Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8nffNiCxxGpt1-HLQ56M6kSXnK8.roa
File: 8nffNiCxxGpt1-HLQ56M6kSXnK8.roa (raw, json)
Hash identifier: ad9G55BxH+mQHbwfTI4ZsYMOtQst2/7HpeWaNzralvI=
Subject key identifier: F2:77:DF:36:20:B1:C4:6A:6D:D7:E1:CB:43:9E:8C:EA:44:97:9C:AF
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018C44F9A59DED5C0EEBDB7190B29CFD0955
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8nffNiCxxGpt1-HLQ56M6kSXnK8.roa
Signing time: Thu 07 Dec 2023 15:51:00 +0000
ROA not before: Thu 07 Dec 2023 15:51:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.30.241.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:f9:a5:9d:ed:5c:0e:eb:db:71:90:b2:9c:fd:09:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 7 15:51:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f277df3620b1c46a6dd7e1cb439e8cea44979caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:bc:05:62:16:19:73:2e:6e:e1:50:4a:7a:
fe:79:c6:89:93:55:d1:bc:00:23:2d:99:cf:ee:4d:
3f:17:70:b7:24:18:48:8c:69:8e:c4:8e:6d:38:ea:
80:9e:2f:48:62:54:0d:34:1a:72:48:f4:a6:3e:b6:
e9:ed:11:ed:6c:59:f9:8e:06:c2:b7:9c:ba:0f:be:
ea:b4:80:1f:82:a7:c7:32:ed:77:0c:20:99:54:58:
f7:39:47:36:5a:f9:86:54:81:08:12:c1:01:98:d3:
07:f8:c4:0f:36:5d:d1:a6:24:6c:ef:ab:21:30:02:
f4:5f:cb:ac:d9:f1:8c:2c:3d:d4:2d:b0:00:0d:7f:
9d:31:1a:d3:8d:9e:41:4c:52:14:12:f3:b9:fc:0d:
cc:d0:20:50:cc:ca:cb:0d:3e:17:60:b3:ca:ac:65:
e7:63:98:bb:24:bc:09:30:6d:22:73:94:af:3d:31:
74:32:66:12:53:dc:63:9a:8e:19:42:58:82:4c:8f:
22:e8:5a:95:14:7e:f8:28:63:10:b8:b7:ea:14:25:
fa:dc:46:56:9e:51:12:d8:4f:c1:e5:7d:cb:ee:2d:
15:97:6b:a3:39:fb:63:a1:54:c5:a2:23:18:3c:79:
c2:53:5a:c1:16:db:46:ad:e0:fe:4a:23:32:26:f8:
17:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:77:DF:36:20:B1:C4:6A:6D:D7:E1:CB:43:9E:8C:EA:44:97:9C:AF
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8nffNiCxxGpt1-HLQ56M6kSXnK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
77.83.39.0/24
85.209.120.0/23
193.30.241.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:62:22:92:20:88:91:60:f8:03:80:c4:ed:bb:fc:ae:c5:17:
5b:f4:21:5c:90:9e:9b:e3:ca:a2:86:d0:c3:7e:46:98:a2:9b:
cc:f0:f5:ec:db:f4:8e:60:52:e1:d3:13:5a:f2:be:4e:ab:8f:
2e:df:b7:33:de:ea:55:9f:47:6e:46:a0:43:58:ed:99:6c:65:
37:46:90:93:48:ea:74:65:07:8c:e3:e5:00:e4:0b:41:5e:de:
21:67:d2:68:ae:ae:1a:e8:b6:9c:98:e3:e0:99:d4:70:78:83:
d6:ca:b6:bf:a4:23:23:b9:ac:4d:13:8a:8d:19:84:fc:8c:e7:
74:b5:f2:da:f5:bd:53:6d:e6:75:99:2e:b2:85:97:b9:d9:4c:
68:7e:ed:bd:5b:2e:e5:3b:70:91:3a:71:dc:04:40:07:88:3a:
b2:e8:43:a1:33:da:c9:6b:7d:d8:a1:58:1d:13:10:f7:4a:e8:
1e:04:ac:71:67:fb:9f:f7:a2:1f:88:62:94:b0:85:b5:42:9f:
44:03:2b:8d:4f:51:ec:8f:7d:eb:0a:92:85:08:f5:29:13:34:
56:3f:02:e9:25:04:9c:ce:ee:3c:20:17:d1:0a:70:6e:9a:6a:
94:84:2f:3e:ae:07:08:e3:13:d6:e3:5a:94:c2:4e:55:51:72:
ce:98:36:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 9 23:54:47 2023 by rpki-client on console-ams.rpki-client.org