Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/hlTlLxxzRkAUkJqUrVwCdfMwpUM.roa
File: hlTlLxxzRkAUkJqUrVwCdfMwpUM.roa (raw, json)
Hash identifier: Qq6yuiaHzTKLt0g5i4XANxc8zjgqJuFvKrWjEFJQyL8=
Subject key identifier: 86:54:E5:2F:1C:73:46:40:14:90:9A:94:AD:5C:02:75:F3:30:A5:43
Certificate issuer: /CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Certificate serial: 01856EB90E51F36F7CD135DC0A1E29C86D1D
Authority key identifier: 9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/hlTlLxxzRkAUkJqUrVwCdfMwpUM.roa
Signing time: Sun 01 Jan 2023 19:04:59 +0000
ROA not before: Sun 01 Jan 2023 19:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20650
IP address blocks: 217.145.36.0/24 maxlen: 24
217.145.37.0/24 maxlen: 24
217.145.34.0/24 maxlen: 24
217.145.35.0/24 maxlen: 24
217.145.32.0/20 maxlen: 24
217.145.38.0/24 maxlen: 24
217.145.32.0/23 maxlen: 23
217.145.43.0/24 maxlen: 24
217.145.44.0/24 maxlen: 24
217.145.40.0/23 maxlen: 23
217.145.39.0/24 maxlen: 24
217.145.45.0/24 maxlen: 24
77.72.232.0/21 maxlen: 24
77.72.238.0/24 maxlen: 24
77.72.237.0/24 maxlen: 24
2a01:38::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:0e:51:f3:6f:7c:d1:35:dc:0a:1e:29:c8:6d:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ebcbfeb8fa897374718a9102a4a70671e2aabf9
Validity
Not Before: Jan 1 19:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8654e52f1c73464014909a94ad5c0275f330a543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5e:b2:4a:0a:2b:00:85:4e:43:b9:27:59:91:
6d:9f:4f:2b:57:d1:86:ee:e9:b9:4a:d0:34:c8:cb:
1c:bc:24:7b:2d:b2:e0:48:84:02:cd:a9:44:3a:e6:
64:d6:e5:63:d8:2d:09:96:66:a8:35:0e:a9:f4:dd:
85:41:83:7f:59:76:08:fd:da:ae:67:0a:b7:b7:39:
b1:cf:9a:25:b0:89:04:a3:72:6f:cd:de:2e:f9:90:
14:4d:bc:6d:4d:54:3b:46:ed:7d:8f:70:47:d8:79:
76:85:91:83:de:68:1e:fa:e5:9a:85:44:cd:5e:a5:
f0:5d:bf:02:72:86:1c:92:5a:bf:2d:82:22:b4:b2:
cd:36:cc:ae:5d:fb:23:df:8e:ee:e0:fb:b4:23:b3:
c0:35:7c:ec:4c:7d:7d:e0:56:a3:7f:5f:4c:e4:da:
fb:1f:37:a8:e9:c0:ea:1a:60:ff:1e:33:e6:7a:44:
27:97:a1:0d:40:ea:01:98:5a:d7:d4:86:a2:f7:9d:
84:d7:70:a4:59:a8:64:20:13:bb:8f:b8:35:72:63:
9e:3f:ff:51:5f:c2:1a:f2:29:4f:63:dd:64:6f:a3:
37:78:7d:9a:1f:0f:43:2d:c1:11:23:e7:98:2e:3b:
16:58:e9:c5:6a:81:69:1a:08:0c:fc:63:73:65:ea:
bc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:54:E5:2F:1C:73:46:40:14:90:9A:94:AD:5C:02:75:F3:30:A5:43
X509v3 Authority Key Identifier:
keyid:9E:BC:BF:EB:8F:A8:97:37:47:18:A9:10:2A:4A:70:67:1E:2A:AB:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nry_64-olzdHGKkQKkpwZx4qq_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/hlTlLxxzRkAUkJqUrVwCdfMwpUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/138ce3-f38f-43e9-8dc9-9cd0cae06292/1/nry_64-olzdHGKkQKkpwZx4qq_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.232.0/21
217.145.32.0/20
IPv6:
2a01:38::/32
Signature Algorithm: sha256WithRSAEncryption
0c:e9:e9:7a:63:35:aa:16:2f:dc:60:1c:9b:b8:5a:fc:7f:fe:
26:af:ca:4b:51:64:cf:8c:46:33:f1:46:df:03:eb:0d:23:fd:
53:60:b1:e5:bd:94:89:93:65:dd:f1:e9:54:25:70:b7:92:07:
d1:70:29:15:76:96:b4:1f:00:97:34:7e:d5:bb:75:a7:0d:ac:
bb:20:07:7e:72:f0:5f:6f:9d:dd:c8:76:39:d6:ff:ea:f4:3f:
fb:ff:69:c0:4f:f5:4e:50:88:c2:2e:ed:08:12:06:de:95:7b:
8f:bf:d8:22:1c:0a:b5:1a:9f:1e:49:0f:f8:39:e4:98:03:01:
dd:2a:7d:99:f1:1d:06:03:0e:20:6d:07:4f:12:e3:30:37:61:
34:b6:c6:b6:00:88:1f:2c:4b:9c:32:7f:52:77:6d:55:53:bf:
0d:4c:ac:85:39:9b:66:6b:42:d1:13:bf:49:50:f9:9c:b1:e2:
61:93:fd:2a:a7:c0:3b:22:18:6f:41:a2:92:10:de:f0:b2:18:
d4:72:40:24:76:55:c3:21:9c:c5:7c:3c:fe:8a:52:a4:5d:6f:
b6:e3:59:6c:5b:bf:c7:86:88:47:68:68:7d:54:88:d9:58:0a:
c2:d4:22:b7:d7:fd:0d:6b:75:02:f1:b8:bb:e2:90:19:df:fd:
ce:e0:6f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:11 2024 by rpki-client on console-ams.rpki-client.org