Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/17ywtqg5IKHdB2pwZJa53p8RZLM.roa
File: 17ywtqg5IKHdB2pwZJa53p8RZLM.roa (raw, json)
Hash identifier: DHdnKmUhi0fs+8HskdyLE/ME5cd9pPhNZ1XjvItk2eQ=
Subject key identifier: D7:BC:B0:B6:A8:39:20:A1:DD:07:6A:70:64:96:B9:DE:9F:11:64:B3
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018BD7F26A6794F8FF9A4E68B36E96EFE5C5
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/17ywtqg5IKHdB2pwZJa53p8RZLM.roa
Signing time: Thu 16 Nov 2023 11:44:30 +0000
ROA not before: Thu 16 Nov 2023 11:44:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.30.241.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.57.41.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d7:f2:6a:67:94:f8:ff:9a:4e:68:b3:6e:96:ef:e5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 16 11:44:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7bcb0b6a83920a1dd076a706496b9de9f1164b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:dc:49:ca:68:fd:90:b9:cc:d0:17:80:3f:
e7:70:38:e1:34:6a:4c:ba:b1:df:48:ac:ca:fc:f1:
2b:e1:e7:a4:94:47:d1:16:df:75:8e:c7:d6:c6:03:
88:e2:d5:97:a5:6a:ce:ff:8d:c3:72:bb:31:3a:58:
92:74:88:7d:14:ec:25:36:a3:20:61:fc:d1:1b:a9:
6e:7e:61:5a:93:3a:69:ab:2b:1b:26:32:7a:21:85:
9c:78:6c:65:90:1a:6f:c1:8d:7c:cd:77:04:ca:f3:
13:df:b6:c6:00:5d:f3:d9:9c:e4:83:83:e0:84:de:
a3:44:50:c0:e0:f0:5c:74:84:da:d0:3f:f4:42:53:
d7:20:0e:97:27:e2:76:6e:f1:ef:3a:98:ab:66:07:
81:38:bb:ec:46:5f:86:a7:52:d5:45:c7:4c:c3:1e:
b1:71:e2:1b:8e:6f:04:5e:62:d9:ad:83:a0:63:df:
d2:c5:0d:70:ef:7b:e9:ff:76:a3:02:ed:3d:38:49:
c1:18:0f:78:91:4e:23:35:3a:bb:12:66:63:e3:01:
c5:fe:2e:d5:28:66:2e:18:a2:06:d0:d5:cb:df:31:
a9:f0:10:8b:7d:75:a1:15:2c:ee:7a:4e:7f:07:03:
1a:a2:c9:dd:66:37:81:39:fd:08:d6:c8:f1:2e:56:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BC:B0:B6:A8:39:20:A1:DD:07:6A:70:64:96:B9:DE:9F:11:64:B3
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/17ywtqg5IKHdB2pwZJa53p8RZLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.110.0/24
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.94.171.0/24
77.83.39.0/24
85.209.120.0/23
193.30.241.0/24
193.57.41.0/24
195.62.24.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
23:22:9d:8d:f0:cb:70:a3:61:a0:11:1d:3d:c5:c2:23:69:af:
2d:c1:c6:29:1a:90:18:37:5d:ac:4d:bb:b3:ad:09:c1:52:22:
89:28:88:86:a4:3c:4b:a5:cc:e9:d2:84:d3:3f:c3:ce:1e:72:
22:b9:32:d5:6f:9c:ff:9b:37:55:f0:00:46:5b:fa:60:b5:a4:
b3:bb:38:6a:08:6e:b1:01:eb:0b:e8:99:4a:83:c2:b0:44:a6:
84:be:53:5a:5f:ff:d8:a3:0b:77:6f:35:02:65:90:f7:a6:98:
53:5d:27:62:c1:a5:f6:a2:61:6c:6a:8c:e1:9b:df:7f:d9:b4:
28:05:16:2b:d9:eb:2e:0d:12:e2:e4:c5:3f:da:01:8d:6f:bf:
29:b5:39:1c:99:3a:60:8e:c4:b8:68:db:74:c2:5a:68:c5:f8:
0b:a3:b8:5e:32:39:a4:95:b3:dc:ea:03:c3:c1:e5:23:14:48:
40:63:20:1c:cc:34:d0:63:c5:be:c5:d4:0a:ec:6a:53:03:4c:
0e:d5:7c:34:59:5c:a8:d9:1c:d5:ad:77:03:f0:92:63:2b:85:
2c:f5:88:b9:3c:c2:85:0e:0a:00:08:f9:0d:6b:be:a5:cf:3a:
99:23:8b:64:d5:4d:cb:dd:c3:31:54:ba:6e:9b:fa:b1:4b:f8:
8e:73:f7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 19 11:53:01 2023 by rpki-client on console-ams.rpki-client.org