Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/tQaRzXpAuTfZFHmO_kVsH08sQF0.roa
File: tQaRzXpAuTfZFHmO_kVsH08sQF0.roa (raw, json)
Hash identifier: sR5gvDiGLC+MKIv5qoMjn+PxFuP2tRHFk5mRaggBxMc=
Subject key identifier: B5:06:91:CD:7A:40:B9:37:D9:14:79:8E:FE:45:6C:1F:4F:2C:40:5D
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 018AEFBDAD789B8508031C6C90AFB51ECF75
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/tQaRzXpAuTfZFHmO_kVsH08sQF0.roa
Signing time: Mon 02 Oct 2023 09:34:59 +0000
ROA not before: Mon 02 Oct 2023 09:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.66.92.0/24 maxlen: 24
45.66.93.0/24 maxlen: 24
45.66.94.0/23 maxlen: 23
37.44.228.0/22 maxlen: 24
192.145.52.0/22 maxlen: 24
192.145.53.0/24 maxlen: 24
192.145.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Oct 2023 11:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:bd:ad:78:9b:85:08:03:1c:6c:90:af:b5:1e:cf:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Oct 2 09:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b50691cd7a40b937d914798efe456c1f4f2c405d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:63:5f:5a:0f:19:9f:8e:02:dd:eb:93:42:5e:
3e:57:3b:4d:0c:93:a9:42:ac:c8:05:12:5e:cc:6e:
72:db:c6:8c:5d:21:2b:b8:14:57:c5:30:d6:cd:3b:
91:ed:9f:2e:c6:af:84:6b:1e:99:5d:20:03:16:c8:
7a:52:94:2a:9c:a9:c7:cf:67:3d:ce:a6:8d:07:09:
93:6e:9a:49:7f:0d:07:7d:0b:85:9f:f3:81:bf:2a:
f6:c1:77:27:12:19:83:4a:ae:da:ad:8d:d2:a3:1a:
77:bf:63:dc:bf:e3:f6:4a:49:ac:a3:a5:5d:ac:06:
6c:7a:dd:27:03:62:31:3c:61:03:88:e1:aa:ab:cf:
b8:83:b8:db:5a:3b:59:ff:95:d2:31:1d:8c:28:89:
b0:64:52:ae:f5:8b:3d:47:b8:fd:6a:8a:5d:9d:3b:
4c:0c:a1:bc:0c:1c:fe:28:c2:9b:40:59:cd:d7:1a:
5a:27:79:27:57:c1:ca:33:11:96:ec:89:12:6c:76:
7c:00:b3:74:d2:9f:0b:73:09:97:18:df:a6:8f:66:
4c:5c:98:c9:fb:2c:3a:35:36:ae:6d:00:99:bb:6b:
14:cf:d7:34:e4:a7:87:62:1f:75:5b:0c:78:b2:94:
7d:4c:8b:40:d8:e6:e1:6d:4e:32:d9:48:86:a7:15:
34:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:06:91:CD:7A:40:B9:37:D9:14:79:8E:FE:45:6C:1F:4F:2C:40:5D
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/tQaRzXpAuTfZFHmO_kVsH08sQF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
45.66.92.0/22
192.145.52.0/22
Signature Algorithm: sha256WithRSAEncryption
52:a7:cb:c7:fd:ea:29:33:2f:19:7e:66:7a:e7:1e:17:f6:08:
f1:31:ea:3e:09:48:3e:59:04:13:99:85:26:cb:d4:45:5b:f9:
93:e8:af:4d:e0:b9:8b:11:c2:f1:27:88:21:eb:58:df:d7:4d:
b9:a6:e2:d5:3b:9d:58:7e:59:66:03:d6:5f:56:6b:eb:c5:3b:
f8:dc:8a:41:34:16:83:01:2e:29:70:25:81:dc:80:41:78:10:
09:71:3c:33:39:77:15:a9:6c:f2:a8:77:b3:96:fe:93:08:96:
c9:6c:93:4c:20:9c:7a:7d:c7:cc:f7:f0:01:d8:1a:b5:69:66:
f2:31:ab:0d:17:6d:99:ca:c5:c0:54:77:59:2c:73:3b:82:20:
03:5b:36:95:1f:d7:27:cd:72:0c:1b:8d:e4:a6:c5:c4:ab:73:
4a:16:a2:09:1a:da:f9:10:43:be:2a:9b:8f:ae:95:fe:b1:a2:
ee:04:ca:49:c8:32:50:2d:d5:4c:a2:c2:00:f9:40:77:ec:19:
0d:cb:2a:78:55:d4:a9:27:a4:e0:58:7f:d3:b9:6b:58:32:d5:
b9:8c:c2:bd:57:f4:7e:f5:6e:70:4f:6d:17:31:ef:00:96:2e:
d7:2e:43:6a:0b:4c:fd:0b:a6:5b:89:da:fa:5d:8d:04:6b:39:
e1:4b:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org