Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JUzn4j_SZ0DVUVgTmCFbI-_EzBA.roa
File: JUzn4j_SZ0DVUVgTmCFbI-_EzBA.roa (raw, json)
Hash identifier: spKT9fePJ/R0XEZHUv2COUkwF6d37j+o3xy2rTZSP8E=
Subject key identifier: 25:4C:E7:E2:3F:D2:67:40:D5:51:58:13:98:21:5B:23:EF:C4:CC:10
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0185A0682995081E3791DB607C9BC242BDC7
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JUzn4j_SZ0DVUVgTmCFbI-_EzBA.roa
Signing time: Wed 11 Jan 2023 10:37:39 +0000
ROA not before: Wed 11 Jan 2023 10:37:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 77.83.39.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.138.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Feb 2023 09:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:68:29:95:08:1e:37:91:db:60:7c:9b:c2:42:bd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 11 10:37:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=254ce7e23fd26740d551581398215b23efc4cc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:93:28:1e:d3:f5:18:10:0a:c7:56:b9:ec:10:
05:0e:e3:6c:b1:b4:2a:81:7e:73:c6:ce:66:db:f7:
ac:c5:b9:f9:07:d2:7f:9d:73:28:e3:70:70:0f:4c:
26:df:a3:fe:c1:3e:39:9e:d7:4b:d6:15:77:d3:5e:
0c:78:54:c2:d6:9e:bf:d2:cc:6d:4c:be:ec:05:12:
6e:d6:36:01:f3:29:87:c0:17:b1:0a:22:76:e9:4b:
3d:28:41:fe:4f:d0:a5:fd:f0:6a:ba:11:77:62:15:
14:88:f3:24:13:38:ea:65:28:ff:c7:ea:46:d3:eb:
c2:df:93:de:9c:bf:b2:a4:bc:7b:02:48:00:95:c2:
44:af:e1:47:72:6c:97:fb:1d:3a:68:c9:cd:99:6d:
f4:2b:e9:95:b7:82:f0:df:42:86:44:f4:94:55:70:
ad:28:f7:7a:cc:7c:0d:f0:c9:fa:da:2b:e0:fd:08:
70:96:28:c9:a7:9c:ec:05:8d:a2:d1:01:17:cd:eb:
29:01:e0:54:8e:4e:c6:1c:2b:1c:2c:04:da:64:e0:
5e:fd:38:24:4f:da:2b:93:88:81:11:fe:2f:62:c4:
f0:0e:27:f2:9c:4c:d1:e0:6f:c7:7a:c3:31:c4:31:
cd:49:60:b9:ba:e7:1e:33:26:a0:d1:78:48:c6:74:
6e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:4C:E7:E2:3F:D2:67:40:D5:51:58:13:98:21:5B:23:EF:C4:CC:10
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JUzn4j_SZ0DVUVgTmCFbI-_EzBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.170.0/24
45.138.180.0/24
77.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d0:7c:4f:26:51:82:9b:f4:2b:d6:f4:6a:f8:b0:9d:3e:21:
95:d8:78:37:de:3a:41:8d:7d:ce:fa:ef:8b:42:28:02:68:3f:
65:9c:68:51:fc:aa:1d:83:97:50:02:5e:01:a4:27:70:d2:33:
c6:03:be:1e:84:cc:80:c4:3b:29:39:0f:00:0a:8c:66:8f:43:
13:f2:41:b3:d7:cd:e5:84:f2:b0:96:53:b7:d4:f7:9f:53:f0:
e2:93:8d:7a:b4:17:ce:a0:19:fa:f4:62:59:53:2c:55:bc:8d:
05:40:8c:c7:e2:cf:9f:c1:cb:c5:20:72:4f:87:64:d1:1e:05:
ac:63:5a:48:5e:c3:b3:db:8c:d4:20:eb:bb:3b:41:16:08:be:
d5:a8:c6:47:ed:ee:2d:62:b5:4a:b1:51:16:bb:e0:1a:46:1a:
6b:36:02:e3:ae:71:da:aa:86:43:13:6d:83:cb:0f:eb:39:ef:
59:98:b9:7d:23:32:31:7d:ee:3c:bb:5b:b9:ad:f9:7e:3f:d1:
6a:f0:17:7b:36:f8:a3:5a:bf:c8:c1:b7:74:b2:6f:a6:3b:48:
df:be:f0:71:18:e6:25:42:16:58:35:d1:c9:3b:7d:5a:29:f2:
d7:f7:e7:23:1b:3b:ee:6b:b5:ca:69:46:5b:8c:a2:49:c5:78:
7f:46:66:8c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYWgaCmVCB43kdtgfJvCQr3HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwMTExMTAzNzM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTRjZTdlMjNmZDI2NzQwZDU1MTU4MTM5ODIxNWIyM2VmYzRjYzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15MoHtP1GBAKx1a57BAFDuNssbQq
gX5zxs5m2/esxbn5B9J/nXMo43BwD0wm36P+wT45ntdL1hV3014MeFTC1p6/0sxt
TL7sBRJu1jYB8ymHwBexCiJ26Us9KEH+T9Cl/fBquhF3YhUUiPMkEzjqZSj/x+pG
0+vC35PenL+ypLx7AkgAlcJEr+FHcmyX+x06aMnNmW30K+mVt4Lw30KGRPSUVXCt
KPd6zHwN8Mn62ivg/QhwlijJp5zsBY2i0QEXzespAeBUjk7GHCscLATaZOBe/Tgk
T9ork4iBEf4vYsTwDifynEzR4G/HesMxxDHNSWC5uuceMyag0XhIxnRuzwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCVM5+I/0mdA1VFYE5ghWyPvxMwQMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvSlV6bjRqX1NaMERWVVZnVG1DRmJJLV9FekJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALV6qAwQA
LYq0AwQATVMnMA0GCSqGSIb3DQEBCwUAA4IBAQBc0HxPJlGCm/Qr1vRq+LCdPiGV
2Hg33jpBjX3O+u+LQigCaD9lnGhR/Kodg5dQAl4BpCdw0jPGA74ehMyAxDspOQ8A
Coxmj0MT8kGz183lhPKwllO31PefU/Dik416tBfOoBn69GJZUyxVvI0FQIzH4s+f
wcvFIHJPh2TRHgWsY1pIXsOz24zUIOu7O0EWCL7VqMZH7e4tYrVKsVEWu+AaRhpr
NgLjrnHaqoZDE22Dyw/rOe9ZmLl9IzIxfe48u1u5rfl+P9Fq8Bd7NvijWr/Iwbd0
sm+mO0jfvvBxGOYlQhZYNdHJO31aKfLX9+cjGzvua7XKaUZbjKJJxXh/RmaM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org