Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DneIlrUIOtL-7KLyT4Ka5aXwM3I.roa
File: DneIlrUIOtL-7KLyT4Ka5aXwM3I.roa (raw, json)
Hash identifier: bGP8TtsDnR0jiTaUFE4ORpXbwrQHF53cb/GaHfD3XLY=
Subject key identifier: 0E:77:88:96:B5:08:3A:D2:FE:EC:A2:F2:4F:82:9A:E5:A5:F0:33:72
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01894F64C7A6EB419802508C9480E28DF4D6
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DneIlrUIOtL-7KLyT4Ka5aXwM3I.roa
Signing time: Thu 13 Jul 2023 13:15:52 +0000
ROA not before: Thu 13 Jul 2023 13:15:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 12:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:64:c7:a6:eb:41:98:02:50:8c:94:80:e2:8d:f4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 13 13:15:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e778896b5083ad2feeca2f24f829ae5a5f03372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:a1:e0:45:95:49:7d:6a:05:d0:55:90:d0:
85:70:a8:27:07:37:17:e7:d4:2e:67:c5:c7:b6:f0:
57:47:c7:03:f5:a4:9b:c6:f6:78:ab:06:54:6b:d9:
16:29:df:ae:69:22:6c:a3:3a:77:15:2f:e6:e4:a7:
1b:b7:d7:95:5a:53:a3:92:96:ad:59:a3:53:e8:c3:
51:7c:56:be:5c:cc:da:8e:23:f0:ed:42:74:b5:72:
a0:5b:24:84:37:a2:e1:1e:12:ab:88:75:a9:c8:65:
d8:f6:1b:e4:2c:9e:16:34:4a:dd:1e:e9:10:46:39:
6f:b8:ec:d5:4c:b5:d9:61:56:a3:dd:2a:ad:c0:bf:
0c:36:1e:af:a3:1a:2a:15:6b:dd:01:47:36:67:51:
8c:fb:25:5b:5c:19:be:a6:f7:eb:d1:83:7e:cb:af:
90:8f:85:ed:e9:e4:3b:22:b1:ce:ab:b7:bf:84:77:
b5:3a:e4:7e:1d:c0:b6:88:7e:16:fc:08:58:03:a0:
d5:d4:e7:0a:01:ec:bd:37:a5:bd:ec:08:96:a7:77:
4c:f3:53:c4:df:14:01:d9:fa:44:5a:42:1a:79:ff:
19:ac:2c:41:3f:40:95:17:94:24:27:85:ca:aa:fc:
d8:db:88:2f:b6:84:4c:a8:0b:de:bd:9c:9c:a3:c3:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:77:88:96:B5:08:3A:D2:FE:EC:A2:F2:4F:82:9A:E5:A5:F0:33:72
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DneIlrUIOtL-7KLyT4Ka5aXwM3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.138.183.0/24
77.83.39.0/24
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:98:a3:33:c8:86:a9:b0:09:d5:a8:68:d3:1b:4e:a7:21:9d:
a1:9d:33:32:8e:d4:db:b7:69:33:6c:a6:85:ce:e0:8b:cf:c2:
7b:71:8c:67:64:56:77:b2:15:9b:7b:52:ea:5b:5d:3f:2a:c2:
b2:c4:cc:ee:ff:7b:30:05:9d:5b:59:5a:88:0c:bc:a5:1e:1d:
d9:ed:f1:2e:64:50:d2:5c:53:17:08:fd:1a:06:b8:34:6f:c3:
81:d0:49:6e:e1:3e:1e:04:cb:4f:22:ac:89:d5:ca:cb:4d:e6:
f1:35:ad:1d:83:90:c6:d0:64:11:1d:7e:59:24:56:e7:c0:44:
ad:be:66:9a:c7:ee:49:b3:61:34:85:f8:7f:06:f1:fd:bc:6e:
2e:0b:c2:d8:7a:df:2d:a1:44:90:2a:c8:05:5b:b9:c5:2d:e1:
e4:8f:e7:e3:2b:da:34:d2:99:df:8d:82:4d:b8:95:82:9d:0a:
12:9c:11:02:5a:4d:14:ad:19:85:a0:38:66:da:08:8a:ce:f9:
51:9e:ea:86:14:f0:fa:7e:cc:c0:c3:98:40:17:07:d7:cb:c6:
f3:5c:98:7c:bd:f6:bd:5b:38:25:85:52:dc:f5:66:e6:51:29:
60:a7:4b:99:c9:01:60:d8:ce:51:ab:81:c1:96:62:ab:b4:c6:
6c:b0:38:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org