Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/13mybZQ_ygep6379jTDPaZLasSo.roa
File: 13mybZQ_ygep6379jTDPaZLasSo.roa (raw, json)
Hash identifier: /3T2NbUBnf0NYponN6lrnPLZzc3+CXhx1+Sqr0QiyW8=
Subject key identifier: D7:79:B2:6D:94:3F:CA:07:A9:EB:7E:FD:8D:30:CF:69:92:DA:B1:2A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B8FF1E35F4C9DCF417D7D55381485183A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/13mybZQ_ygep6379jTDPaZLasSo.roa
Signing time: Thu 02 Nov 2023 12:11:16 +0000
ROA not before: Thu 02 Nov 2023 12:11:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.94.171.0/24 maxlen: 24
2.56.108.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.144.213.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.81.114.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 08:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:f1:e3:5f:4c:9d:cf:41:7d:7d:55:38:14:85:18:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 2 12:11:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d779b26d943fca07a9eb7efd8d30cf6992dab12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:e9:f3:2e:98:99:38:fb:de:86:ba:98:eb:
7a:50:c4:9f:aa:09:c9:eb:0f:5e:03:9a:08:f7:69:
ef:64:6e:07:16:ba:d9:87:8c:ed:02:bb:5c:38:7a:
be:12:c7:45:a3:f9:d4:cf:b7:66:f6:e8:10:3a:fd:
53:a3:0c:85:a1:da:6d:8f:31:e7:4f:a5:c1:b4:4b:
86:a9:8d:e8:e0:ba:35:d5:ea:64:be:ef:09:13:dd:
a1:30:51:12:62:fc:89:c6:12:58:51:f5:bd:ad:05:
47:2c:41:cf:22:f0:a9:1d:77:03:e9:1b:92:b0:f1:
64:85:03:36:51:54:04:0b:b7:b6:c5:03:62:cb:e0:
28:36:6d:b0:a1:5a:4a:78:59:2b:56:ac:5b:af:25:
29:7a:27:35:0a:76:97:d3:73:02:8d:d3:e0:24:dc:
47:32:a3:5d:dc:5f:2a:45:ac:e8:02:8b:05:7d:20:
18:08:01:09:4f:5d:92:23:55:2f:51:65:01:16:5e:
a6:2f:17:81:9e:84:e5:99:9d:94:34:15:8c:1c:3b:
ea:67:49:3f:40:58:99:7a:9c:c8:99:a6:0e:ad:95:
a0:4a:9c:8c:7e:8b:a4:fd:50:1c:5d:a4:19:63:5e:
ca:d6:0e:47:f6:17:82:90:6c:dc:93:60:d2:12:6b:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:79:B2:6D:94:3F:CA:07:A9:EB:7E:FD:8D:30:CF:69:92:DA:B1:2A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/13mybZQ_ygep6379jTDPaZLasSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/24
2.56.110.0/24
45.81.113.0-45.81.115.255
45.88.139.0/24
45.94.171.0/24
45.144.213.0/24
77.83.39.0/24
85.209.120.0/23
193.30.241.0/24
195.62.24.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
01:11:49:9d:22:0e:19:e5:2e:2c:d0:97:34:93:93:e3:f2:68:
2b:03:fd:50:63:53:8a:79:fc:b1:cf:af:22:42:7b:25:17:76:
0d:1b:5b:d3:1b:c8:26:bd:9b:c8:e4:5a:30:8d:20:4b:cc:e0:
6b:fb:56:a3:08:47:25:06:1d:f1:b4:ae:90:c1:1b:8b:4c:bf:
5d:52:c0:7a:70:f9:ad:92:72:10:54:55:22:0e:a9:84:bb:f1:
f4:30:dc:c0:f9:18:9c:41:fb:56:63:aa:73:ec:57:07:74:aa:
93:22:fa:80:a2:a4:28:e1:50:bd:c6:7f:d4:33:c4:a6:23:51:
41:4e:d9:27:05:24:98:a2:f7:6d:9b:d9:94:fd:5e:4e:c9:6f:
02:37:ce:5a:1c:75:8c:3a:d0:f0:b5:50:ad:e5:b6:d3:89:ce:
eb:f4:18:e0:82:52:f5:93:f3:ef:83:38:23:1b:62:36:07:85:
63:6a:c3:ec:03:21:88:11:80:da:d1:d8:3e:b5:df:59:c2:6c:
01:41:5c:84:92:94:b4:38:66:4b:26:15:b3:49:a8:6a:03:b8:
db:fc:17:02:60:b6:1b:62:94:2d:95:cc:44:f6:3e:7e:55:d7:
6c:65:54:25:6c:fc:b4:b8:fc:38:52:de:e2:e6:64:98:ce:00:
16:43:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:30 2024 by rpki-client on console-fra.rpki-client.org