Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jPbcQCNRR6TAAmATPeGOMfExqfg.roa
File: jPbcQCNRR6TAAmATPeGOMfExqfg.roa (raw, json)
Hash identifier: 86Hmha34DCbspZxjGtUtNlyUxVXTjZpxhtKzpIViz3Y=
Subject key identifier: 8C:F6:DC:40:23:51:47:A4:C0:02:60:13:3D:E1:8E:31:F1:31:A9:F8
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018591C8A063C8CF67C3992B51749383595D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jPbcQCNRR6TAAmATPeGOMfExqfg.roa
Signing time: Sun 08 Jan 2023 14:28:42 +0000
ROA not before: Sun 08 Jan 2023 14:28:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 77.83.39.0/24 maxlen: 24
45.138.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 10:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:91:c8:a0:63:c8:cf:67:c3:99:2b:51:74:93:83:59:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 8 14:28:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cf6dc40235147a4c00260133de18e31f131a9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:40:9c:e1:09:2e:39:8c:ca:90:d8:b6:ad:2f:
86:e5:67:db:fa:5c:2a:a5:dd:7b:a9:8a:01:b1:34:
7b:a6:fc:cd:f2:cc:11:5c:8a:ad:dd:b1:90:bb:cf:
45:2b:64:fe:03:23:9c:13:80:83:1f:8b:91:4e:38:
be:6f:50:8a:be:da:07:79:a1:4b:64:32:b3:47:e1:
d4:64:79:32:5d:1b:df:3e:37:9c:37:4a:34:fe:01:
42:41:2b:5f:7a:30:7e:f4:03:00:f5:71:04:52:4d:
11:00:51:bc:d2:5e:d6:44:7a:c1:1c:86:0d:f0:20:
85:61:18:ef:55:75:3b:a5:f0:b9:5f:1d:b3:8e:4f:
4d:32:d3:88:1a:66:f8:1f:3d:6e:86:bf:49:7f:0b:
5f:c9:3f:73:b1:e3:a4:12:3f:fd:67:9b:6c:ef:90:
67:30:56:b2:bc:1c:fc:26:af:2c:cf:4b:93:8a:a4:
0e:0b:bf:d8:27:33:08:ca:f1:4a:ca:4b:9d:29:9e:
fe:fc:d6:1e:00:43:1b:b5:e3:cf:28:0e:2d:14:33:
76:8b:8e:1d:3c:1a:c5:11:ee:95:20:16:1e:4e:5e:
bd:76:d5:b1:04:15:49:37:8c:b4:f5:1b:3c:9f:78:
f7:e1:88:e6:6a:77:6f:d6:9a:a4:fe:86:ff:25:9c:
a2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F6:DC:40:23:51:47:A4:C0:02:60:13:3D:E1:8E:31:F1:31:A9:F8
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jPbcQCNRR6TAAmATPeGOMfExqfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.180.0/24
77.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
84:95:56:f3:b4:b1:fd:1a:df:a5:4e:d1:48:cb:ae:50:d7:31:
af:2f:55:a0:9c:0d:13:bd:a9:60:b5:bb:0d:d0:d8:5f:ab:6e:
d6:bc:d6:b5:94:39:30:a3:4f:12:fb:b0:fa:e6:e2:8b:4d:77:
91:3f:0e:d3:a0:ba:a1:b4:56:a8:49:be:cc:79:7e:4c:6a:58:
f4:2b:7e:a8:f5:36:99:37:65:ce:56:40:06:7b:5e:12:2e:cc:
63:ab:1c:b6:08:92:41:07:b9:1a:e0:31:75:9e:25:5c:e2:0f:
4a:81:9f:9d:a8:d5:64:57:4d:38:90:7c:86:b7:7f:dd:f8:57:
a5:15:77:37:e8:b3:3d:13:cf:32:c1:a7:f8:b3:20:b4:39:2b:
fa:06:f6:96:c8:76:b7:a6:86:05:70:62:db:4a:74:67:ab:71:
7a:7f:98:88:bc:a5:55:b4:ec:55:df:70:fa:6c:5e:d1:de:e0:
ed:f0:d9:ad:5f:29:24:ae:21:be:64:4c:e0:6a:80:b3:61:a2:
c7:1e:96:47:9f:c1:b0:35:e5:75:02:d0:3f:f9:78:d6:e9:ac:
e7:2e:9c:90:f2:e5:8a:15:67:ac:42:8f:d4:7a:94:4a:a7:a5:
d8:fe:d8:05:9d:d7:15:13:75:9e:b6:f9:63:59:cd:a9:c5:0b:
38:1b:46:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org