Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Tpc1XOWEZdk10NhaEHGUcBjoZa0.roa
File: Tpc1XOWEZdk10NhaEHGUcBjoZa0.roa (raw, json)
Hash identifier: 54nJzmfKsdl6jdmmymqO0A3EzxweBnKwxgmqQna9Tyw=
Subject key identifier: 4E:97:35:5C:E5:84:65:D9:35:D0:D8:5A:10:71:94:70:18:E8:65:AD
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0189BFCCD03251146CB0F6C6483677300DAD
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Tpc1XOWEZdk10NhaEHGUcBjoZa0.roa
Signing time: Fri 04 Aug 2023 09:06:58 +0000
ROA not before: Fri 04 Aug 2023 09:06:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Aug 2023 18:50:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:cc:d0:32:51:14:6c:b0:f6:c6:48:36:77:30:0d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 4 09:06:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e97355ce58465d935d0d85a1071947018e865ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:30:e4:b0:bb:e7:ff:36:2e:ac:93:08:76:
78:40:20:aa:81:99:54:e2:03:2a:c0:c5:c7:67:95:
8f:53:a8:ba:e0:5b:a1:b8:3b:6e:e4:4a:a5:b7:22:
d2:d7:b3:94:f1:f3:7c:68:8f:58:c9:74:a1:ef:91:
82:d0:39:14:f5:f3:09:ed:df:97:82:df:88:e1:6c:
ba:b8:2f:62:ed:18:cd:1b:7f:b5:a6:84:58:f2:e6:
c4:0c:05:35:01:eb:d1:01:d2:17:2a:00:93:2a:63:
16:d5:38:74:fb:40:b9:bb:ee:7c:98:9c:d8:3c:1e:
7e:50:f6:2d:a6:e5:aa:66:7c:f3:dd:c9:71:36:ff:
7f:3c:4b:0b:d5:78:85:a8:59:41:6b:16:b7:3c:4f:
f0:69:75:a8:41:34:f3:e1:e2:60:75:7c:c1:ca:02:
a7:c6:03:d5:00:a7:53:ac:9b:86:ac:75:b8:45:17:
ef:ed:fa:8b:60:14:fe:4b:09:23:fc:4b:74:9e:f7:
03:8c:1c:eb:86:21:2a:e8:ea:63:96:e7:c1:7b:68:
b2:6f:3a:8a:71:f7:dd:92:7f:b5:05:0c:14:08:f4:
01:cc:16:d7:12:e0:06:2b:9f:24:d6:41:95:c0:19:
f0:38:c5:23:fd:83:dc:55:bd:f4:7d:c3:62:4d:71:
b2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:97:35:5C:E5:84:65:D9:35:D0:D8:5A:10:71:94:70:18:E8:65:AD
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Tpc1XOWEZdk10NhaEHGUcBjoZa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.138.183.0/24
45.144.213.0/24
77.83.39.0/24
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:fe:09:54:55:a1:0d:fd:e7:59:8d:3d:7e:47:fa:72:dc:3c:
cd:86:cd:7d:f3:1f:04:1a:87:86:4d:66:5a:06:f3:00:85:44:
b6:f6:26:03:38:8e:94:b1:a4:02:75:2f:0d:5b:cb:fa:cf:28:
91:bd:11:b9:df:fe:03:f6:a9:de:56:1f:ea:45:89:dd:69:17:
43:32:71:bd:28:fb:25:51:28:bc:c2:b6:35:aa:7a:7d:b7:e1:
88:cb:cd:08:b1:c8:57:c3:d6:11:63:ef:62:cc:1a:15:d5:e3:
1f:e4:9b:bc:e2:73:f0:33:fd:49:17:e3:39:81:d3:e3:4a:7c:
a7:cf:59:bf:37:c4:77:d8:7e:31:5e:5a:48:c2:18:1f:d5:d0:
b8:dc:49:87:fa:58:5a:2d:93:64:fe:9b:a0:56:76:1b:78:77:
bc:b9:f9:4a:96:6a:81:2e:66:a5:f4:76:7a:3e:e5:18:dc:74:
a7:b5:a2:f9:d6:22:ec:83:a9:1e:8e:64:5c:1e:8c:b4:db:c1:
3c:62:8d:84:66:21:22:48:e6:2f:23:a1:be:9e:c7:a8:ac:32:
41:99:0a:76:1d:cf:56:38:27:6c:af:09:d3:92:d3:32:64:a0:
fc:07:88:6b:15:17:9e:92:21:dc:a6:f6:a3:90:7a:c7:98:0a:
0f:76:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org