Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/OPy8LvNaCXhWhcD1pzDgqU24SNU.roa
File: OPy8LvNaCXhWhcD1pzDgqU24SNU.roa (raw, json)
Hash identifier: 7P+u0hCr39Vtln0rybLjOu+U0VVeeIyeSrQofrVGDSI=
Subject key identifier: 38:FC:BC:2E:F3:5A:09:78:56:85:C0:F5:A7:30:E0:A9:4D:B8:48:D5
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0188B4A8D503D8AD354A95A29385242249AF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/OPy8LvNaCXhWhcD1pzDgqU24SNU.roa
Signing time: Tue 13 Jun 2023 12:09:03 +0000
ROA not before: Tue 13 Jun 2023 12:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 12:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b4:a8:d5:03:d8:ad:35:4a:95:a2:93:85:24:22:49:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 13 12:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38fcbc2ef35a09785685c0f5a730e0a94db848d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a3:bd:59:b0:fc:eb:e2:38:aa:86:ff:1d:9c:
66:c1:3b:e6:03:81:c0:15:a5:b5:fc:37:af:f4:76:
77:f5:6d:09:7d:27:37:c4:c3:45:7f:b0:3b:7b:2b:
01:9a:e7:2e:e9:89:0e:6a:60:fc:95:98:cc:61:ac:
03:83:6c:08:38:59:c6:f6:91:d9:5f:51:4d:5d:c5:
cc:67:9f:64:c8:bd:a5:64:ab:d5:9e:ce:eb:9c:06:
5e:52:5d:08:13:ad:d0:75:86:80:1f:27:25:aa:2c:
46:7f:1f:9a:ee:9b:a3:78:eb:cc:c4:a6:1e:3a:6e:
08:25:89:4a:7a:49:20:19:2e:e4:30:7a:09:b5:b0:
46:20:da:7a:d8:96:79:a0:1a:80:06:81:32:d3:a6:
2c:e0:23:d9:4d:7f:9e:41:22:b6:2d:75:36:32:5f:
2d:e4:77:9f:50:aa:be:d6:42:b5:68:82:2f:c7:0a:
1e:50:37:c1:ba:18:3c:31:4f:2b:c5:12:30:2d:2e:
74:13:01:35:3d:c8:7c:76:39:16:23:94:9d:dd:40:
64:d0:59:a0:22:9e:15:b9:9b:b5:a6:61:a5:e2:f7:
72:1e:5d:31:ad:73:68:e5:b1:a0:18:fc:9c:10:09:
9a:6d:74:fa:f9:ee:c1:0a:57:80:65:ef:d5:87:2d:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FC:BC:2E:F3:5A:09:78:56:85:C0:F5:A7:30:E0:A9:4D:B8:48:D5
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/OPy8LvNaCXhWhcD1pzDgqU24SNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.138.183.0/24
77.83.38.0/24
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:ff:97:f3:f3:45:72:e0:9c:75:ae:e1:10:04:da:1a:07:58:
14:f1:d0:30:55:56:17:58:3c:89:06:c4:b1:95:cc:07:db:a6:
47:c5:08:b5:47:19:c0:dc:14:dd:57:9e:5e:7b:61:4d:21:6c:
fb:af:35:34:21:41:23:08:4b:a2:bc:37:a4:93:f0:72:d2:d4:
79:69:b8:53:db:34:05:db:27:a7:f4:53:7e:3c:84:36:de:e1:
35:dc:a2:d2:d9:06:3a:24:23:ef:5a:0b:03:86:a0:bc:73:b7:
8e:7b:c0:39:3b:36:ee:ac:10:28:c5:2d:fe:62:00:02:c9:50:
4d:1e:24:4d:04:ae:74:6b:68:41:77:2b:72:23:8a:e6:5b:65:
d6:5a:c4:48:56:d4:2f:2f:0d:60:e9:99:9d:ca:2c:f4:98:e1:
01:1f:44:3b:f4:1b:0c:e5:e2:40:08:f6:72:2e:76:59:2f:d9:
1c:1b:1c:fc:b7:e7:47:d7:7e:f8:42:35:65:ff:59:ab:2d:b6:
df:c2:e1:9a:9c:9d:c3:3f:21:56:a0:5d:5b:d7:57:6c:a4:80:
4c:2f:d0:b9:0d:ac:e6:3d:93:04:f1:0a:45:35:98:3f:97:96:
87:33:b2:88:de:c0:1c:0a:7e:f7:35:b1:a1:21:56:dd:b2:b5:
a1:e0:cf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org