Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0TVLXfxMvP2CiYcdiBDClsT1qIE.roa
File: 0TVLXfxMvP2CiYcdiBDClsT1qIE.roa (raw, json)
Hash identifier: jAhIoSvbdb3UICfjtaJoz8FV5YaYSaaxYR4rEBXhOy8=
Subject key identifier: D1:35:4B:5D:FC:4C:BC:FD:82:89:87:1D:88:10:C2:96:C4:F5:A8:81
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0185F819F2EABB6C9C3B12EEB2B07D3B150E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0TVLXfxMvP2CiYcdiBDClsT1qIE.roa
Signing time: Sat 28 Jan 2023 11:18:48 +0000
ROA not before: Sat 28 Jan 2023 11:18:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Feb 2023 11:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f8:19:f2:ea:bb:6c:9c:3b:12:ee:b2:b0:7d:3b:15:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 28 11:18:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d1354b5dfc4cbcfd8289871d8810c296c4f5a881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:00:6d:23:ae:e1:a7:f2:94:c4:48:d6:a1:51:
56:da:b8:76:8d:3d:44:d8:09:f3:13:b6:ec:a4:e8:
ca:19:6d:04:a5:92:64:f6:e9:d4:ed:26:0d:bd:8f:
00:ac:f1:85:83:1d:b0:31:73:01:a4:d7:83:e3:a1:
2c:d7:7b:a2:03:f8:cb:02:9c:1e:73:d8:77:d7:28:
99:3c:6f:35:5f:03:3b:36:6e:b9:78:1e:70:da:60:
bd:43:88:33:61:c9:16:19:fd:7c:b9:e0:e5:53:e3:
66:d1:ac:45:d8:c5:11:8b:2e:a4:d1:06:c2:d3:2c:
78:5a:b7:df:23:c9:54:ed:0d:37:3f:28:c7:02:83:
c1:dd:00:28:c8:e8:2b:5f:3b:b7:0c:13:1c:a1:ad:
64:5b:02:14:2e:5b:42:7f:05:3e:26:8a:7d:fd:1d:
00:b2:65:ad:2a:59:3e:94:99:12:0a:8d:2b:19:8e:
6b:d6:ff:e8:06:f7:dc:72:2a:9a:49:fa:69:7f:39:
e0:5e:2a:cb:34:58:17:be:7c:f2:d1:dd:b5:53:3d:
32:d8:ea:5d:3b:51:c4:df:78:b2:3f:da:2f:dc:9d:
1d:c4:f6:c3:8a:ba:50:11:8c:d2:00:37:bc:18:be:
c6:55:22:ba:a0:6e:b5:6f:e2:d9:ee:0e:54:89:22:
64:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:35:4B:5D:FC:4C:BC:FD:82:89:87:1D:88:10:C2:96:C4:F5:A8:81
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0TVLXfxMvP2CiYcdiBDClsT1qIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.88.137.0/24
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:b4:b0:e3:4d:bf:7f:11:57:87:b6:32:1a:78:b6:ec:24:1c:
cf:a4:b1:03:2f:21:90:72:e6:75:88:8f:56:e8:0b:c6:b3:4e:
a8:4e:4e:2b:08:34:70:9c:b0:37:7c:16:53:84:00:72:d1:47:
56:06:e5:73:66:67:1e:f2:10:e6:b8:f7:a5:9f:52:01:43:3d:
3f:9d:09:b3:62:8d:54:d2:30:ca:a7:e4:cb:71:3e:68:35:42:
3f:cb:a8:db:09:8f:96:76:2f:7e:8f:98:96:af:1e:07:c0:55:
aa:d0:57:6c:0b:6c:cc:99:c3:28:88:8d:d5:93:4a:7d:e3:66:
0e:5a:6c:3d:6b:72:c0:57:8a:32:1d:c0:24:61:91:aa:5b:be:
fb:a8:32:4e:e4:19:43:11:ea:ae:ff:04:79:71:b2:ad:1b:13:
30:ba:be:dd:99:92:9a:4b:7d:0b:cf:05:7d:ba:f1:4a:25:ef:
8f:6f:6d:60:39:b0:7b:e8:47:94:d6:59:e5:7a:76:b4:6f:ce:
3e:f2:00:4b:33:bd:76:12:af:ef:17:97:c1:48:d6:67:d5:db:
90:1b:c7:fa:14:38:dd:03:56:54:47:b8:20:ba:f4:68:82:c9:
56:2e:95:e0:fa:f6:ca:58:e3:97:b7:ea:c3:69:58:b0:38:32:
97:e3:bb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org