Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AdN0Al7N0oEwJnRdUHeZPAqprxM.roa
File: AdN0Al7N0oEwJnRdUHeZPAqprxM.roa (raw, json)
Hash identifier: oXn9ZsX18GCFZJmiDfk7l6HqJPPSpXaM7SP2maqAmKY=
Subject key identifier: 01:D3:74:02:5E:CD:D2:81:30:26:74:5D:50:77:99:3C:0A:A9:AF:13
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01864033488BB23ED131EEBBBAC81A613196
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AdN0Al7N0oEwJnRdUHeZPAqprxM.roa
Signing time: Sat 11 Feb 2023 11:19:08 +0000
ROA not before: Sat 11 Feb 2023 11:19:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:40:33:48:8b:b2:3e:d1:31:ee:bb:ba:c8:1a:61:31:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 11 11:19:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01d374025ecdd2813026745d5077993c0aa9af13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:68:42:37:3a:74:21:a9:36:1f:ad:99:3e:
3b:8c:78:75:0b:9b:42:51:ba:b6:e6:11:38:b5:45:
c1:0a:87:7d:59:c6:7f:cf:ca:39:98:31:ca:ef:fd:
06:d3:95:93:d2:0d:25:2e:81:6c:af:c1:73:e8:30:
fb:ff:58:94:2e:75:cb:04:ba:b9:63:a1:bf:0e:6f:
f3:6f:a4:b4:ec:e3:ff:51:71:98:af:66:e6:0c:2d:
3d:ef:f8:a4:d7:e6:28:48:4d:18:dc:64:1e:aa:51:
6e:b1:77:d2:b5:d4:bc:19:e7:de:e0:be:a3:71:b5:
f4:e5:c6:b2:48:3d:de:05:a9:0e:41:4a:1d:c0:ea:
d1:cb:0a:82:8e:90:79:2d:91:e1:a8:9f:06:76:65:
92:bc:b7:b5:3f:3c:a0:42:d2:45:05:99:a2:dc:d4:
ae:c6:24:91:32:05:f6:0b:9c:64:8f:78:52:4c:b3:
49:97:6c:e0:cf:db:ce:11:bd:50:85:56:cd:54:4d:
be:19:88:83:b8:c5:4b:bf:ec:b7:5a:37:fa:95:76:
77:69:57:c7:de:29:58:da:66:eb:67:78:00:da:4b:
d2:37:68:64:dd:33:0e:40:1b:8e:9c:c0:8c:e3:a3:
72:80:f8:6f:10:90:14:5e:27:00:ba:e1:e2:83:c2:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D3:74:02:5E:CD:D2:81:30:26:74:5D:50:77:99:3C:0A:A9:AF:13
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/AdN0Al7N0oEwJnRdUHeZPAqprxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.88.137.0/24
45.94.170.0/24
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
99:b6:83:dc:a6:11:ab:2b:07:70:ca:29:40:34:0e:36:08:ba:
02:2d:3f:84:0c:2b:fd:ca:34:1d:90:bc:5f:cb:68:a5:ba:23:
58:c3:83:42:7c:69:06:32:1f:e8:bd:ac:e5:06:77:5c:cc:f7:
63:04:93:ff:b7:49:8b:5c:dc:6b:0e:a0:8d:1f:6f:d8:53:9c:
e6:ef:b2:eb:0a:a4:f7:94:29:f3:4b:c0:e3:0d:d3:d0:ea:f1:
54:ba:33:cb:a2:4a:6d:43:ed:b5:fb:b1:88:e5:d3:b0:bc:39:
ac:a2:a5:1b:32:b5:08:ce:0f:a8:a5:6e:09:a5:f1:e2:f2:25:
4b:82:30:24:13:cf:e1:21:74:cc:81:84:80:2c:08:f2:13:83:
9b:ee:cb:84:d3:8f:e8:11:c3:71:cf:45:56:96:1c:e7:b0:31:
46:e2:bf:f8:5a:63:ef:a9:af:d2:bf:84:8b:ff:d7:d8:d4:2d:
4c:2d:9d:78:06:08:83:5b:b4:fa:c6:b5:46:f9:2d:e2:bc:46:
b9:9e:13:35:f2:5c:26:f9:b0:1e:d9:67:f7:fa:aa:d0:46:bb:
b8:40:16:8a:68:e3:81:b1:71:3c:5b:37:cb:e2:9f:d4:cf:20:
4c:36:d6:2b:13:8f:60:c6:98:05:0c:57:fe:d3:97:75:d3:a9:
bf:f4:83:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org