Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/fI01OtwLoyem8GNzGoqYr5fGVxg.roa
File: fI01OtwLoyem8GNzGoqYr5fGVxg.roa (raw, json)
Hash identifier: swaQ36fqbVIit7rEu+D+y2dZ3WF/FCjmz1C8H/4ZJM0=
Subject key identifier: 7C:8D:35:3A:DC:0B:A3:27:A6:F0:63:73:1A:8A:98:AF:97:C6:57:18
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 0186A6D2AA68747ED3CAD833507C23313397
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/fI01OtwLoyem8GNzGoqYr5fGVxg.roa
Signing time: Fri 03 Mar 2023 09:34:29 +0000
ROA not before: Fri 03 Mar 2023 09:34:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.66.94.0/23 maxlen: 23
37.44.228.0/22 maxlen: 24
192.145.52.0/22 maxlen: 24
193.219.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Apr 2023 12:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:d2:aa:68:74:7e:d3:ca:d8:33:50:7c:23:31:33:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Mar 3 09:34:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c8d353adc0ba327a6f063731a8a98af97c65718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:08:f2:78:47:40:b0:a8:89:a7:3a:80:30:9e:
ca:ce:59:f8:86:81:32:51:49:86:66:99:3d:ff:d2:
c1:29:9a:bb:82:17:4e:70:d3:f6:c2:eb:13:24:9b:
56:e3:5a:fa:1e:40:ee:c1:a3:47:16:e5:2b:c1:f2:
80:3b:9b:7e:16:5f:30:69:8b:ba:de:05:da:d8:e7:
af:c8:50:fa:10:67:47:f2:4e:45:bc:61:d2:dc:67:
06:4e:97:15:67:f7:7d:8a:0f:69:f4:e7:63:11:c6:
59:51:0e:b2:36:4a:29:ce:d9:bb:df:ab:f1:ad:94:
31:48:74:ad:47:7c:e4:34:03:16:1a:53:d0:83:6f:
4a:b9:e0:0c:4b:c4:cc:6a:b2:85:7a:f0:c0:24:4c:
bc:f8:96:60:a5:9d:63:c4:fa:49:b2:37:01:b5:c3:
39:b9:69:30:49:36:29:c6:e6:0f:8f:c3:94:81:23:
1d:d0:4a:18:ac:71:d7:d3:dc:16:7c:32:b4:be:18:
66:06:e1:f2:40:94:74:1f:27:94:fe:4b:34:cd:c6:
bc:f6:e8:4d:5e:ff:83:f5:a7:85:91:68:8a:b4:f3:
d4:a5:13:1e:99:f1:59:26:98:af:81:83:c9:d6:6c:
69:a3:84:e4:1c:c5:b3:04:c0:03:71:71:68:d3:de:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8D:35:3A:DC:0B:A3:27:A6:F0:63:73:1A:8A:98:AF:97:C6:57:18
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/fI01OtwLoyem8GNzGoqYr5fGVxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
45.66.94.0/23
192.145.52.0/22
193.219.99.0/24
Signature Algorithm: sha256WithRSAEncryption
05:61:68:e3:8c:6f:ca:39:b6:de:a3:45:33:bf:10:4b:8e:ea:
87:13:aa:20:a6:2c:93:ed:ac:68:3b:7e:d0:61:f1:57:8a:32:
5c:c4:61:f7:e0:87:ef:4f:e2:c5:e6:ad:b4:00:57:75:bd:bd:
47:4c:f8:b5:f5:0d:4c:1e:ea:29:ca:5f:ee:87:7b:58:d5:d4:
41:1e:c5:8f:b9:28:03:18:5a:b6:0c:a4:e2:92:a6:a3:26:04:
69:13:a6:6f:45:be:64:5e:01:01:8a:35:84:10:c0:4a:c3:6f:
2b:69:aa:33:24:ad:ef:03:6b:62:f0:cc:6e:4b:0e:1e:43:27:
fa:a7:6f:65:cb:53:04:a1:7c:13:c4:b8:54:12:c9:73:5a:ea:
78:59:b6:3a:4d:64:81:7e:93:dd:2d:3b:fd:f9:f2:09:c5:3b:
dc:38:47:0a:db:f5:50:d9:bf:7b:e4:37:eb:80:ae:70:9d:b3:
da:17:3e:2f:54:bc:6c:e3:3e:c3:ff:d1:b5:58:ab:d6:51:82:
b5:3a:47:8d:56:1e:35:68:ec:dd:10:81:f9:bf:c8:8f:d5:a0:
76:42:c2:d7:2d:d5:de:c8:5b:42:80:c5:0d:a0:00:0b:c1:4a:
73:54:d5:66:ea:68:5a:4b:57:4f:cf:04:ec:18:16:05:a1:65:
5d:89:60:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org