Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ParY9ltSlnvghlEmLer7m8u5aXw.roa
File: ParY9ltSlnvghlEmLer7m8u5aXw.roa (raw, json)
Hash identifier: DWllonlrV/yWcXqpWd1v3/32GeKnEQfBjgdaED2FjeA=
Subject key identifier: 3D:AA:D8:F6:5B:52:96:7B:E0:86:51:26:2D:EA:FB:9B:CB:B9:69:7C
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 018B4C1B3F764BE7D8E2C6449C11CB235658
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ParY9ltSlnvghlEmLer7m8u5aXw.roa
Signing time: Fri 20 Oct 2023 08:02:16 +0000
ROA not before: Fri 20 Oct 2023 08:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.66.92.0/24 maxlen: 24
45.66.92.0/23 maxlen: 23
45.66.93.0/24 maxlen: 24
45.66.94.0/23 maxlen: 23
37.44.228.0/22 maxlen: 24
192.145.52.0/22 maxlen: 24
192.145.53.0/24 maxlen: 24
192.145.54.0/24 maxlen: 24
192.145.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:1b:3f:76:4b:e7:d8:e2:c6:44:9c:11:cb:23:56:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Oct 20 08:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3daad8f65b52967be08651262deafb9bcbb9697c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ca:82:dd:ad:1b:2e:c2:2b:99:53:a9:29:e4:
67:4b:b8:1a:3f:42:d7:37:57:10:1d:3f:4f:ff:21:
53:33:a1:17:62:c9:8d:c9:76:d0:f5:11:9c:b9:3a:
5e:6a:4d:dc:97:3f:b9:9e:73:ea:5b:e0:61:e9:cd:
72:ba:b8:4d:28:1b:21:6d:6c:27:15:88:65:b0:d2:
f3:c0:0f:5e:4f:8a:0c:91:5f:3b:9b:bf:fb:6c:cc:
ed:05:7f:4c:57:cf:d1:84:f6:c4:24:a8:77:66:8c:
cc:62:1f:4b:fc:63:6d:e4:0f:b5:4a:eb:92:c0:4c:
ae:7b:64:a3:03:0b:28:70:49:be:2a:65:11:3f:2d:
f2:1c:19:60:5a:12:82:ab:6c:6c:06:f8:73:4a:b1:
a9:1e:87:79:53:d8:5e:ce:ce:23:8b:4a:61:2c:dc:
7a:03:64:20:27:53:1a:9e:b9:4e:2b:81:22:76:ad:
70:95:50:06:fe:d2:a9:7b:95:44:dc:90:b5:84:92:
d2:46:d2:91:6c:51:ee:a0:8c:94:a0:82:3a:47:f5:
00:d2:29:51:04:c5:90:e8:2d:a7:ba:9c:8c:1d:57:
34:91:06:57:78:96:d5:da:20:47:af:7b:43:db:ec:
80:61:1e:ff:16:b9:f7:ac:7c:0d:69:4b:0f:09:7f:
d0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AA:D8:F6:5B:52:96:7B:E0:86:51:26:2D:EA:FB:9B:CB:B9:69:7C
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/ParY9ltSlnvghlEmLer7m8u5aXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
45.66.92.0/22
192.145.52.0/22
Signature Algorithm: sha256WithRSAEncryption
21:f6:5b:af:c0:af:3e:1b:6a:c4:a6:b4:d2:cc:a6:b0:9a:5a:
df:e3:34:7e:84:67:72:d2:f8:30:e4:0f:16:0a:37:db:20:f7:
1d:86:9e:f4:72:63:77:04:c6:af:fc:20:ec:0c:09:2e:12:b9:
44:b9:5b:ec:8a:16:87:e2:52:f0:86:6a:4a:2f:17:f1:fd:f4:
93:71:b9:73:fa:69:07:7e:6b:2b:94:f0:d8:c6:5b:73:d8:a3:
a7:d9:1a:47:81:eb:6e:5b:f3:bf:d2:68:54:e1:80:1f:e8:84:
bc:84:43:16:e9:f6:8d:3f:b4:ec:b4:60:41:75:83:07:5a:c3:
5c:b8:21:9b:2d:7b:ea:a7:b1:e5:50:18:1f:a0:53:a6:80:1a:
9f:2c:62:24:6f:e7:e8:6e:50:12:e6:51:ce:3f:01:5f:0b:7a:
4f:d8:1b:70:87:91:c1:d8:d9:cd:7d:4a:ac:5d:fa:dd:c8:5f:
aa:91:d8:e4:b0:5c:7e:e3:2a:f0:c4:24:69:6d:a7:5b:39:64:
24:d9:6a:7c:97:49:44:89:d6:c8:d4:e0:a8:7e:56:1b:b3:be:
e0:36:ff:5a:14:3d:f3:ba:f1:27:59:19:26:1e:6d:34:5f:73:
36:ab:a1:3b:72:6f:b6:a2:fd:23:35:00:64:58:54:40:6a:7e:
78:17:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 12:50:17 2023 by rpki-client on console-ams.rpki-client.org