Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9v553oUeHGC0Tswnq3a7UemgspE.roa
File: 9v553oUeHGC0Tswnq3a7UemgspE.roa (raw, json)
Hash identifier: ADHqdsNWJYNqXef2jIvCrHxTNWFzB+j6JEA6CX0ieqI=
Subject key identifier: F6:FE:79:DE:85:1E:1C:60:B4:4E:CC:27:AB:76:BB:51:E9:A0:B2:91
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E38A0B19BF15786C5CC0212A5F83BD93F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9v553oUeHGC0Tswnq3a7UemgspE.roa
Signing time: Wed 13 Mar 2024 16:23:59 +0000
ROA not before: Wed 13 Mar 2024 16:23:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198361
IP address blocks: 45.88.138.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 15:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:a0:b1:9b:f1:57:86:c5:cc:02:12:a5:f8:3b:d9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 13 16:23:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6fe79de851e1c60b44ecc27ab76bb51e9a0b291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:57:29:40:8d:a6:ea:5b:f7:0e:cc:1b:f4:53:
cb:52:af:51:71:7a:f4:6e:1d:b7:a7:60:1c:7b:ba:
52:e6:9c:83:36:e7:4f:22:e8:31:db:3a:47:de:5d:
c2:33:f3:7b:40:73:f9:20:61:37:9c:46:6c:37:9c:
c0:e2:87:4b:a0:3d:bd:9b:b5:83:54:14:48:34:6d:
f5:ba:ed:4f:7e:2f:7c:3d:f1:3c:94:5e:cb:e9:43:
93:0e:15:f3:14:b0:e6:f4:95:82:9e:b4:50:53:2e:
47:4d:56:e9:35:00:a2:e2:c0:18:da:fd:d1:f1:e3:
31:68:3e:f3:34:70:08:1e:dd:b4:0d:be:cc:6c:03:
88:7f:54:5e:ed:c8:ab:bb:1f:78:78:af:b3:c7:fe:
e1:bb:8d:14:3e:90:84:2e:3f:f9:c7:63:ba:e6:2b:
4f:43:ce:1b:45:44:a5:ee:fb:aa:33:fe:32:ef:f2:
a1:21:0f:96:f8:5d:7b:1c:32:a9:43:72:e6:93:96:
b6:5b:23:1e:49:c9:00:71:ed:8b:16:cc:6a:53:f3:
fe:51:e9:65:fd:64:57:8e:b6:c0:f1:63:27:a1:50:
66:b3:6e:db:49:ce:f1:92:cf:57:3b:9e:11:f2:bd:
51:16:f3:0e:df:cb:b1:85:dd:01:87:16:44:f3:12:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FE:79:DE:85:1E:1C:60:B4:4E:CC:27:AB:76:BB:51:E9:A0:B2:91
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9v553oUeHGC0Tswnq3a7UemgspE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
45.144.215.0/24
77.83.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:54:5e:ea:fd:aa:14:11:fe:a6:50:c5:41:56:f8:ce:ec:cb:
3a:26:46:36:03:9c:f7:ed:5e:24:88:fd:b1:a6:e7:c1:43:d7:
25:82:1d:9f:92:ed:d6:41:cd:0f:79:d3:6d:32:52:94:86:23:
85:86:32:74:df:c3:d3:b7:90:0b:c0:2d:43:6e:ac:49:e2:de:
02:cc:42:39:46:7b:99:fb:d2:1d:ba:d4:4c:41:bd:6c:04:1b:
22:80:be:e3:14:97:47:8e:ba:60:e0:c3:f7:51:a9:4e:1d:2a:
00:47:39:c6:67:21:95:1b:91:6a:7b:75:70:6f:55:18:d7:44:
f7:ef:e1:f9:14:fc:d7:e9:c1:1c:b2:05:14:92:51:b8:fc:3e:
25:66:48:cc:0d:06:4a:c2:97:a7:dc:5e:b1:19:9e:fd:a9:1c:
68:60:76:5e:9d:dd:ad:ec:b1:8b:a9:b1:ed:91:9d:37:0c:22:
7e:59:ba:86:4c:73:5d:14:9f:d1:dc:58:dd:3f:48:a2:81:35:
a5:4a:04:34:6a:5a:ef:11:85:ca:d8:15:d3:9d:2c:61:eb:bb:
36:61:a5:a6:a4:e5:34:45:10:ca:8a:61:dc:f7:16:b3:49:60:
a6:65:8c:f7:4e:48:7b:4b:0e:0d:c3:9f:12:3f:66:1f:a1:4e:
7e:be:0d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 20:37:35 2024 by rpki-client on console-ams.rpki-client.org