:42:D2:D5:E7
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 01905431977B9FA8601FA7588DEFD7BACC95
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/pZRk9ZawpJXxyv55cd94lkLS1ec.roa
Signing time: Wed 26 Jun 2024 10:57:34 +0000
ROA not before: Wed 26 Jun 2024 10:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214996
IP address blocks: 152.53.31.0/24 maxlen: 24
152.53.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 10:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:31:97:7b:9f:a8:60:1f:a7:58:8d:ef:d7:ba:cc:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Jun 26 10:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a59464f596b0a495f1cafe7971df789642d2d5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ce:bf:80:94:54:1c:c6:6c:66:6f:fc:29:80:
ba:b7:3d:3f:2f:e5:c2:d6:1b:a2:21:d7:60:4c:65:
3d:46:f5:71:1b:bc:bd:2e:42:cd:e7:64:56:b8:13:
77:fe:52:62:42:75:e4:21:62:97:31:c1:76:11:6e:
40:34:5e:84:57:d1:67:7b:b1:10:07:95:15:2b:42:
a3:0b:02:2b:f7:70:79:18:aa:89:da:20:6f:83:5f:
ee:b8:c2:93:a6:7d:d6:3b:4e:4d:81:72:7c:63:17:
2b:83:f6:9c:73:8b:3c:56:87:7a:88:9b:97:18:42:
ef:df:80:ad:b5:02:8a:de:c1:0a:b4:96:75:67:23:
9f:2a:1a:e6:a9:87:73:a3:15:f5:32:6a:1d:09:f9:
a9:a0:1d:6e:5f:98:67:72:e7:95:0e:53:b4:9d:97:
5f:1e:f0:e6:91:61:b7:81:e8:29:5e:21:3f:12:32:
84:10:26:24:95:be:db:b9:88:81:72:c5:15:de:66:
51:4e:b7:3a:80:58:87:ac:aa:89:ed:b4:df:ca:77:
88:94:2a:6f:b1:92:80:24:c1:b6:44:aa:4a:dd:33:
84:ae:99:6f:3f:c5:bf:da:73:8e:14:19:92:09:28:
c5:97:db:ac:55:9c:9c:d7:8e:7e:82:9b:61:da:e4:
3c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:94:64:F5:96:B0:A4:95:F1:CA:FE:79:71:DF:78:96:42:D2:D5:E7
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/pZRk9ZawpJXxyv55cd94lkLS1ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.31.0/24
152.53.36.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:0a:02:2b:b1:2a:d2:5a:19:8b:38:e6:c4:7d:d4:18:85:67:
d7:b7:f4:8d:2f:52:75:37:72:7a:a5:ac:8d:de:4e:35:53:66:
d3:be:f1:5d:cd:d7:42:0a:e5:b2:aa:33:f1:b9:56:e3:ed:e9:
49:27:7e:34:77:f8:ec:fc:e0:a7:16:58:49:2b:05:ec:6b:09:
39:42:1b:c6:ec:fc:e5:75:d6:fc:8f:c6:f7:d4:2a:a4:c5:ce:
9a:c6:1d:7d:c8:42:5f:72:f6:a6:0a:53:5d:12:8d:84:6a:55:
f9:b8:7d:fd:a4:a5:80:21:5a:20:ec:28:a0:0a:9b:c5:ee:1d:
d9:9c:a7:62:04:95:43:a7:f8:de:4f:a8:ee:d6:7d:72:94:a2:
68:43:ad:71:bb:95:6c:6b:ae:89:f9:64:e2:d1:48:be:c7:29:
66:ce:48:da:b9:1c:ee:b6:4e:6a:db:62:ba:21:cd:2a:21:11:
9f:33:88:8e:b5:30:76:72:ba:5c:d2:76:d6:a6:9a:a8:50:f2:
46:81:08:d4:35:10:39:50:1e:95:b8:c5:e8:ca:68:ad:1f:03:
aa:b7:1a:43:b1:1b:9f:e8:6f:8e:ed:e9:fd:fc:57:ac:f3:2c:
d3:a7:7a:76:8e:d6:05:bc:d0:15:9f:d2:f1:64:bc:c6:94:d2:
41:fc:d8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 13:01:25 2024 by rpki-client on console-fra.rpki-client.org