Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/yOVFZRjWSlGkeHZgZz1o6R0tVRo.roa
File: yOVFZRjWSlGkeHZgZz1o6R0tVRo.roa (raw, json)
Hash identifier: LPEJKA/SUnT67JhnSByDqOmIlqfcGWBepDNhgMMRgz0=
Subject key identifier: C8:E5:45:65:18:D6:4A:51:A4:78:76:60:67:3D:68:E9:1D:2D:55:1A
Certificate issuer: /CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Certificate serial: 0190257BE334CA16ABB18D11281D5D2AFC65
Authority key identifier: D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/yOVFZRjWSlGkeHZgZz1o6R0tVRo.roa
Signing time: Mon 17 Jun 2024 09:16:34 +0000
ROA not before: Mon 17 Jun 2024 09:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214996
IP address blocks: 152.53.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 10:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:25:7b:e3:34:ca:16:ab:b1:8d:11:28:1d:5d:2a:fc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00b37b6f4b445645e6993a9c5ec608492425f0e
Validity
Not Before: Jun 17 09:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8e5456518d64a51a4787660673d68e91d2d551a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e5:f4:60:0e:25:11:e9:fb:2b:07:08:b9:3b:
90:c2:65:cd:b9:7c:0b:42:9c:5b:d3:1e:1c:39:3e:
56:f8:ac:db:27:10:ec:a4:a9:20:2a:a3:68:44:bf:
6d:41:26:df:af:ab:7b:2a:dc:f4:cc:6a:ba:c6:db:
69:e4:69:1c:78:33:3a:8a:45:3d:69:0d:6b:f1:1a:
ea:2b:91:2e:39:79:69:10:f4:10:16:8c:87:9f:0e:
5a:93:d0:d9:a7:c3:cf:01:d1:58:61:1b:7b:bb:55:
ee:4f:fd:7a:9e:6f:1d:c5:b8:c8:74:ff:e2:e2:b1:
15:9d:9b:b3:f2:a8:4c:eb:a8:b1:1b:01:18:13:7c:
74:9c:46:eb:71:0a:96:df:e9:e7:0a:68:12:21:b9:
f1:4e:33:88:4f:94:f0:05:01:6e:33:34:e1:ee:cb:
1d:4c:52:fb:81:cd:4f:10:30:bb:23:c5:6e:e4:ac:
87:c3:32:32:72:7d:1b:a9:15:a1:81:c3:c5:a8:9d:
5e:1e:22:fe:f3:f6:4c:31:6f:55:ef:90:f2:44:39:
35:9e:e7:44:3c:56:55:f7:51:25:15:aa:17:2b:a5:
7f:65:f9:5e:73:0f:aa:57:c8:0d:e7:f4:26:5c:12:
d4:4b:8c:c3:de:fc:af:f1:40:e4:1a:29:d0:a7:22:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E5:45:65:18:D6:4A:51:A4:78:76:60:67:3D:68:E9:1D:2D:55:1A
X509v3 Authority Key Identifier:
keyid:D0:0B:37:B6:F4:B4:45:64:5E:69:93:A9:C5:EC:60:84:92:42:5F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0As3tvS0RWReaZOpxexghJJCXw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/yOVFZRjWSlGkeHZgZz1o6R0tVRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/730fc5-7301-4a60-86d1-7db6868d8474/1/0As3tvS0RWReaZOpxexghJJCXw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.53.36.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:f3:ca:d5:71:f6:30:d9:85:2c:54:29:60:b5:e0:dc:23:f0:
0b:2a:31:65:c3:02:51:09:05:8b:4c:72:59:da:93:ca:64:23:
fa:95:b6:81:1d:af:fc:50:15:32:6e:06:aa:5f:e8:63:cd:e6:
fa:11:ee:4a:c4:1f:1d:be:6f:db:6d:bb:39:93:a6:b1:a7:19:
21:31:e4:9b:8b:10:34:83:9c:8f:02:e0:ed:eb:df:ee:6e:4b:
87:04:64:6e:89:5d:a4:4d:31:73:99:aa:ac:d5:e7:e8:72:fa:
f7:5d:90:99:f4:a4:93:2d:bc:11:2d:87:a7:24:e4:82:36:7e:
58:af:31:a2:6c:b2:d3:48:b6:1d:06:69:71:91:7a:fb:72:cf:
40:e6:4d:bf:c1:cf:6c:a7:17:8d:2b:06:24:d5:ab:0e:e5:d8:
7b:53:33:b6:33:45:59:56:6a:55:02:cc:92:96:e0:aa:08:f1:
93:23:e3:0a:02:19:7c:f6:bd:7e:4a:66:20:49:b5:ff:94:3a:
87:15:78:d4:df:33:98:77:0d:91:a6:bd:cb:d8:dd:61:e7:f6:
58:52:15:5a:41:8f:0e:52:93:85:46:e9:a1:2e:d0:54:18:26:
d1:7b:bd:77:90:47:b8:e1:f8:b9:ef:cf:dc:c1:48:0e:de:fb:
07:85:b5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 15:27:01 2024 by rpki-client on console-fra.rpki-client.org