Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9slf4jXkB9uE-mo5r133mna1FVQ.roa
File: 9slf4jXkB9uE-mo5r133mna1FVQ.roa (raw, json)
Hash identifier: sYlTCXr84t6F8WM35M2fR51CJ2lsIrhYxo7E5tNeDr4=
Subject key identifier: F6:C9:5F:E2:35:E4:07:DB:84:FA:6A:39:AF:5D:F7:9A:76:B5:15:54
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0189C1E37B3EDB727B4961CCE16519954261
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9slf4jXkB9uE-mo5r133mna1FVQ.roa
Signing time: Fri 04 Aug 2023 18:50:58 +0000
ROA not before: Fri 04 Aug 2023 18:50:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 07:30:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c1:e3:7b:3e:db:72:7b:49:61:cc:e1:65:19:95:42:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 4 18:50:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6c95fe235e407db84fa6a39af5df79a76b51554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:b6:4b:f6:5f:cc:7d:bb:9e:10:4f:aa:d9:
5a:0f:61:b2:22:c4:0a:a6:06:60:bd:e1:b4:1b:4d:
61:9c:4e:77:f0:9c:2a:0a:3f:90:c6:9d:d2:9b:99:
13:95:e3:16:11:6b:39:6d:b9:d5:8c:83:a6:56:4f:
30:f0:00:d8:53:ba:84:58:3b:3e:a8:e4:29:4d:cf:
c3:3e:6e:8a:fc:f4:7e:a6:64:08:61:e3:33:85:80:
84:d3:86:58:20:8c:cf:51:e6:fe:9e:70:33:a1:32:
75:4b:24:12:54:ec:f4:cf:6a:16:ef:6a:a9:a2:d2:
a2:75:8a:df:08:f2:2a:79:55:39:fb:eb:bb:91:a2:
97:27:71:7f:a4:a1:09:10:ed:27:ff:d1:18:a9:0c:
de:bc:e1:78:e5:26:e5:31:4e:bc:3c:f7:c7:1a:eb:
8e:ec:08:d1:bd:25:f9:0e:9f:8c:06:a3:b3:81:eb:
38:d2:69:ef:f3:35:64:6c:e6:42:d4:7c:f9:61:6a:
c7:91:96:50:aa:6b:fe:1f:47:e7:7b:ea:09:a2:13:
c1:99:63:a0:20:5b:41:ae:b9:80:38:54:51:67:b0:
2b:ae:82:6d:ee:e8:57:14:0a:0f:67:a4:f6:5f:58:
fd:7c:9f:bc:82:87:44:61:b1:5f:e2:9b:4f:ef:90:
a3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C9:5F:E2:35:E4:07:DB:84:FA:6A:39:AF:5D:F7:9A:76:B5:15:54
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9slf4jXkB9uE-mo5r133mna1FVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.138.183.0/24
77.83.39.0/24
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
25:c0:e4:c5:a4:ef:66:38:67:99:e6:e5:28:a7:71:17:fa:57:
a2:ab:87:98:e1:e0:c7:5a:22:6c:b6:aa:e8:10:8d:e7:40:01:
1d:4c:61:fc:dd:b8:33:7f:bd:d3:ed:41:f5:72:0b:59:5a:02:
ba:8b:73:14:67:c2:d2:34:a7:57:55:79:1a:fe:d9:1d:3e:f8:
d5:a2:ea:4d:39:95:2c:0e:3f:b4:d6:47:44:04:4d:df:10:1c:
a1:54:95:85:e4:41:f5:af:67:14:92:0e:a4:cb:a4:d0:68:13:
ce:5f:64:12:0c:ee:59:c3:fc:a3:29:4d:20:95:af:3f:39:8c:
5b:0c:df:5d:a4:f1:4d:99:dc:17:56:53:8e:32:1a:04:04:41:
47:45:71:57:fa:e0:9b:70:51:db:4b:84:ed:e4:46:96:8a:33:
31:6d:59:55:6f:b0:f3:7b:48:a6:ae:9e:8a:ca:e3:ff:26:50:
6b:c2:43:a1:90:4d:1a:15:99:92:e1:30:30:df:6f:a4:6b:3e:
b4:92:57:9d:df:64:9a:86:ce:20:97:e4:71:d6:97:27:65:a9:
92:2a:ce:3f:07:d5:2e:5f:86:57:84:c8:0c:11:26:63:98:1c:
93:26:1e:59:cd:01:01:71:2e:46:4d:39:a1:1a:b8:04:96:27:
0e:0e:e1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org