Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GDm2hFPp6R5y2nD9oXYjC6nuh1w.roa
File: GDm2hFPp6R5y2nD9oXYjC6nuh1w.roa (raw, json)
Hash identifier: fOm58qCZWkAayp7/dlsYUsGrMKhLcii9eKjJT0ToRf4=
Subject key identifier: 18:39:B6:84:53:E9:E9:1E:72:DA:70:FD:A1:76:23:0B:A9:EE:87:5C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A45CBE3C7A4AECE8B2571249FCBA5749E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GDm2hFPp6R5y2nD9oXYjC6nuh1w.roa
Signing time: Wed 30 Aug 2023 09:35:04 +0000
ROA not before: Wed 30 Aug 2023 09:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 45.144.213.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Aug 2023 18:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:cb:e3:c7:a4:ae:ce:8b:25:71:24:9f:cb:a5:74:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 30 09:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1839b68453e9e91e72da70fda176230ba9ee875c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8e:bf:7d:b3:51:a1:e2:1b:b4:57:81:de:5b:
54:c0:12:87:5f:52:ac:5e:10:c3:80:a8:d2:5e:4b:
3d:5f:be:a2:5a:d4:3c:df:dd:31:f2:ce:16:51:24:
65:32:1b:8a:c4:14:d5:5f:3e:82:3f:9c:71:97:15:
e2:54:de:65:3c:0c:5f:52:eb:9f:36:7c:e7:b9:9b:
f0:ab:a6:ed:77:30:99:b8:a6:56:b0:c6:c5:43:0e:
9d:20:48:23:59:08:08:04:9c:47:74:5c:2d:8a:2d:
e6:50:f4:ac:39:1b:1a:8d:d3:b1:20:5e:9d:96:31:
79:70:78:b5:24:41:01:88:89:8a:1d:22:0e:80:fb:
ec:37:e6:f9:9c:66:31:eb:71:99:f6:ed:3e:06:97:
ae:40:4e:83:bc:89:5a:5d:81:78:7c:dd:af:5e:88:
0f:ac:ad:4d:94:50:d9:50:5b:68:b4:53:93:94:26:
e7:ea:f8:2e:c4:0d:a8:4d:33:6c:2d:23:0f:7a:e6:
5b:d0:8d:80:23:c1:60:02:2f:3b:4b:24:a4:89:ba:
9b:43:38:c3:16:13:6f:f0:99:47:ce:00:b5:04:d2:
00:d5:cf:a9:14:da:5c:5f:1b:9e:50:93:f9:15:4a:
f4:3a:e3:af:6d:9a:36:2a:d5:70:07:25:64:80:e5:
4f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:39:B6:84:53:E9:E9:1E:72:DA:70:FD:A1:76:23:0B:A9:EE:87:5C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GDm2hFPp6R5y2nD9oXYjC6nuh1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
45.144.213.0/24
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:bf:97:9b:79:da:47:6a:63:c8:15:ed:d5:85:f5:38:d4:5c:
86:96:09:14:1d:9a:74:bd:b0:85:5d:46:52:58:22:d8:a1:dd:
15:2e:e1:9b:81:db:f9:84:3b:2e:2e:23:6b:36:1d:1c:c4:06:
03:4d:3f:d0:8f:31:83:d5:17:63:52:14:43:d0:d8:44:08:54:
09:f3:b7:59:95:2b:0f:a9:3a:58:66:42:d8:7f:93:fd:a5:0d:
5a:ab:1e:44:47:14:b6:f2:21:22:83:4b:da:63:28:0b:94:bf:
30:b3:54:67:88:18:55:f1:cf:fb:e4:61:53:bf:1a:f6:3b:3d:
8c:9b:0e:b9:bc:be:50:b0:89:64:09:9e:00:32:2d:d5:70:c2:
be:cf:3d:70:1b:2f:16:c3:72:a9:ff:ae:13:3f:1b:3b:42:e9:
09:af:14:19:c1:01:d7:39:eb:09:dc:58:a6:f7:e7:70:fb:29:
6e:61:38:d0:6f:27:5a:19:d5:2b:6b:e0:00:49:08:81:16:2f:
2a:cf:c7:b9:31:2e:cc:f3:e7:c0:0d:76:2d:74:d1:17:ec:41:
e8:e0:f6:8a:46:d0:5b:9d:e0:23:43:2b:f6:b4:dc:9d:84:29:
56:87:ef:c1:b7:38:d9:ec:1f:6f:24:a8:ae:a6:bc:e0:9a:de:
b4:0f:21:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org