Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/3sBEVw4YM2THJfnbpJycrh1Vjzw.roa
File: 3sBEVw4YM2THJfnbpJycrh1Vjzw.roa (raw, json)
Hash identifier: ZCjETFbjraSV6Rg5pYpURnDyPKXuIpEvK0Pp4BlXUps=
Subject key identifier: DE:C0:44:57:0E:18:33:64:C7:25:F9:DB:A4:9C:9C:AE:1D:55:8F:3C
Certificate issuer: /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial: 01856CE63065816309A1ACE251007907368E
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/3sBEVw4YM2THJfnbpJycrh1Vjzw.roa
Signing time: Sun 01 Jan 2023 10:35:03 +0000
ROA not before: Sun 01 Jan 2023 10:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34939
IP address blocks: 45.90.30.0/23 maxlen: 24
45.90.28.0/23 maxlen: 24
2a07:a8c0::/32 maxlen: 33
2a07:a8c1::/32 maxlen: 33
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:30:65:81:63:09:a1:ac:e2:51:00:79:07:36:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Validity
Not Before: Jan 1 10:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dec044570e183364c725f9dba49c9cae1d558f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:82:cf:6b:e7:6f:bc:2e:55:7a:0e:03:a8:
0b:f3:74:71:d7:f6:d2:0a:85:58:62:83:0e:22:25:
5d:55:00:1e:27:50:54:55:76:a3:57:7a:91:75:00:
2e:57:52:4e:68:0e:f6:95:e1:45:09:a1:ac:e9:37:
28:48:e5:01:d5:cd:68:3f:b3:c5:16:9c:12:8d:24:
3c:55:bd:bb:72:90:2b:79:c4:09:4b:4c:8a:7c:36:
ca:9d:e3:e2:79:e4:d1:b6:05:c0:9e:14:11:bc:54:
c4:92:08:be:13:a0:57:9a:00:e8:cf:89:5b:93:7d:
46:35:16:a9:7c:35:34:50:88:a1:69:de:d3:de:4f:
07:40:77:93:c2:3d:81:d0:ea:70:bf:25:36:65:21:
10:76:c3:22:9f:bc:a9:65:ed:fd:9c:59:69:62:eb:
4b:bd:61:fd:0c:b9:78:28:a9:94:c2:0f:8b:df:eb:
03:26:50:81:8d:4e:e9:9f:1f:7f:7a:f3:88:58:38:
56:56:ed:ed:56:d9:29:3a:7b:0a:ec:0b:84:8e:75:
a7:68:d6:08:46:39:b6:98:1a:98:12:dd:31:ac:76:
03:38:92:15:e9:bd:3a:9a:c7:a2:38:7c:30:ae:15:
7c:e0:a5:92:e8:fe:42:2a:9a:8e:58:aa:3f:88:1f:
36:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C0:44:57:0E:18:33:64:C7:25:F9:DB:A4:9C:9C:AE:1D:55:8F:3C
X509v3 Authority Key Identifier:
keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/3sBEVw4YM2THJfnbpJycrh1Vjzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.28.0/22
IPv6:
2a07:a8c0::/31
Signature Algorithm: sha256WithRSAEncryption
27:e5:dc:04:f9:fe:a3:ae:9c:62:8d:9c:4a:9a:52:b4:dd:d5:
42:a2:e2:9d:13:8a:22:89:71:54:e9:c3:f7:c2:88:3a:1a:46:
56:57:0f:da:50:ba:1b:da:5f:23:1d:3a:f7:da:36:6d:a7:c3:
22:36:0b:02:5c:8c:7b:61:95:86:c1:48:73:43:e4:ae:75:d0:
62:dd:88:97:7d:fb:7f:bc:dd:79:9e:dc:12:f7:4d:cf:7d:20:
31:d0:21:05:31:f8:79:77:14:6c:36:c5:b5:43:89:4c:e2:8c:
2c:7b:29:3e:96:54:24:cb:b3:8e:59:2c:d9:4d:32:65:ba:6d:
94:42:1e:49:17:b4:92:f8:f8:44:f1:de:f5:70:15:9a:84:d2:
a5:b0:f8:72:a8:62:c3:6f:a9:f0:cf:e5:93:d9:bb:e4:74:11:
cd:d8:88:03:21:88:ca:2b:30:dc:db:84:f8:9d:e5:23:92:b0:
1a:1b:de:9d:43:17:96:06:1c:22:8f:d4:e5:3c:69:a5:5a:34:
c5:3d:99:1f:a8:65:d4:a6:e7:a0:8a:5b:d4:3d:02:c3:d9:2a:
34:f5:3d:a3:85:ca:be:c7:f4:1a:a3:ee:9a:63:69:46:e8:4d:
5e:98:dc:fc:61:a9:12:91:c8:a5:7f:dc:33:b8:36:00:14:6c:
bf:95:0e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:27 2024 by rpki-client on console-ams.rpki-client.org