Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PY_90abt1XxLcYSzED3INrOue3Y.roa
File: PY_90abt1XxLcYSzED3INrOue3Y.roa (raw, json)
Hash identifier: c8d90mNADGIy5imM+mCUgjHN0AI1YhL5eYrvmIyHZ/c=
Subject key identifier: 3D:8F:FD:D1:A6:ED:D5:7C:4B:71:84:B3:10:3D:C8:36:B3:AE:7B:76
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01857103034E9B206E3D847DF5D0DAA77FD5
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PY_90abt1XxLcYSzED3INrOue3Y.roa
Signing time: Mon 02 Jan 2023 05:45:00 +0000
ROA not before: Mon 02 Jan 2023 05:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31122
IP address blocks: 45.92.3.0/24 maxlen: 24
45.89.37.0/24 maxlen: 24
45.140.134.0/24 maxlen: 24
45.89.39.0/24 maxlen: 24
91.190.97.0/24 maxlen: 24
91.190.105.0/24 maxlen: 24
45.88.21.0/24 maxlen: 24
45.88.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:03:4e:9b:20:6e:3d:84:7d:f5:d0:da:a7:7f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d8ffdd1a6edd57c4b7184b3103dc836b3ae7b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1c:7b:58:2a:06:98:01:28:53:9f:fa:e0:25:
c3:b3:77:63:43:11:6c:ca:0e:d6:93:80:de:df:78:
eb:7d:96:af:3e:5e:e4:27:63:8b:ca:d7:e7:f5:ab:
99:b8:e5:ce:fb:1a:4f:ea:19:d1:d3:1e:a5:4c:86:
63:23:fd:b2:f7:3c:58:b2:f4:5d:8f:a8:4c:87:33:
01:82:70:61:f6:bc:e4:99:bd:32:19:7c:7a:ff:2c:
28:49:ac:79:0b:64:53:98:e0:9c:d3:76:b5:20:91:
6a:6f:c1:b2:73:cd:9b:c1:bb:45:6d:06:43:dd:18:
c5:23:08:70:71:56:f1:a8:23:87:10:5f:bc:fd:ba:
9a:a5:09:24:16:dd:b2:2e:a7:0c:35:53:1a:37:0a:
f7:b5:3a:8f:b0:54:44:9c:74:a5:0e:6a:5f:dc:ee:
7e:0a:c9:09:eb:38:45:5e:f2:f1:5e:de:65:d5:d5:
6d:63:8e:af:66:7b:c1:63:41:67:fc:cb:e3:c0:af:
3c:d6:9e:49:f8:86:c7:72:bd:8e:c0:54:32:75:31:
00:04:2e:70:16:38:23:a7:a4:94:34:be:c1:22:3d:
a3:d6:bd:dd:44:2e:74:08:07:6a:96:6f:a2:63:47:
25:2e:80:3a:4e:55:39:0b:67:e7:c0:63:5d:72:5b:
06:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8F:FD:D1:A6:ED:D5:7C:4B:71:84:B3:10:3D:C8:36:B3:AE:7B:76
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/PY_90abt1XxLcYSzED3INrOue3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.21.0/24
45.88.23.0/24
45.89.37.0/24
45.89.39.0/24
45.92.3.0/24
45.140.134.0/24
91.190.97.0/24
91.190.105.0/24
Signature Algorithm: sha256WithRSAEncryption
01:05:e2:d0:47:19:41:41:f6:b3:38:c8:bf:1a:da:af:31:da:
12:c1:89:4d:27:c9:d0:ce:d8:31:7f:cb:33:a5:89:8b:a2:6c:
5f:4f:d8:f0:5c:b7:51:32:54:60:a1:54:fc:3c:7a:c0:c7:29:
59:65:5c:8d:0f:e6:53:3b:e9:89:29:20:49:4e:47:6b:20:78:
27:82:22:93:93:92:53:dd:35:0e:8c:1d:e6:ac:b5:27:50:b3:
33:fa:79:d3:ac:81:c5:74:c4:07:50:c2:26:b9:7d:25:01:b2:
2d:57:ab:f3:13:f5:15:c7:87:9c:f8:fe:7a:8f:cb:01:45:af:
2d:d2:06:ae:89:43:37:78:d0:52:76:4e:30:43:c5:e2:f8:d3:
41:f8:de:6d:4a:96:87:ca:bd:e3:30:21:1c:ce:58:16:07:07:
22:29:11:38:21:91:f0:2b:71:e5:e0:d4:f7:3c:6d:4a:9f:94:
9e:ef:6f:54:cf:4d:b4:e7:9a:d3:fa:cd:37:5d:de:29:57:eb:
17:01:1a:8b:52:02:3f:42:1a:0e:11:6a:61:5e:9e:ad:15:93:
03:6d:96:7e:23:6c:85:a9:7b:85:0c:f6:30:a6:60:6f:9b:54:
66:95:e4:66:c0:f5:0c:59:be:8a:ac:fb:29:cb:a5:bf:ed:2a:
ce:dc:9a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org