Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/a3VXvDInK6Tsc6HcrFjWJS1-f5E.roa
File: a3VXvDInK6Tsc6HcrFjWJS1-f5E.roa (raw, json)
Hash identifier: N7KCNNYZz925VUxsVlSg2+7mvle+FDz6Om23CoYTf7s=
Subject key identifier: 6B:75:57:BC:32:27:2B:A4:EC:73:A1:DC:AC:58:D6:25:2D:7E:7F:91
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B1546FE193598138C00C746CBD7A5813F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/a3VXvDInK6Tsc6HcrFjWJS1-f5E.roa
Signing time: Mon 09 Oct 2023 16:30:55 +0000
ROA not before: Mon 09 Oct 2023 16:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 19:55:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:15:46:fe:19:35:98:13:8c:00:c7:46:cb:d7:a5:81:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 9 16:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b7557bc32272ba4ec73a1dcac58d6252d7e7f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:59:4c:51:f5:41:61:2b:20:49:22:43:55:
c0:fa:84:ff:03:bd:f6:0f:28:69:c9:72:48:10:15:
cb:af:88:5b:db:61:d2:40:5d:b0:63:48:93:6d:99:
f2:ca:69:eb:b3:b9:93:12:a1:1e:0c:7a:da:e6:d5:
27:1d:22:47:12:48:5e:60:66:1e:0b:22:7a:44:2b:
0d:56:3d:93:62:0f:2b:fc:32:c0:94:f6:82:bb:e4:
13:91:4c:9c:31:df:f2:81:b9:0a:cb:94:14:b7:61:
22:b8:08:91:d3:da:de:fd:c9:5b:a3:6c:e6:6a:ee:
97:9c:dc:bc:00:d3:b3:21:2b:ae:f4:92:8d:10:68:
72:67:68:98:bd:83:fe:b8:1e:8c:93:7b:cb:99:59:
2e:6a:79:4b:34:1e:7d:d2:2a:c5:b0:30:62:3c:4a:
aa:6a:46:91:1f:7c:2c:46:80:44:45:e9:83:48:06:
d4:52:71:7c:74:df:4b:c8:79:e1:25:66:f0:36:38:
47:15:1c:3e:04:be:d2:05:d4:e5:b9:0f:fa:ce:db:
f1:b6:3c:21:98:5e:c5:73:3e:d6:90:fe:99:a8:c2:
20:33:1f:7d:d8:71:7a:ff:4e:c0:7b:b9:c3:d1:6f:
5d:3c:c9:1b:f9:23:b0:2b:cf:3b:31:fa:e0:c1:8e:
a7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:75:57:BC:32:27:2B:A4:EC:73:A1:DC:AC:58:D6:25:2D:7E:7F:91
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/a3VXvDInK6Tsc6HcrFjWJS1-f5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0-2.56.110.255
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.94.171.0/24
45.138.183.0/24
45.144.213.0/24
77.83.39.0/24
85.209.120.0/23
195.62.24.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:a5:65:d9:c6:31:76:96:7c:32:69:76:4c:a5:de:9c:20:95:
78:43:58:3c:dc:06:29:d8:6a:0c:4b:22:0d:e2:7a:d8:29:bd:
91:da:c5:81:0b:b8:8a:d0:c1:5b:c8:0d:13:7b:04:66:3c:6b:
d4:d0:43:6b:57:7c:9a:44:fb:fc:3b:cf:8c:81:25:11:72:af:
90:08:c4:9e:65:d0:24:60:f2:cf:91:2a:b0:7b:e9:fa:58:aa:
3f:7a:20:11:98:e0:8e:48:f0:b2:4e:d3:99:cd:8a:8d:c2:d4:
72:2f:a9:19:a2:1c:1d:1e:d2:23:86:12:58:99:8e:fb:c2:aa:
f4:9d:0c:90:15:cd:4f:48:f7:79:71:73:6b:14:05:1a:97:b6:
58:c4:51:a8:b2:b1:fc:d0:89:93:8f:b8:53:d6:09:01:81:4d:
26:28:10:cf:53:16:52:81:c1:2c:3a:b4:11:d1:59:fc:36:01:
e0:6e:d2:a6:e4:50:95:7a:6f:1e:18:4e:bd:d0:46:33:3a:32:
5a:e7:47:dd:95:6d:52:b6:a2:bc:c7:56:73:d1:09:00:9c:88:
a3:75:ca:8f:5a:37:74:05:7b:02:dc:c8:22:76:a2:5d:47:12:
f9:b6:aa:bf:83:78:e0:2a:16:19:ba:a3:cc:55:89:55:17:15:
84:bb:21:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org