Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DVO65JLy5cp1i45x9gmmw3B773w.roa
File: DVO65JLy5cp1i45x9gmmw3B773w.roa (raw, json)
Hash identifier: Peb89qux55nVGqisppo8JmXdGTpacozyPtzWlDsMdZ0=
Subject key identifier: 0D:53:BA:E4:92:F2:E5:CA:75:8B:8E:71:F6:09:A6:C3:70:7B:EF:7C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018FBB4E011DD0A8F7D7BD46DE9AE0237033
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DVO65JLy5cp1i45x9gmmw3B773w.roa
Signing time: Mon 27 May 2024 18:26:42 +0000
ROA not before: Mon 27 May 2024 18:26:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 45.9.30.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jun 2024 11:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bb:4e:01:1d:d0:a8:f7:d7:bd:46:de:9a:e0:23:70:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 27 18:26:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d53bae492f2e5ca758b8e71f609a6c3707bef7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:39:24:3c:24:b6:cd:37:1c:de:4c:5e:f6:85:
78:2d:df:b8:cd:99:3f:6d:04:dc:ff:f6:5e:aa:11:
52:53:87:b7:6a:05:c6:4c:5d:53:74:b3:90:55:7b:
fc:bd:4c:34:29:8d:b4:3a:d9:42:53:39:29:3b:17:
c8:a2:12:b7:cf:e3:ce:a8:23:80:13:49:49:a9:3b:
e4:08:8b:20:2b:15:3b:bb:9a:47:74:87:2c:41:0a:
e8:d9:01:ae:04:ff:01:c8:e1:9a:97:a9:51:62:73:
46:62:e1:b0:ec:33:43:cf:7f:ae:67:38:3a:38:04:
93:bd:86:cf:7b:26:65:de:9d:1c:dc:dd:ec:b1:06:
0d:61:76:ba:3e:0f:bc:00:25:41:c4:55:89:56:4f:
37:8b:e0:44:f0:e1:a6:cd:78:f8:76:b0:85:ca:c1:
ca:4b:9a:02:f3:7b:c2:59:09:91:08:26:cf:79:35:
ec:ce:55:c2:8e:0d:7d:3a:70:ff:07:16:62:46:9b:
41:f8:8f:51:ec:ed:96:aa:b1:07:9c:24:45:f6:82:
70:86:62:35:43:86:94:97:57:54:50:3e:44:78:39:
45:b2:08:a3:9e:e7:c4:4f:10:45:69:69:f2:32:1d:
1e:fe:5f:2d:88:52:10:37:44:2e:76:d2:60:ce:8d:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:53:BA:E4:92:F2:E5:CA:75:8B:8E:71:F6:09:A6:C3:70:7B:EF:7C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DVO65JLy5cp1i45x9gmmw3B773w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.94.171.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e3:a1:26:a1:d1:8a:09:89:80:cb:60:d5:83:80:0d:af:57:
e9:37:5c:f0:55:d0:75:ef:ae:2a:6a:84:30:3c:bf:64:c3:8f:
fc:eb:81:4e:9f:4e:1d:5a:46:d5:6b:19:bf:08:87:61:7a:b3:
8f:2f:c1:17:9f:e3:d3:44:00:57:a3:d7:57:22:44:ae:45:b3:
b5:90:6e:49:9b:c7:9d:df:6d:b8:7c:3f:db:b7:0e:86:2d:18:
61:d2:31:0a:9a:ec:ac:f4:2c:6f:31:c7:95:1e:ed:d7:d4:54:
e9:f1:5a:26:d5:de:b7:c6:37:70:09:c7:a1:14:f8:19:cb:71:
24:d0:ed:19:33:6f:2f:3c:a2:67:c9:08:46:80:d8:8e:c7:10:
6f:92:11:65:e2:03:17:fd:76:0f:7e:bd:d9:51:92:bb:80:16:
52:c6:3c:48:11:91:73:b1:e8:f7:bd:39:6c:69:9f:c8:22:de:
54:d0:10:8e:f4:9e:d0:9b:d9:03:4b:63:29:40:0e:48:38:66:
eb:4d:a6:00:6a:e7:ed:89:76:fa:5b:fb:7f:f2:a9:b3:3b:b7:
77:e3:ce:10:23:5f:29:bb:d4:6a:75:a0:ab:06:5f:44:82:71:
aa:2c:89:f9:45:f8:5d:6f:0c:13:0d:ff:79:56:5b:1c:51:bc:
b7:4f:8d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 18:13:01 2024 by rpki-client on console-ams.rpki-client.org