Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/CzvKPB6liE0SVAbm8_mCzFLyLCY.roa
File: CzvKPB6liE0SVAbm8_mCzFLyLCY.roa (raw, json)
Hash identifier: y+KyR4UyzAQcQ4tLJUulJHhImIbnMmleEBvWqI0QkAY=
Subject key identifier: 0B:3B:CA:3C:1E:A5:88:4D:12:54:06:E6:F3:F9:82:CC:52:F2:2C:26
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B81C02917C22FE332E45EC0ABE188B077
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/CzvKPB6liE0SVAbm8_mCzFLyLCY.roa
Signing time: Mon 30 Oct 2023 18:02:16 +0000
ROA not before: Mon 30 Oct 2023 18:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 45.88.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:c0:29:17:c2:2f:e3:32:e4:5e:c0:ab:e1:88:b0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 30 18:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b3bca3c1ea5884d125406e6f3f982cc52f22c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1e:c4:59:fd:70:8e:3d:1a:c8:80:97:69:9f:
b7:6a:6a:8f:c0:2e:75:ef:89:8d:76:45:2a:0d:3e:
46:53:5e:b3:55:f0:93:5b:dd:7f:99:df:35:a2:19:
50:7a:a0:82:c4:72:77:fd:d4:82:8b:62:3a:37:6a:
f1:74:34:e4:8b:1f:88:f9:4d:00:f3:38:2b:0b:bb:
73:73:51:96:6a:ee:6d:d8:1c:7c:2f:bc:77:6e:1d:
92:50:bf:9c:95:2d:42:e7:07:33:ae:94:74:e2:88:
08:ed:ac:4c:b6:93:a3:c6:0c:30:c3:2a:fd:8b:15:
a4:07:68:77:03:0d:8f:81:4e:4d:9c:5f:1b:47:b2:
39:11:7b:8a:04:70:9a:c4:36:bc:a4:eb:6f:d2:4e:
82:44:95:4f:e0:fc:b4:e9:cf:20:e9:79:bc:6e:12:
1d:7d:d7:2b:d6:83:45:68:aa:52:02:3a:28:ae:6e:
01:47:e5:63:d4:27:2d:76:bd:92:78:77:aa:9c:bb:
33:16:36:79:8e:78:66:23:20:de:50:49:f0:c3:1c:
73:25:74:61:f1:97:a2:61:65:d2:c6:ed:fd:5b:16:
0b:82:ab:35:97:d6:64:81:43:1e:21:14:32:75:bf:
bc:7a:36:49:b1:e0:06:33:1b:87:93:7b:f0:e2:c3:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3B:CA:3C:1E:A5:88:4D:12:54:06:E6:F3:F9:82:CC:52:F2:2C:26
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/CzvKPB6liE0SVAbm8_mCzFLyLCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.137.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:92:43:08:7b:f0:9e:a4:f0:b6:d1:7b:d7:21:c1:7a:01:01:
f1:8f:90:46:24:0c:5d:9b:f7:63:8b:88:cb:73:ae:80:4a:23:
23:bc:39:3c:22:66:f9:d4:98:83:6d:f8:75:c5:7d:ea:8a:ce:
cc:a3:47:bd:1b:53:8c:bb:87:32:7b:2d:46:6d:7f:42:60:9d:
1e:60:ed:78:8e:1f:12:ff:98:d3:66:7e:0d:71:f6:3d:4c:08:
af:ba:23:a4:c3:5b:3d:ce:99:cd:54:41:b6:46:65:76:5f:93:
be:26:dd:7e:de:1c:37:23:9a:99:97:00:6d:82:3f:2e:d2:b9:
c6:b0:87:95:17:09:c7:48:b3:1f:0c:c2:ac:92:a3:7a:9d:1e:
4b:92:27:13:ed:81:58:42:6a:e8:49:31:19:42:84:2d:0f:dc:
d5:13:c5:cc:17:d7:b7:0e:d4:32:da:2e:4d:75:3f:88:65:75:
ee:16:41:20:3f:a1:9f:c3:94:83:5d:6b:72:79:7a:27:ac:61:
c4:34:28:b8:d8:ec:32:21:57:a7:80:d4:0f:96:84:5f:87:56:
e8:de:40:47:b2:87:3b:7f:27:21:55:4c:8c:37:de:17:25:c4:
31:af:c9:24:d3:f3:0b:ef:8e:3a:c3:a3:fd:0c:7e:a0:34:2a:
72:c4:92:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 11:58:45 2023 by rpki-client on console-ams.rpki-client.org