Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LaSsNlQHp-yzA1wJDkWQBoFnpU8.roa
File: LaSsNlQHp-yzA1wJDkWQBoFnpU8.roa (raw, json)
Hash identifier: FHw5mTeC7tEn5/+CNglonFmLwV9Kk31j0kIxOZuuGKQ=
Subject key identifier: 2D:A4:AC:36:54:07:A7:EC:B3:03:5C:09:0E:45:90:06:81:67:A5:4F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A7E8B4B87D8A541BFCE916269D84F1B04
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LaSsNlQHp-yzA1wJDkWQBoFnpU8.roa
Signing time: Sun 10 Sep 2023 10:02:52 +0000
ROA not before: Sun 10 Sep 2023 10:02:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47757
IP address blocks: 195.177.95.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.138.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Sep 2023 17:51:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7e:8b:4b:87:d8:a5:41:bf:ce:91:62:69:d8:4f:1b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 10 10:02:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2da4ac365407a7ecb3035c090e4590068167a54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2e:1b:ad:26:2b:18:ba:f7:d0:06:be:9d:ae:
45:ac:be:2c:7e:35:ca:47:6a:fe:d4:9f:75:f9:75:
98:ab:f5:ab:cf:41:24:ec:d9:1e:8c:71:20:60:be:
5b:c1:f9:ef:e0:ba:e3:2d:5c:0c:10:22:53:6f:47:
6c:e5:2e:8f:d9:cf:88:5b:2a:4d:cb:06:02:5f:bc:
d4:91:a2:11:b3:49:2f:cb:37:8c:5f:c2:9f:35:c2:
6c:9b:b9:11:03:6d:65:3f:1b:e3:3c:18:c8:0f:fb:
12:de:9c:2f:cf:af:8a:2f:3e:57:34:40:b5:84:61:
0f:2e:2f:8b:63:65:6b:70:1b:aa:44:b9:59:6c:cb:
be:36:1a:d9:4d:70:ec:65:1d:f5:8b:58:4a:a3:68:
08:81:0d:e4:00:75:18:6f:b5:a4:f5:a7:af:1f:ce:
88:6a:a0:13:63:0d:d5:ad:4f:a6:da:ac:de:2d:8b:
58:19:eb:d3:c6:bc:7a:7e:3a:8d:d7:b1:ae:1e:a2:
50:37:f1:b8:49:0c:10:3a:a6:f4:9f:0a:c8:bb:eb:
bd:bf:8a:10:ee:1a:bb:8e:3c:76:b9:17:28:6a:ca:
72:2a:d2:5e:0d:c1:db:ac:59:da:72:73:a6:09:ac:
bd:f3:be:21:41:11:ec:3b:c0:4b:24:12:c7:78:8b:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A4:AC:36:54:07:A7:EC:B3:03:5C:09:0E:45:90:06:81:67:A5:4F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LaSsNlQHp-yzA1wJDkWQBoFnpU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.139.0/24
45.138.180.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
67:19:b6:69:03:c8:59:1a:df:0c:2d:1f:cc:de:10:3a:68:88:
56:f5:32:8d:1b:08:2b:7b:38:3e:8d:6a:32:f4:bd:7d:e3:0d:
61:01:7e:c3:a3:0a:76:5a:6e:09:6f:c8:15:79:88:f6:3f:a0:
ce:9e:41:79:fe:fb:5b:34:10:ec:1d:0f:01:ce:73:f3:e7:ec:
21:a3:95:36:93:25:f9:37:46:2c:bd:10:dc:dc:7c:69:5e:e3:
ea:f7:b5:11:11:0b:bc:cf:e9:fc:4b:d0:bf:9c:c9:f0:52:39:
e0:bb:65:ed:98:70:79:05:e2:9e:25:c3:da:f3:4c:e2:59:76:
8e:cc:ae:48:43:bb:26:39:ff:e8:8a:cc:21:6a:b7:69:6c:04:
e5:c3:ef:fa:24:18:6e:5c:fc:19:b5:03:36:ac:00:09:96:08:
df:b9:c5:a8:0a:fa:67:14:2b:43:47:d5:fb:a9:1e:9c:3d:a1:
a6:c6:a2:07:aa:86:87:81:d2:73:a5:cd:62:7b:bd:59:cb:09:
e2:a3:98:85:6f:52:09:46:62:d3:71:94:b2:a5:ca:8f:08:df:
ef:dd:e5:10:ab:0e:d3:53:a4:73:b7:b9:6f:be:51:9c:b1:eb:
84:bc:d7:3b:54:63:b2:c6:d9:4e:d0:0d:02:64:dd:32:38:11:
3f:80:fe:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org