Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bdOOoSbltUSo3tYhinEFrp6-gtU.roa
File: bdOOoSbltUSo3tYhinEFrp6-gtU.roa (raw, json)
Hash identifier: 5lX6OVQzxlCSoTwvij4itu3bhUThcfm+mt+i5nEnNpM=
Subject key identifier: 6D:D3:8E:A1:26:E5:B5:44:A8:DE:D6:21:8A:71:05:AE:9E:BE:82:D5
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C9E01AA653AA03FF621217563972D4775
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bdOOoSbltUSo3tYhinEFrp6-gtU.roa
Signing time: Sun 24 Dec 2023 22:45:58 +0000
ROA not before: Sun 24 Dec 2023 22:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.30.241.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.57.41.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Dec 2023 09:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:9e:01:aa:65:3a:a0:3f:f6:21:21:75:63:97:2d:47:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 24 22:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6dd38ea126e5b544a8ded6218a7105ae9ebe82d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:39:5b:9f:69:b4:fe:02:fd:0e:2d:75:4c:ff:
0e:03:01:12:b5:19:73:2e:fb:55:7b:c2:c9:a5:22:
aa:57:72:f0:cd:fc:16:63:34:0a:00:82:f1:41:38:
b3:aa:bb:1c:3a:76:dc:71:84:f2:f5:ef:f5:2f:6e:
88:64:14:08:94:b4:b7:c0:00:a9:08:bc:83:d8:dc:
11:77:90:40:8f:48:62:ca:03:a1:29:71:d7:42:9e:
70:b8:24:e7:b7:8e:db:38:4c:52:6d:86:bd:ed:63:
ad:70:64:96:d9:9c:3d:93:3d:47:aa:56:4c:a7:84:
b1:7f:8a:e3:c5:c3:cc:9e:a7:c5:b3:c2:9a:81:29:
7b:a3:4e:98:4f:1f:b7:18:75:a4:0a:c0:e4:1d:7b:
b3:b9:6a:0f:41:51:ea:3f:1d:dc:7a:12:57:17:13:
86:90:40:12:7c:38:88:ec:fc:d7:d1:fc:ce:cb:74:
11:fe:4b:8c:78:1d:8c:2e:e0:18:7a:c9:75:16:40:
9b:4f:85:29:55:2f:fe:05:e0:1f:fa:41:de:f7:24:
3c:76:66:d2:7d:97:2b:44:5a:08:eb:42:d7:02:5f:
1c:78:9f:09:02:12:b8:b9:2b:83:02:68:08:9e:08:
05:ba:a3:3a:dc:e2:c3:72:71:3d:67:d9:f8:7a:b6:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D3:8E:A1:26:E5:B5:44:A8:DE:D6:21:8A:71:05:AE:9E:BE:82:D5
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bdOOoSbltUSo3tYhinEFrp6-gtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.115.0/24
45.88.139.0/24
45.94.170.0/23
77.83.39.0/24
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
193.57.41.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
11:14:fa:6f:c2:2e:9b:3a:e8:24:91:05:86:72:c0:72:fa:ca:
03:c1:56:43:43:30:52:ca:8f:ed:5b:f3:a0:40:c4:c5:7a:fa:
22:14:c7:e5:82:33:4a:b7:f5:fc:4e:a4:70:48:44:48:81:c0:
f3:ca:b1:b7:7d:40:44:3c:d1:2d:aa:51:f4:82:e7:f5:e1:ba:
bd:a1:25:56:67:ca:1e:73:71:56:91:29:5e:22:5b:a5:bb:05:
4f:9e:47:38:bf:35:e5:a8:56:f0:e0:88:33:ae:da:df:6b:4f:
85:40:1f:a4:9e:82:47:ff:01:6b:5b:dd:03:dd:2e:0f:f9:d6:
2a:4b:4d:3b:c1:7f:26:3b:87:b7:a8:25:d4:79:cf:8e:db:8a:
09:63:e3:22:28:85:98:54:a0:5c:d3:9b:51:83:d9:f7:4f:8c:
bf:d3:e7:3b:75:3e:1c:77:63:ef:da:43:2d:88:01:c9:d0:5a:
9e:d3:e0:f7:bc:2a:f1:88:bc:e9:6f:24:40:2b:21:73:21:04:
65:77:92:f9:08:f0:45:a0:ae:5f:02:b0:22:70:6a:36:a0:9e:
b6:6a:e0:ac:bf:e8:60:fe:0e:62:96:c2:0a:7a:90:e0:e0:30:
ef:65:bd:db:31:c1:32:89:88:57:b9:5f:1a:f0:9b:0c:dd:65:
4d:3e:54:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org