Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/A40JYNSZCAheSetq9RPmjFLmcfk.roa
File: A40JYNSZCAheSetq9RPmjFLmcfk.roa (raw, json)
Hash identifier: thBgwWyzM8E/njiKpAPvyvBMvmsf70IGjJuWaPs1/ko=
Subject key identifier: 03:8D:09:60:D4:99:08:08:5E:49:EB:6A:F5:13:E6:8C:52:E6:71:F9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01888055E3F9650D4512AE76A85F7D748426
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/A40JYNSZCAheSetq9RPmjFLmcfk.roa
Signing time: Sat 03 Jun 2023 08:18:12 +0000
ROA not before: Sat 03 Jun 2023 08:18:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207508
IP address blocks: 45.138.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:80:55:e3:f9:65:0d:45:12:ae:76:a8:5f:7d:74:84:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 3 08:18:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=038d0960d49908085e49eb6af513e68c52e671f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:c2:ad:2b:ca:a4:58:ae:ef:4f:b2:d0:19:
db:2f:db:05:2f:f6:96:ec:eb:ef:32:87:c3:3b:5f:
af:25:9b:9a:fa:36:be:b0:ed:5c:e0:45:43:48:82:
01:21:25:d6:42:71:9d:85:30:6c:9a:f0:c7:68:6c:
d5:86:27:a4:96:97:46:a0:5a:78:d4:38:79:7f:f2:
ab:c4:9b:d3:23:21:86:6b:9f:c9:c5:17:18:94:bb:
b7:b0:b9:40:18:d3:c7:62:b1:a0:09:ed:6c:91:de:
30:05:c5:bb:b4:ad:fb:d7:35:07:2a:8e:a8:f5:68:
19:3f:6a:0d:bc:d3:ee:85:e7:0f:af:10:b6:4e:05:
3f:4b:37:ce:d5:30:07:b4:ca:94:7c:4d:8b:d1:45:
d4:83:53:90:cf:06:2e:b9:23:bc:e8:c3:53:e7:69:
95:53:53:b5:bd:8c:ce:52:25:d8:7d:ff:72:c4:be:
d7:38:8b:ac:1f:34:48:2e:2c:5e:b6:33:ec:c1:50:
0d:d5:f8:5c:97:41:ac:01:20:09:3e:8b:8c:9e:80:
5e:a3:1f:ee:70:fe:90:c0:3a:15:58:db:ce:ed:6e:
b9:69:8a:69:35:88:7a:25:1b:52:97:b4:f9:6b:15:
0c:87:cc:2a:64:d8:e0:16:e3:28:34:08:21:b1:69:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8D:09:60:D4:99:08:08:5E:49:EB:6A:F5:13:E6:8C:52:E6:71:F9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/A40JYNSZCAheSetq9RPmjFLmcfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.183.0/24
Signature Algorithm: sha256WithRSAEncryption
30:8e:6a:e6:09:47:71:88:53:91:18:fc:5f:d2:cd:21:3b:23:
4b:c7:81:81:d5:23:cb:3c:f2:22:46:dc:3b:f5:df:69:bd:29:
32:9d:10:21:91:ab:25:c8:44:cb:6d:85:e5:32:98:90:43:73:
74:37:68:26:11:4b:c0:64:92:75:69:fd:d2:e5:28:a4:98:2b:
10:db:13:c1:18:a9:d2:e3:f6:a2:ac:d6:25:a3:d2:d8:5b:94:
24:46:c2:76:a6:bb:e8:69:b2:df:95:c0:a0:17:12:5d:99:82:
30:2a:fe:43:67:c1:bc:72:d5:ce:d5:d8:e7:00:55:d6:ef:6e:
5b:7c:f4:d9:79:4f:ae:c5:b4:68:59:2f:d8:46:b4:ed:51:a1:
6b:31:a0:d1:51:3a:61:a5:de:2d:8b:75:4a:67:38:4b:77:ef:
dd:1b:c2:d0:93:5d:e8:df:f1:c7:35:56:40:c4:55:97:6f:3f:
06:5d:34:c9:41:0c:e8:d7:c7:98:00:07:0c:88:4b:8c:ed:8e:
af:bf:0e:27:84:9d:3b:d0:bf:cf:b4:2a:ec:69:c1:71:16:5d:
d8:14:6f:62:d4:46:92:8a:3e:41:ee:76:44:b1:43:80:47:ae:
12:f4:78:91:ee:62:7a:ba:1b:40:3d:92:53:10:d9:dc:0c:49:
36:9f:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 30 14:32:40 2023 by rpki-client on console-ams.rpki-client.org