Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Um7F23NaLOxt3h0ThMYtXJKbgGI.roa
File: Um7F23NaLOxt3h0ThMYtXJKbgGI.roa (raw, json)
Hash identifier: 0e8th0N4ymTrJWa+CuG1D4+e/MNAoDiARXGCvp34T6c=
Subject key identifier: 52:6E:C5:DB:73:5A:2C:EC:6D:DE:1D:13:84:C6:2D:5C:92:9B:80:62
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01877B7F6F94B51F686FAEA1173C69DDA7B0
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Um7F23NaLOxt3h0ThMYtXJKbgGI.roa
Signing time: Thu 13 Apr 2023 16:42:41 +0000
ROA not before: Thu 13 Apr 2023 16:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Apr 2023 10:50:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:7f:6f:94:b5:1f:68:6f:ae:a1:17:3c:69:dd:a7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 13 16:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=526ec5db735a2cec6dde1d1384c62d5c929b8062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:44:47:bd:43:e6:5c:26:bd:11:d5:24:60:
5d:6e:48:a7:96:e0:bd:41:41:7c:78:5a:bd:2a:9c:
c2:70:91:9d:a0:a6:43:ec:0d:84:97:5b:ed:b7:75:
0a:77:62:ac:60:3e:a4:25:9c:2e:d0:b0:77:33:b6:
35:41:34:7c:c1:82:0f:7b:fd:6b:70:59:4a:8a:7e:
0d:d5:6d:21:89:6f:5a:c8:a1:52:d2:c8:d7:f8:28:
06:be:46:79:e7:54:78:b7:cc:87:e7:b2:b9:a6:45:
c8:ad:ee:83:d4:66:b3:9f:3b:a6:be:8d:b7:3d:f5:
7e:ee:b0:ef:46:ac:0a:11:77:23:1e:56:0d:96:26:
01:56:e3:ac:2d:0e:c3:a3:98:a0:a9:c7:be:42:a1:
70:d9:bd:ed:d1:4c:13:50:94:ff:18:be:18:08:be:
fd:fd:c5:81:1c:09:19:2f:7e:21:85:bc:f8:0e:0f:
dd:a2:b4:ee:98:56:13:e5:36:09:fa:68:b1:13:a1:
1e:34:3a:a9:5e:9f:b9:4b:8f:d5:f6:f9:1e:b4:8e:
f5:a4:ad:d4:26:0c:9a:5a:99:be:96:53:3b:64:f0:
91:f3:ff:42:26:f6:ae:00:1c:66:b3:b5:5b:5a:05:
e5:95:43:50:96:55:d0:d6:b7:2b:3a:45:77:92:d0:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6E:C5:DB:73:5A:2C:EC:6D:DE:1D:13:84:C6:2D:5C:92:9B:80:62
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Um7F23NaLOxt3h0ThMYtXJKbgGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.138.183.0/24
77.83.38.0/23
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:8c:1b:23:25:19:b6:ac:3f:60:4a:2e:9f:08:4e:cb:9c:66:
e8:8a:4b:b3:2d:88:9a:bc:f6:8f:89:ba:f8:72:de:5f:99:69:
29:9a:42:90:c4:56:0e:ad:c0:82:5d:9e:91:b0:62:33:7c:c1:
41:0f:4e:66:2f:8d:ed:ba:a5:ab:b4:14:1f:16:14:47:15:1d:
7b:80:df:c3:5e:29:6d:25:8b:5c:a5:1e:46:16:c0:0c:c5:50:
93:cd:dd:bc:85:51:e4:02:47:05:37:70:7b:17:d6:4d:13:5c:
8f:ea:cc:12:c9:e0:2c:ee:0c:f2:b3:c7:a3:df:1a:a6:49:d5:
d5:7b:23:15:01:38:f1:8b:bd:45:4a:f3:02:4f:f2:06:5e:86:
85:48:f5:db:a9:27:e4:b4:cb:65:c3:0e:54:c6:2a:75:76:3e:
80:6e:ee:cf:16:2d:62:da:5e:ec:bd:bb:8e:14:25:76:84:0c:
29:89:2b:d6:48:7f:04:c6:f4:1f:e2:fc:a9:c5:a6:e4:7d:11:
70:7a:88:aa:24:33:d2:4c:a1:c7:41:76:27:75:f2:bc:9e:e1:
e3:dd:2c:90:a6:22:c3:48:c6:9c:6b:f3:01:6f:d6:71:59:9b:
cd:ac:c0:b7:0d:bf:12:79:95:36:1c:33:33:85:d6:8a:ed:08:
89:90:59:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org