Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jsgxXsqTvvE76qfh-8-nWp9-WaE.roa
File: jsgxXsqTvvE76qfh-8-nWp9-WaE.roa (raw, json)
Hash identifier: n9c0S0rm/giFq1pHBYRiL6xpu1dX8BuqM1KCr+moGoA=
Subject key identifier: 8E:C8:31:5E:CA:93:BE:F1:3B:EA:A7:E1:FB:CF:A7:5A:9F:7E:59:A1
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A180F89C4EAC82CBD5CA30AA59D20C6C0
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jsgxXsqTvvE76qfh-8-nWp9-WaE.roa
Signing time: Mon 21 Aug 2023 12:26:26 +0000
ROA not before: Mon 21 Aug 2023 12:26:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 13:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:0f:89:c4:ea:c8:2c:bd:5c:a3:0a:a5:9d:20:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 21 12:26:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ec8315eca93bef13beaa7e1fbcfa75a9f7e59a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cf:cd:62:a8:3d:04:ab:01:ec:9f:5e:6c:30:
2b:e4:9b:c7:b8:17:12:0d:e8:0d:86:52:07:ca:8c:
41:c1:44:4b:bf:24:b6:aa:f5:21:54:fb:57:00:d8:
df:fe:ef:6b:cc:cf:c0:13:e3:e7:7d:2c:d5:90:68:
72:e3:dd:96:03:34:70:f1:20:ec:d7:fe:bf:b6:0d:
b4:36:92:84:4e:a5:db:f3:9b:aa:ea:8d:82:8b:da:
7d:08:d9:20:c0:2c:fc:f4:63:a6:31:e1:9d:0b:e2:
c1:7d:50:b9:91:3b:51:ca:27:e3:bc:a8:4c:3e:c9:
d8:f6:dc:4c:b4:48:e6:88:4c:33:d6:b8:b0:3a:fc:
ea:55:7a:2b:67:f3:fd:79:bd:96:0b:b8:25:5f:69:
66:70:70:ab:25:d2:ce:29:98:89:5b:0a:80:93:3e:
25:b2:8c:86:6f:c0:fc:45:85:3e:d6:b2:28:18:28:
b9:7d:2d:4e:7a:ee:d6:ac:2e:4e:e6:f2:31:09:5f:
08:9d:4a:86:52:56:ba:cc:fd:33:71:39:36:6b:d4:
04:45:61:d4:f7:59:bf:aa:b6:31:08:62:92:ab:f3:
65:13:5a:40:4c:ee:b3:17:f1:08:f2:c9:ce:89:f4:
c9:af:24:96:e5:f9:57:06:4b:c0:6e:96:0d:8d:9c:
96:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C8:31:5E:CA:93:BE:F1:3B:EA:A7:E1:FB:CF:A7:5A:9F:7E:59:A1
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jsgxXsqTvvE76qfh-8-nWp9-WaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.88.137.0/24
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:bf:9d:11:7d:69:90:99:df:6b:9b:7f:c4:8e:45:87:43:e9:
21:c7:77:53:9a:86:79:42:b2:d5:d4:fe:13:b7:4f:62:79:5e:
03:7f:32:21:2e:ae:8c:4f:87:59:9c:e0:33:6b:c7:03:04:ab:
8a:69:a9:cc:1e:0c:26:5a:e5:76:2f:99:cb:a5:e0:7d:88:4a:
50:da:aa:f6:67:60:86:90:5e:b7:d3:6d:0e:d5:bd:4d:0e:b4:
b4:9e:75:e1:c8:a4:63:65:4c:d2:06:9b:0d:a2:aa:77:55:af:
1f:61:6d:b4:24:78:bc:81:c1:8f:74:d2:83:86:4d:24:5a:3e:
6b:2e:2f:dc:fd:6c:70:5a:b1:c5:3a:d7:b7:e0:99:71:76:52:
45:53:9b:32:d3:ea:37:b0:17:42:73:f9:a3:36:d0:fb:88:62:
b7:cb:e0:d8:37:12:8d:79:e7:0f:04:ab:b7:7e:9c:72:6d:98:
4a:7e:6c:87:f8:0a:f7:0f:de:e3:ce:81:38:67:05:73:ee:bd:
c6:08:7c:db:23:a3:b3:4e:c5:eb:f3:63:dd:3f:ce:ab:3d:0b:
32:7d:01:e1:9e:94:aa:35:bb:1d:f4:9c:7e:b0:22:70:e8:b8:
0b:a6:bb:a0:03:62:90:0d:ca:5a:e8:f0:85:a6:77:c1:60:a5:
fa:f2:75:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org