Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/O_fsEa1tmXdDvokSV2Li29Ppzs0.roa
File: O_fsEa1tmXdDvokSV2Li29Ppzs0.roa (raw, json)
Hash identifier: n/WI33KtTJMT4UCqIHet9jgQwwy2BdSC0CVb6txbroc=
Subject key identifier: 3B:F7:EC:11:AD:6D:99:77:43:BE:89:12:57:62:E2:DB:D3:E9:CE:CD
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018DB3F5B9C0BB5D222ADFF028809F527519
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/O_fsEa1tmXdDvokSV2Li29Ppzs0.roa
Signing time: Fri 16 Feb 2024 22:07:21 +0000
ROA not before: Fri 16 Feb 2024 22:07:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198361
IP address blocks: 2.56.111.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 16:23:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b3:f5:b9:c0:bb:5d:22:2a:df:f0:28:80:9f:52:75:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 16 22:07:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bf7ec11ad6d997743be89125762e2dbd3e9cecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:f5:6f:9a:fb:26:71:1a:fa:14:17:a3:62:
51:a0:9e:20:fd:fc:b7:7c:c9:5e:04:52:10:1a:95:
13:92:c9:e3:03:2a:c5:c4:2d:36:d3:4e:a8:11:81:
fa:97:e8:5c:b5:7e:bd:1a:a7:eb:42:47:fb:43:02:
6e:f2:e2:43:76:ac:21:36:2b:46:0d:1c:95:79:d4:
56:13:59:32:1d:d3:a6:47:af:61:0e:21:85:d6:1d:
65:75:18:fa:fd:e7:d1:cf:82:7a:c6:3b:b2:a7:ea:
92:30:18:2d:89:bb:e7:c1:f3:19:94:72:20:d3:44:
db:1f:b5:b9:7a:c3:30:e9:c7:44:e3:b9:60:df:ad:
e0:0f:5d:0c:1d:a8:0f:2f:f9:2a:03:04:23:25:84:
e6:89:78:15:54:10:0b:11:da:ff:7c:69:be:64:58:
55:9d:01:27:9d:45:cd:d5:e3:8e:52:86:41:ae:3f:
ae:08:84:af:cf:39:da:5c:b6:06:f5:85:33:94:03:
ea:18:f4:c5:82:76:0b:17:80:67:c6:13:6c:db:22:
8a:88:ab:3b:f6:05:48:cf:f9:88:eb:62:21:47:ba:
e4:1a:5a:85:88:2a:a8:5d:09:d8:cc:85:d0:96:21:
c3:5c:1e:7e:af:45:54:ce:0e:c8:49:82:a8:d8:f0:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F7:EC:11:AD:6D:99:77:43:BE:89:12:57:62:E2:DB:D3:E9:CE:CD
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/O_fsEa1tmXdDvokSV2Li29Ppzs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.111.0/24
45.88.138.0/24
45.144.215.0/24
77.83.38.0/24
Signature Algorithm: sha256WithRSAEncryption
99:40:b3:1c:56:a1:4b:f8:d8:2b:a9:fa:e8:f2:d4:78:d3:f6:
0f:ba:96:7c:2a:8c:b5:44:5c:a6:08:c0:bd:f9:da:9b:bd:d1:
b3:67:4e:ae:d1:25:44:3e:1c:88:25:73:65:ae:a9:7b:9a:a0:
87:ad:b5:39:7f:e2:26:61:b0:41:9d:ef:c5:fc:04:f4:f4:b7:
0a:7c:07:91:5b:01:4c:e9:fc:a1:60:00:28:df:bb:d9:d9:7c:
62:ce:12:2c:7b:00:35:e7:07:9e:b8:0c:70:6b:a6:e8:e9:64:
89:de:d3:e4:6f:e8:9e:e9:04:22:15:1e:6a:8c:bf:6b:dd:f2:
bb:78:c0:57:e2:d1:bf:d8:17:3c:a7:f9:83:59:c9:4c:5e:13:
49:53:dc:3d:8f:b0:f1:03:57:ef:99:7f:19:b8:06:47:8e:69:
45:37:52:88:8f:f5:62:e8:49:41:86:63:01:ee:00:e7:a8:98:
30:fc:6a:4f:ce:05:d8:7b:40:08:5d:f6:b3:06:db:e7:76:d9:
e2:94:a0:12:52:b8:a9:2d:ea:03:df:03:7f:ac:46:7c:ae:ea:
f4:09:5a:7d:54:44:3c:30:3d:8d:78:5f:c3:c1:ec:54:4c:fd:
71:99:3a:2e:8c:45:96:19:10:b1:e8:81:35:7c:60:34:a2:18:
99:a4:4b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org