Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ad5jupyIGl4brij7u2UkRXXFurs.roa
File: ad5jupyIGl4brij7u2UkRXXFurs.roa (raw, json)
Hash identifier: u5JOpxbznXdLct/JpvCyX2InrlaFmjc0N9Tjxoo+THM=
Subject key identifier: 69:DE:63:BA:9C:88:1A:5E:1B:AE:28:FB:BB:65:24:45:75:C5:BA:BB
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 018CC6B7FADC75A0D67D88F08926C2D17213
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ad5jupyIGl4brij7u2UkRXXFurs.roa
Signing time: Mon 01 Jan 2024 20:29:55 +0000
ROA not before: Mon 01 Jan 2024 20:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.66.92.0/23 maxlen: 23
45.66.94.0/23 maxlen: 23
37.44.228.0/22 maxlen: 24
192.145.52.0/22 maxlen: 24
192.145.53.0/24 maxlen: 24
192.145.54.0/24 maxlen: 24
192.145.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 18:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:fa:dc:75:a0:d6:7d:88:f0:89:26:c2:d1:72:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 1 20:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69de63ba9c881a5e1bae28fbbb65244575c5babb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:51:32:6a:b0:d3:4d:4d:4f:58:9a:84:c0:14:
ca:62:03:28:04:d0:f1:ac:f3:f8:ae:19:73:0c:de:
4c:96:03:f6:4e:d0:0d:fa:e5:1a:b2:2b:63:e5:78:
85:6b:3a:dc:70:07:45:f4:15:2b:7e:c6:4b:06:5e:
d9:1b:e1:64:8d:95:0b:a6:f3:b9:80:ff:65:33:f7:
62:c6:50:a0:d2:4b:7a:a9:17:be:43:8a:26:16:67:
2e:c4:e6:42:44:30:23:35:5d:86:f9:d7:47:18:d4:
b3:96:95:2a:81:12:d2:c9:86:88:a3:e2:fc:e1:51:
67:88:65:21:5e:ae:49:81:63:6d:e0:2d:b6:25:50:
3e:27:46:63:4b:ed:45:61:93:3e:17:75:df:be:f2:
78:5a:91:2f:1c:e2:30:91:1f:60:e2:9e:7c:e0:11:
67:92:86:73:6c:83:2f:1f:f0:12:b2:1d:9b:19:13:
f5:1c:10:66:7a:ff:2f:ea:23:b9:2e:b8:91:72:bf:
03:8e:f7:ae:48:dd:f7:42:c3:a0:66:0c:a8:ba:f3:
69:96:c3:f0:20:bd:95:6d:f7:5f:6a:b2:80:05:f1:
76:09:b4:d9:3e:38:20:f9:0b:ae:7d:5c:c4:21:3f:
d8:f3:fa:13:bd:87:c9:36:22:34:f5:df:4e:e1:7f:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DE:63:BA:9C:88:1A:5E:1B:AE:28:FB:BB:65:24:45:75:C5:BA:BB
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ad5jupyIGl4brij7u2UkRXXFurs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
45.66.92.0/22
192.145.52.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:bc:af:4e:4a:6c:07:c0:df:2c:29:ec:44:0f:bc:8f:ea:a8:
10:f8:13:a4:aa:6c:47:47:d1:ac:9f:f4:c7:f6:a3:94:c1:9a:
d9:12:00:0d:ee:b0:66:55:54:93:52:de:03:ac:b0:38:a1:4e:
67:44:30:17:3b:80:2d:93:54:9d:ff:26:bb:5e:42:2f:a6:dc:
eb:d7:bb:63:42:09:68:32:9c:e9:16:ba:cd:c6:6b:83:4d:35:
71:10:66:86:ff:c5:49:54:3a:f2:ed:7e:3c:47:56:5b:13:6c:
d4:22:d0:60:d4:3d:80:75:2e:41:9a:68:d7:3b:c2:2f:13:dd:
18:10:49:6b:d8:68:17:ee:95:b6:f9:15:bb:9c:44:82:b1:90:
5b:3c:30:a5:e7:05:26:f7:a7:93:4e:c0:ef:89:b4:12:81:3e:
59:eb:8d:f8:77:dd:4d:37:24:82:9a:2e:0a:d8:25:1b:93:53:
48:36:f2:9d:8e:19:39:01:0d:1d:3e:ec:56:d8:95:be:92:92:
1c:c2:90:0c:f7:c2:5b:9c:30:b6:18:cb:f2:7f:fc:ff:4e:dc:
7b:bb:a1:f3:39:cf:3a:69:8a:aa:0e:86:fe:37:db:19:3b:25:
00:65:62:0a:20:4b:df:30:50:d8:42:4f:ea:47:a2:6e:9a:5f:
0d:37:cb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:08 2024 by rpki-client on console-ams.rpki-client.org