Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/pPouwIS2WRNZOIYugGKXxCCIytM.roa
File: pPouwIS2WRNZOIYugGKXxCCIytM.roa (raw, json)
Hash identifier: SZ901F0MPB5rfT7+HCqonaRGvceoUNIJhn3I/bJgjeU=
Subject key identifier: A4:FA:2E:C0:84:B6:59:13:59:38:86:2E:80:62:97:C4:20:88:CA:D3
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0189FD3F118FDDAF6A951F068C3769153D2A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/pPouwIS2WRNZOIYugGKXxCCIytM.roa
Signing time: Wed 16 Aug 2023 07:28:36 +0000
ROA not before: Wed 16 Aug 2023 07:28:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Aug 2023 07:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fd:3f:11:8f:dd:af:6a:95:1f:06:8c:37:69:15:3d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 16 07:28:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4fa2ec084b659135938862e806297c42088cad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:14:e5:58:7b:a5:e2:ce:d6:7d:19:53:ff:
f4:fe:a0:03:cb:b2:26:57:5c:8b:c4:e0:b0:b0:f7:
e4:00:d8:bf:0a:2b:d1:9b:58:5a:f8:2b:c7:23:02:
67:f3:6d:1c:a6:97:69:ff:dd:7c:d0:04:e5:61:59:
a3:7b:a7:3b:36:dc:d6:64:0e:3f:10:40:60:c4:f5:
9b:4c:74:96:9d:48:2e:77:e0:19:90:41:0a:fa:ae:
f4:17:32:cc:d5:70:21:46:f5:a3:c8:6d:e7:7d:48:
7b:d7:87:c5:1a:3d:c6:54:26:40:35:01:f1:7d:50:
40:bd:a7:6d:49:cd:88:d9:84:63:00:a0:df:4d:0c:
75:3f:d8:88:07:0c:0e:7a:33:49:aa:c9:5b:92:31:
a4:90:34:da:64:0f:39:c5:3b:a1:f8:c4:2d:ac:b8:
af:21:f6:2a:27:d4:34:3c:9c:bd:a0:e6:ad:1a:92:
a5:16:e5:18:75:4b:9d:ed:63:76:66:6c:30:51:40:
2d:21:f2:a8:c7:12:36:26:ff:62:7c:29:58:88:71:
60:5c:db:f4:40:03:e1:3b:4e:36:a8:6f:66:20:5a:
b3:bd:56:87:cf:6c:58:a4:28:b1:a7:71:3a:35:fa:
a7:aa:d4:a5:a9:36:8c:b8:ad:77:34:84:76:e0:24:
1e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FA:2E:C0:84:B6:59:13:59:38:86:2E:80:62:97:C4:20:88:CA:D3
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/pPouwIS2WRNZOIYugGKXxCCIytM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.138.183.0/24
77.83.39.0/24
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
60:00:5f:50:35:d9:be:de:fe:35:7d:52:86:f1:3a:92:59:9d:
8d:0d:56:7b:8d:0f:36:c0:5d:47:a2:d9:5d:35:e4:2f:56:4c:
dc:cb:da:85:3f:59:09:9f:eb:86:a5:cc:ed:79:0f:8e:8a:19:
9a:0c:d6:44:07:13:90:bf:2c:b4:93:5b:68:6f:e2:3f:c3:59:
dd:12:87:a2:27:54:5b:92:06:54:29:40:41:5f:43:6e:2d:91:
ad:e4:34:04:db:c9:a3:58:45:42:02:1b:6f:15:53:98:53:cd:
63:12:45:5a:ad:36:94:81:8e:1a:57:a4:e1:be:c4:36:78:6c:
64:4a:06:6c:d2:e7:55:ff:6e:55:25:64:4d:a4:9b:51:a2:6a:
34:af:7f:8e:be:cf:7d:29:bf:2e:be:18:60:cb:f7:28:5f:12:
5d:43:c0:28:6a:31:5b:e7:aa:5d:fe:b9:5b:8f:27:f5:50:d0:
08:f3:51:60:41:fd:d2:62:aa:6e:0e:a1:1d:cf:8a:1b:2a:57:
30:1f:73:58:03:b4:2c:df:b6:31:e6:5a:14:44:88:33:3e:b4:
32:17:f9:93:08:70:5b:2f:97:9d:5c:e4:a7:a3:36:b5:98:6e:
cd:46:44:28:f2:76:16:37:1d:23:25:78:02:ef:ff:47:ec:1b:
8b:85:fa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org