Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/sYf7nUyIAKcQf7RJFrwvJAdQS-o.roa
File: sYf7nUyIAKcQf7RJFrwvJAdQS-o.roa (raw, json)
Hash identifier: nNaIINcySo9NbCi1oyb71oKPbCVDdqvFtzI6VER+rsY=
Subject key identifier: B1:87:FB:9D:4C:88:00:A7:10:7F:B4:49:16:BC:2F:24:07:50:4B:EA
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 01906E071E6D09BB8C14A07095C012C2FCD1
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/sYf7nUyIAKcQf7RJFrwvJAdQS-o.roa
Signing time: Mon 01 Jul 2024 11:21:18 +0000
ROA not before: Mon 01 Jul 2024 11:21:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197540
IP address blocks: 152.53.0.0/16 maxlen: 24
152.53.12.0/22 maxlen: 24
152.53.16.0/22 maxlen: 24
152.53.20.0/22 maxlen: 24
152.53.32.0/22 maxlen: 24
152.53.44.0/22 maxlen: 24
152.53.48.0/22 maxlen: 22
152.53.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 12:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:07:1e:6d:09:bb:8c:14:a0:70:95:c0:12:c2:fc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Jul 1 11:21:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b187fb9d4c8800a7107fb44916bc2f2407504bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:89:a3:6b:51:b6:7c:1d:d6:b5:62:0b:f6:
ce:67:01:84:b2:e4:6a:94:31:1d:be:80:1c:b5:65:
5b:02:11:1d:d5:d0:d1:98:38:d0:ec:3a:9c:72:db:
c1:0b:ea:c5:f3:f8:72:a9:1c:12:a5:7a:90:74:63:
4e:f8:1a:dd:a0:e0:37:37:30:a2:20:59:1b:70:ce:
41:3f:0d:4c:ad:f1:4b:fe:2d:af:5a:22:79:4e:f7:
e5:e8:a8:eb:de:75:7e:18:c0:f9:f8:3b:ff:52:61:
24:ad:d6:b7:11:03:d0:95:42:93:b6:6d:92:20:f1:
cb:9b:52:d8:12:92:29:c7:f3:ee:1b:d7:46:84:05:
0e:e6:f4:a6:9c:30:f1:42:6a:a2:f8:87:2c:44:9d:
9c:a6:aa:7d:ce:42:ae:a4:0b:3d:e6:9f:5b:12:5e:
bf:a6:89:75:c0:df:e0:8f:d3:86:fd:f4:c2:1b:7c:
f3:c0:17:02:be:a1:81:d7:71:be:0a:85:c3:b3:43:
4d:0f:67:e6:ba:50:94:15:bd:de:8c:ca:af:c6:b7:
96:49:11:9e:3a:07:d1:0e:d5:3c:ad:af:21:b8:90:
21:16:31:c2:a4:3e:40:3d:97:d5:ed:70:9e:a9:bd:
fa:83:89:fe:95:0c:c7:e8:6b:39:5c:6a:1f:f3:bc:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:87:FB:9D:4C:88:00:A7:10:7F:B4:49:16:BC:2F:24:07:50:4B:EA
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/sYf7nUyIAKcQf7RJFrwvJAdQS-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
44:f6:35:8c:ab:05:dc:0d:b6:75:22:77:d9:9d:5f:a8:1a:95:
5b:f0:77:7c:7f:34:0f:87:16:b1:6e:18:70:8c:ee:8b:66:5a:
fd:3d:35:88:ed:0a:d0:46:a3:fd:d2:2b:54:c6:c1:36:9d:20:
72:e8:fe:04:0e:eb:f1:f2:3b:6a:92:a6:97:49:2b:e7:43:5e:
3b:8d:63:30:02:ed:56:98:4f:4d:06:8d:4b:79:e4:e3:05:23:
d3:ff:20:0c:b4:2c:19:6d:b7:22:18:8d:9f:ed:c7:cf:b4:74:
b2:fd:0f:0e:90:43:81:e4:be:41:c9:db:73:77:4e:78:0c:3e:
f8:08:ee:f6:f8:f6:f8:bf:11:ef:6e:3a:6c:5d:05:a4:94:58:
ce:61:3e:0b:88:cc:5d:2a:d7:ab:aa:44:ec:e2:3a:a7:66:fd:
56:f5:1d:ba:0f:05:20:86:c7:4b:77:57:db:9d:ce:7e:29:58:
55:e5:d1:00:3d:31:cd:ac:02:8f:46:8c:04:b6:dd:77:29:87:
d6:27:aa:e9:07:51:60:c0:47:70:d2:d9:58:c6:af:a0:bb:74:
58:d1:0f:98:c3:c7:f6:df:f3:57:f3:63:59:aa:3c:0c:29:58:
7b:49:68:c3:6e:33:04:7f:f0:67:a9:14:bd:d6:e3:b5:c3:b4:
c5:27:5b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 16:39:17 2024 by rpki-client on console-ams.rpki-client.org