Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/NBw3dD1wG08VC3_YtOHnjMjjiLE.roa
File: NBw3dD1wG08VC3_YtOHnjMjjiLE.roa (raw, json)
Hash identifier: kf7FyTLyNYdE2Fy25w8QgMha9E0W8fCirDy21aGd9PM=
Subject key identifier: 34:1C:37:74:3D:70:1B:4F:15:0B:7F:D8:B4:E1:E7:8C:C8:E3:88:B1
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 0185708CD51B837DDC4B108E0F13D3C55B99
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/NBw3dD1wG08VC3_YtOHnjMjjiLE.roa
Signing time: Mon 02 Jan 2023 03:35:55 +0000
ROA not before: Mon 02 Jan 2023 03:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203061
IP address blocks: 45.11.240.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d5:1b:83:7d:dc:4b:10:8e:0f:13:d3:c5:5b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Jan 2 03:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=341c37743d701b4f150b7fd8b4e1e78cc8e388b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6c:56:cf:ee:8f:95:2a:32:d8:a0:66:bd:34:
78:b3:be:37:58:77:2b:21:dc:af:38:6a:a7:61:f5:
29:c0:43:5f:8c:31:a8:1e:a6:e0:b7:38:25:cf:ad:
85:08:94:6d:06:76:02:6a:09:ad:f9:bd:75:c8:83:
65:be:0d:d5:8d:86:44:df:4d:0e:22:42:f9:0d:fc:
fe:ed:50:f6:d6:f0:fb:31:3a:82:f7:b4:c3:70:3b:
55:c9:f8:1f:be:9a:63:07:11:55:eb:84:7a:65:3f:
af:7b:7d:2e:3a:17:2c:d9:93:10:65:f8:3d:17:1d:
b2:35:6f:7c:82:2c:44:ba:c7:1f:2a:8b:3d:76:2d:
4a:09:04:66:69:ae:b8:23:74:71:c7:ac:22:af:a6:
e2:f6:30:ac:ed:8c:6e:b7:9b:01:7d:33:12:92:72:
37:1c:c6:4f:b9:cf:da:de:38:1a:b1:9a:5a:be:ef:
df:af:12:d5:08:49:25:de:93:43:e5:50:f1:41:71:
aa:54:84:9e:32:5d:30:08:81:11:40:02:8d:de:cc:
4f:25:3b:25:65:05:90:ae:c3:28:d1:98:31:67:ea:
7a:f6:83:91:46:8f:d8:49:fc:ea:2c:04:95:b5:39:
12:0a:f3:63:f4:9b:30:dd:83:d4:ef:31:96:a3:69:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1C:37:74:3D:70:1B:4F:15:0B:7F:D8:B4:E1:E7:8C:C8:E3:88:B1
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/NBw3dD1wG08VC3_YtOHnjMjjiLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:53:87:70:85:af:90:00:2d:4a:44:34:1a:5c:34:07:e2:16:
0d:5d:53:6b:06:d2:c3:db:ce:ea:7e:27:f5:eb:3b:78:49:47:
23:c1:47:cb:a7:a5:80:e2:d2:97:5c:5d:54:65:c5:3d:ae:3a:
59:b8:04:0b:cf:93:82:d3:5f:45:c4:53:51:97:57:02:35:e2:
bf:02:e3:8c:23:4d:b3:aa:4b:32:f1:2c:71:37:64:b3:37:83:
12:4e:bd:d0:db:22:b7:b0:a3:2e:66:cc:8d:50:24:9e:e4:29:
77:22:63:d3:f4:57:a8:94:d2:f3:4b:21:43:26:d7:7c:58:cd:
8b:9c:9b:d0:68:e3:c8:9d:49:c9:8c:3e:b4:01:35:ed:0b:22:
f4:3c:1d:f9:53:b4:95:36:62:a3:4d:db:2d:21:a1:fe:24:4f:
a0:f7:29:6c:64:07:8d:f9:e7:ff:81:c4:32:eb:53:7f:97:e5:
e3:f5:fd:5e:f1:5f:6a:6b:7d:6d:84:bc:d9:a0:ed:80:16:3d:
71:43:75:fb:3a:c7:e4:55:b4:a1:77:87:4f:a2:38:9b:bc:6a:
85:a4:9a:b6:fc:7b:87:34:9a:67:f2:49:53:72:90:d7:20:5e:
b9:5a:89:f6:c0:c0:10:3b:09:0f:a3:48:71:e8:03:c4:17:a8:
c4:e0:25:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:10 2024 by rpki-client on console-ams.rpki-client.org