Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yvkvTrYP6bbxCAGNNfyD4CQIpLY.roa
File: yvkvTrYP6bbxCAGNNfyD4CQIpLY.roa (raw, json)
Hash identifier: P22/vdh9LGqmKzuvKrkydCm3Wrb6tYpuz3JXfezNJYU=
Subject key identifier: CA:F9:2F:4E:B6:0F:E9:B6:F1:08:01:8D:35:FC:83:E0:24:08:A4:B6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0188D8BD98A100008A00B621A97B67384990
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yvkvTrYP6bbxCAGNNfyD4CQIpLY.roa
Signing time: Tue 20 Jun 2023 12:18:04 +0000
ROA not before: Tue 20 Jun 2023 12:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jul 2023 13:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:bd:98:a1:00:00:8a:00:b6:21:a9:7b:67:38:49:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 20 12:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=caf92f4eb60fe9b6f108018d35fc83e02408a4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fc:49:3a:43:45:b0:34:8e:56:ca:0e:4f:30:
35:cd:03:ad:eb:f2:c6:de:d7:01:8f:ae:49:79:f2:
89:93:46:7d:0b:53:a2:48:48:88:f0:5a:c2:d3:e9:
1a:a8:76:77:cc:37:71:06:d2:85:62:7b:6b:66:7b:
a2:5f:fa:8e:b3:6e:c0:23:e0:fc:23:f1:f2:ab:ad:
eb:96:b4:2a:45:65:b2:97:4e:7d:02:67:9c:f5:e1:
e1:6e:07:93:44:b4:d1:da:e7:db:87:83:9c:8a:d3:
88:07:09:16:18:9b:ac:dd:6f:46:a0:04:80:87:36:
b2:4b:7e:41:ef:34:d5:b5:11:c0:04:67:e9:41:76:
0e:89:4b:ce:3e:45:a9:6f:39:b3:fe:e3:dd:ca:9c:
81:25:42:77:52:a4:43:8e:cc:ef:0e:6a:3d:c4:89:
f9:90:4a:8e:4b:e8:73:41:56:cf:f8:85:d6:f3:7d:
a9:43:fb:2a:10:46:cc:ab:4d:83:67:2a:47:ac:4b:
29:15:bd:5e:93:f8:39:e2:4c:85:07:c3:aa:3d:3b:
5f:6e:f9:5e:9e:f8:87:6c:2c:2b:53:42:f8:06:51:
59:c2:90:49:fd:b7:4c:aa:e2:bd:b8:c6:fe:32:66:
e8:19:d7:bb:1c:c6:01:c0:7e:7a:7b:23:da:12:19:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F9:2F:4E:B6:0F:E9:B6:F1:08:01:8D:35:FC:83:E0:24:08:A4:B6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/yvkvTrYP6bbxCAGNNfyD4CQIpLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.138.183.0/24
77.83.38.0/23
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:12:52:18:f6:96:55:33:47:57:44:a3:90:40:be:af:66:74:
d6:e9:7f:87:8d:74:b2:d0:e4:e8:69:bf:e3:f1:e8:43:0d:fe:
5e:14:a1:19:8e:6d:0e:66:05:7f:3e:1a:f4:68:7e:57:3d:86:
8f:b3:03:64:83:c1:37:55:ab:22:72:02:9a:3c:9a:57:d5:f0:
7b:0d:a2:ae:16:df:13:12:f1:25:8b:37:49:67:86:f9:d9:bf:
2b:26:e6:32:58:3d:a7:fe:96:79:81:0f:55:0b:84:94:c9:a8:
c8:20:e9:05:49:81:a6:3a:c5:c5:13:b3:91:37:53:7a:58:95:
8a:8b:cb:65:9e:df:80:2b:65:d5:fb:3a:3c:39:58:83:a7:b0:
a2:b4:3a:3c:a3:e0:87:f0:da:40:7d:67:d4:3e:d4:d1:48:e0:
57:6a:5b:04:68:6f:81:90:07:2f:d6:d4:16:b1:71:ef:e8:e4:
fb:f8:f5:b8:89:55:b7:f5:12:4f:fe:d7:3a:e0:23:09:49:b1:
0e:93:ac:22:fa:81:d9:9a:7e:30:00:bc:e2:68:ca:16:09:d8:
ce:88:79:da:64:ad:91:9b:24:39:16:54:2e:8c:96:aa:de:fa:
68:2f:ae:30:71:53:e1:3c:0a:9d:13:eb:b7:4f:70:53:24:04:
c1:3f:9c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org