Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/dhFlUjmSAgUL8TYLIqcYlP7NLYM.roa
File: dhFlUjmSAgUL8TYLIqcYlP7NLYM.roa (raw, json)
Hash identifier: B1mtCBDiXNOFWwuC38XsnnDKCWGJVp8WML55C/uWVZw=
Subject key identifier: 76:11:65:52:39:92:02:05:0B:F1:36:0B:22:A7:18:94:FE:CD:2D:83
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B94F1CB37E32C1D2B1EA16DBD875C6FC4
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/dhFlUjmSAgUL8TYLIqcYlP7NLYM.roa
Signing time: Fri 03 Nov 2023 11:29:15 +0000
ROA not before: Fri 03 Nov 2023 11:29:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 45.9.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:f1:cb:37:e3:2c:1d:2b:1e:a1:6d:bd:87:5c:6f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 3 11:29:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76116552399202050bf1360b22a71894fecd2d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:37:da:bc:88:36:d1:bc:e7:8a:13:59:bf:
a4:85:73:b4:ef:96:85:41:1f:b8:01:ce:c9:60:c9:
61:25:55:44:6f:c1:52:88:cd:9c:1e:56:ce:62:45:
d7:2f:1c:56:12:32:12:5d:ef:f9:f0:23:29:f2:e6:
57:33:b2:ed:2c:aa:55:16:d2:f4:04:d3:a2:9d:84:
e1:73:44:78:c9:a9:78:f4:7e:e3:fd:3f:6f:72:50:
35:a0:e7:7c:d4:ea:cf:35:f0:a6:8c:4d:7f:7e:10:
ee:b2:c0:bf:1f:2a:90:79:b2:e7:04:c5:65:8a:fb:
94:7b:2c:b3:b7:de:34:6b:bd:d3:60:d1:08:5f:fc:
98:e5:f8:64:ce:67:d4:70:ec:5d:f5:2b:f1:4e:cf:
3e:5d:3b:01:10:5c:c4:17:5d:7b:fb:3f:6e:62:d9:
97:a7:de:b8:99:71:ff:b1:a9:1d:40:dd:d8:53:c4:
5a:bd:e6:ed:8e:d5:a8:31:5c:dd:e5:07:8b:17:1a:
0c:30:6f:f6:9c:2c:26:dd:aa:3b:f0:fa:61:c4:5f:
2e:e2:d7:cc:09:ad:2f:a7:13:1b:57:79:85:84:02:
22:63:4e:16:83:cc:a3:58:3a:99:48:76:54:35:98:
d7:d8:72:2e:b9:de:9a:69:36:01:e2:88:a0:1c:da:
da:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:11:65:52:39:92:02:05:0B:F1:36:0B:22:A7:18:94:FE:CD:2D:83
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/dhFlUjmSAgUL8TYLIqcYlP7NLYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:21:cf:ca:b6:5c:20:3c:61:57:b8:25:57:1d:05:dd:ee:5f:
27:17:81:8f:a9:86:ca:fc:5b:c6:58:59:0f:f3:e3:ad:e1:2b:
3b:8c:30:86:ee:a2:a4:9c:4c:ac:7b:54:44:5b:3e:98:75:71:
83:65:47:58:d9:35:da:07:2e:d3:02:41:86:ba:da:c6:cc:a0:
dd:5b:e6:de:0e:71:67:1e:e2:4e:5e:80:d9:2d:03:2f:c3:69:
be:cc:69:1e:01:ae:55:12:eb:e1:f2:39:04:72:7c:b3:dd:33:
71:9b:a1:af:24:f8:c4:de:54:8b:6d:b1:bc:6e:8e:4d:bd:82:
6f:27:c2:22:16:64:e6:35:e6:6b:49:cf:8d:60:59:21:5c:45:
4a:1a:08:f1:56:7c:73:58:ad:f9:66:01:44:b6:40:2d:26:bf:
7b:f1:c1:5f:75:78:a5:fa:c1:48:c3:91:c7:34:b3:6a:89:16:
4b:e8:35:d0:65:6b:dc:80:f7:ad:2b:d4:8e:fc:67:af:8c:72:
18:3c:76:c8:a8:f2:08:5b:30:d6:2f:7f:11:95:e5:d4:8e:e5:
0b:7e:4b:c0:16:00:24:61:38:a9:bc:a2:c5:3f:cb:5b:07:4e:
32:4e:17:56:d0:66:61:c1:39:e9:21:e4:4d:50:22:87:fa:38:
76:f3:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org