Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GLYJqyo2BhFN4ys6vhSH7pyz96M.roa
File: GLYJqyo2BhFN4ys6vhSH7pyz96M.roa (raw, json)
Hash identifier: vR6qIufLp2yBlLnCGIaqwRlSGKPSGwF3ZNBFX8ZO5jQ=
Subject key identifier: 18:B6:09:AB:2A:36:06:11:4D:E3:2B:3A:BE:14:87:EE:9C:B3:F7:A3
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018AF1465103FF794045F5C5ACCFD85D4C1B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GLYJqyo2BhFN4ys6vhSH7pyz96M.roa
Signing time: Mon 02 Oct 2023 16:43:51 +0000
ROA not before: Mon 02 Oct 2023 16:43:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.57.41.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Oct 2023 09:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f1:46:51:03:ff:79:40:45:f5:c5:ac:cf:d8:5d:4c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 2 16:43:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18b609ab2a3606114de32b3abe1487ee9cb3f7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:66:56:62:5f:be:5f:8f:70:09:46:40:83:
77:92:9c:fc:21:4d:1e:ef:a6:6a:5f:04:b7:89:5f:
40:70:3c:ec:cb:c3:98:bf:3b:a8:32:1a:f3:26:56:
fc:a3:0d:49:c7:fb:a1:14:cb:0a:29:f5:02:da:5b:
ec:47:35:87:db:99:39:ff:b8:10:9e:37:d4:13:f4:
40:de:ab:44:ca:65:54:88:2c:ef:fd:cd:63:a5:bb:
7a:39:f2:da:da:03:e6:12:80:9b:4e:52:0c:9a:8a:
a4:17:e2:57:f3:bf:f7:ae:8f:45:93:46:b3:1f:eb:
cf:36:e7:b2:02:36:e0:a5:84:38:65:b3:f4:a0:ba:
3e:54:45:31:58:9b:d3:99:77:98:75:60:16:23:76:
49:c4:04:a3:bb:95:ed:e9:ab:82:1d:65:ba:d2:9f:
4a:98:76:97:6a:bd:49:49:54:0c:cb:cf:dc:15:20:
a1:ac:4a:11:09:5d:32:75:cc:be:1c:12:cb:de:e2:
f3:db:62:fd:26:2b:83:85:35:d6:73:3c:d0:5f:32:
31:1f:9e:22:b3:93:ad:e1:30:14:2b:14:c5:76:8d:
e6:87:f5:ca:d0:55:c4:67:ca:de:f1:43:d9:b2:f7:
67:2a:e2:0e:ab:a7:10:9c:5d:1d:5a:35:ab:9c:56:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B6:09:AB:2A:36:06:11:4D:E3:2B:3A:BE:14:87:EE:9C:B3:F7:A3
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GLYJqyo2BhFN4ys6vhSH7pyz96M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0-2.56.110.255
45.94.171.0/24
45.138.183.0/24
45.144.213.0/24
77.83.39.0/24
85.209.120.0/23
193.57.41.0/24
195.62.24.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:f9:36:ae:a0:ac:fb:64:35:1c:c8:b1:2c:51:96:92:14:c7:
55:69:5b:6c:51:94:d5:87:13:61:da:02:5d:fe:f0:e2:2f:9c:
1a:90:7e:11:18:34:36:a9:1c:a4:f2:b0:04:5f:d0:32:2c:49:
fb:22:ff:84:fe:9a:ae:05:1f:fa:87:21:cb:00:bb:3a:93:ab:
5f:72:6b:b4:3e:5c:dc:f4:33:00:09:77:5d:06:3a:29:b5:2c:
8c:5a:03:bf:ab:f2:04:ed:cc:15:e3:a5:32:89:8e:3c:64:de:
45:1b:bc:e0:45:86:a0:b9:0d:c4:bd:56:88:f5:34:d7:3c:e4:
55:57:9b:9b:5c:51:ae:4c:e1:b2:76:3d:0f:4e:e5:bb:3d:b9:
ec:f0:5c:ca:54:c9:ca:a6:f8:20:a1:4d:6c:bf:30:93:c9:3a:
ce:0e:5c:e4:4d:43:f3:8d:9e:31:7f:49:d7:ad:4f:c8:c7:0e:
0f:16:36:f4:5b:72:c0:02:78:4a:1f:9d:b7:2c:b4:64:63:b9:
3f:50:8a:15:13:36:8c:fb:1e:58:f8:44:84:45:5d:b0:0f:aa:
ed:a1:94:80:0e:3c:5d:9c:8f:cc:29:7d:11:55:15:03:6e:3b:
b3:04:e1:d7:0d:55:99:29:0c:aa:34:84:c1:61:b9:57:cb:12:
7e:8d:27:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org