Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6uRYHzkd17RXM5dM3AMWxxMHxlk.roa
File: 6uRYHzkd17RXM5dM3AMWxxMHxlk.roa (raw, json)
Hash identifier: 7WsFgCPYHWqZjhIh4fXT0ew7un0BYW8XPAUVqz4fyqk=
Subject key identifier: EA:E4:58:1F:39:1D:D7:B4:57:33:97:4C:DC:03:16:C7:13:07:C6:59
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018D0E4776FEA18B06E6F272032035CA646A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6uRYHzkd17RXM5dM3AMWxxMHxlk.roa
Signing time: Mon 15 Jan 2024 17:59:40 +0000
ROA not before: Mon 15 Jan 2024 17:59:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 45.88.137.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 15:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0e:47:76:fe:a1:8b:06:e6:f2:72:03:20:35:ca:64:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 15 17:59:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eae4581f391dd7b45733974cdc0316c71307c659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:cb:fd:e6:97:d7:d9:9e:28:52:66:36:ee:
f1:ad:90:49:73:b9:be:d0:98:7f:c1:e3:76:e8:28:
4c:9e:a9:75:e4:15:c3:f8:9c:54:be:a1:4c:ff:7b:
81:52:bc:41:7a:a6:1a:cf:f3:72:f3:9b:0b:d2:ca:
4b:8b:c3:1c:f9:42:45:ee:43:b4:f0:36:43:00:4a:
c6:25:2a:5c:b5:11:54:d3:c6:99:2d:ae:8f:ab:ad:
fc:d4:b8:ef:65:39:38:63:48:84:d5:4a:02:e0:d6:
2b:a8:3d:43:99:55:23:ea:cf:63:d8:c6:53:b3:80:
9c:d4:21:09:26:66:4b:4a:e1:e8:0b:e9:af:a3:88:
ce:b7:1c:16:4a:5c:91:37:01:cb:0b:80:ea:23:bd:
62:30:27:c6:c2:fc:6c:6c:eb:57:b0:f8:db:d9:8e:
f4:13:30:8a:ab:07:18:f2:83:5f:a4:c3:6e:23:4c:
bf:b9:dc:8b:c8:8a:85:4c:89:99:66:28:3c:d8:2c:
d4:be:34:76:a3:ed:bf:22:8c:91:75:5d:80:a7:e2:
ae:c5:f5:60:8d:32:48:53:65:b1:d7:dc:14:a0:cb:
7a:dc:b6:b2:18:c2:77:f4:00:ae:c3:d4:b8:cd:2f:
ac:cd:94:e2:cb:e5:4a:a7:c6:16:36:0f:98:a1:70:
50:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E4:58:1F:39:1D:D7:B4:57:33:97:4C:DC:03:16:C7:13:07:C6:59
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6uRYHzkd17RXM5dM3AMWxxMHxlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.113.0/24
45.81.115.0/24
45.88.137.0/24
195.62.24.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e6:41:0e:d4:9b:7f:15:83:25:7e:9b:4e:6e:00:7d:00:15:
11:cc:7f:83:b3:eb:3a:df:1b:cb:41:c7:16:83:57:95:1c:e5:
59:c7:65:21:05:27:49:f0:6e:f1:e9:ed:ad:8c:d1:b3:88:ae:
03:a0:83:a6:07:f4:7a:8d:75:b7:77:fe:68:cb:4e:1c:0c:44:
ff:b3:78:79:0a:ba:5c:94:eb:da:92:96:9a:4f:03:dc:e5:8b:
47:4f:5f:4c:91:f3:c1:82:57:a5:c4:81:1d:a7:4a:6d:69:ef:
9c:39:9b:ee:cb:9c:eb:ac:36:98:ca:4c:17:4f:b7:af:13:72:
6b:1d:3b:c9:6a:6a:12:52:6a:70:cd:d1:4a:a1:9a:b1:92:ea:
9e:93:ef:3c:d7:23:4c:0b:9f:da:0e:3a:08:bc:7f:9b:c2:2d:
fe:fa:cf:40:80:20:81:72:03:16:0d:a5:d1:60:aa:ad:09:58:
ad:98:a6:11:72:05:90:c5:7e:94:c9:22:9d:f5:c1:88:2f:64:
77:6c:ab:c3:e6:92:b2:fa:60:59:6d:1b:74:f7:47:fb:93:d9:
ac:9a:ad:5d:2d:31:c0:d7:3c:a2:ce:2b:63:04:eb:86:62:57:
3f:2a:75:23:02:82:ab:16:42:bf:f6:6e:9c:8f:75:c1:29:58:
a0:60:84:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 21:09:41 2024 by rpki-client on console-ams.rpki-client.org