Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vKNGLys-g9-RsEOxTACu5m16WYc.roa
File: vKNGLys-g9-RsEOxTACu5m16WYc.roa (raw, json)
Hash identifier: osHHKt0py3WNwB1U0dpfoUa1+f3kEdPXMQxKh7vEDGE=
Subject key identifier: BC:A3:46:2F:2B:3E:83:DF:91:B0:43:B1:4C:00:AE:E6:6D:7A:59:87
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01888055E38CDDE76F1BE51C6FD9DDE3A9B6
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vKNGLys-g9-RsEOxTACu5m16WYc.roa
Signing time: Sat 03 Jun 2023 08:18:12 +0000
ROA not before: Sat 03 Jun 2023 08:18:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 45.151.2.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 17:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:80:55:e3:8c:dd:e7:6f:1b:e5:1c:6f:d9:dd:e3:a9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 3 08:18:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bca3462f2b3e83df91b043b14c00aee66d7a5987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:1f:4c:e6:bc:84:21:ed:86:24:00:ac:de:
0c:e1:71:96:a8:48:5d:71:3c:30:1e:c9:52:6d:cd:
32:8a:33:7f:ee:e3:ee:9c:26:81:a2:b2:12:9f:50:
4a:5a:96:f7:e5:4c:71:cd:32:8f:44:58:52:72:e7:
ee:b2:e7:c7:39:8a:98:6e:3f:77:b1:ca:47:9d:67:
07:5b:a3:29:3a:8a:47:69:38:ce:3f:65:25:6a:0f:
46:72:55:95:80:3a:30:e2:b7:4d:5c:15:b1:e4:40:
23:bf:03:12:b0:42:ae:28:ce:56:3c:a6:99:d0:eb:
8c:ef:23:47:5a:d4:28:bb:1e:13:c2:2f:b3:ae:3a:
c9:ed:44:0b:fa:45:86:10:74:0e:3c:dc:e1:83:f9:
70:9a:62:de:1c:2e:58:dc:78:bf:69:5a:95:d2:f4:
54:1a:d1:3c:34:5b:31:f5:63:3a:ed:1d:05:c6:df:
b1:c3:0a:fa:6a:c5:b5:93:d2:e0:ae:2b:ff:6a:56:
d8:12:d2:5a:54:64:f7:17:2b:9a:19:4a:8e:4d:1c:
20:9b:12:c5:73:17:e2:52:7a:b2:ab:62:e9:34:ea:
2d:35:5b:8e:bd:80:84:fa:cb:8f:d8:1f:a0:96:8d:
7e:52:7d:a5:78:2f:37:96:a4:04:f8:f1:3b:75:39:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A3:46:2F:2B:3E:83:DF:91:B0:43:B1:4C:00:AE:E6:6D:7A:59:87
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vKNGLys-g9-RsEOxTACu5m16WYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
45.144.214.0/24
45.151.2.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
47:70:1f:70:2a:da:d1:15:0c:45:c9:3b:79:56:a4:d7:42:81:
f8:39:c7:ec:8a:32:21:0d:ff:45:69:4b:54:66:be:9e:de:82:
72:b0:31:f4:aa:12:07:44:79:41:ef:48:7c:2c:21:d7:a4:c9:
51:c8:cf:73:e1:52:8a:60:4e:df:0b:dc:01:56:f8:6c:89:3f:
6e:64:b8:63:a5:83:d3:54:10:04:da:f3:f6:99:c8:07:93:00:
b1:ae:8d:5a:ac:d1:57:50:da:40:c6:09:ab:7f:19:31:6d:34:
8f:bd:b6:f4:38:4a:5a:33:33:8c:0d:12:1e:3f:52:a3:32:12:
5c:45:8f:f6:29:ad:fd:a0:ca:5c:e6:a2:1e:e9:d1:88:fc:d1:
59:25:58:de:41:3b:65:1e:12:e9:21:59:0f:cb:72:ef:f5:90:
07:04:47:36:d7:8f:21:68:0a:8a:97:e5:a1:70:69:e8:97:20:
ef:2d:a2:e1:29:df:d6:94:17:f4:d4:40:36:ef:58:ce:47:80:
02:48:d4:84:66:fd:55:90:4c:fd:92:d1:32:e8:0f:c5:77:85:
28:f9:a7:f1:45:c5:de:51:c7:25:15:6f:e3:f4:cc:c6:c4:6c:
7c:9c:76:31:a4:3d:31:99:37:38:b4:17:13:3d:ea:38:e0:0c:
62:c6:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org