Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DaCPcRPnvcCjvdYnNEcd_YKRrvA.roa
File: DaCPcRPnvcCjvdYnNEcd_YKRrvA.roa (raw, json)
Hash identifier: u3ygXpWFt+d6yFtB+XpeeqDFB0Nmi94ZXcJ70wciit8=
Subject key identifier: 0D:A0:8F:71:13:E7:BD:C0:A3:BD:D6:27:34:47:1D:FD:82:91:AE:F0
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018571E892BB2018FD489D855009E564D0F2
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DaCPcRPnvcCjvdYnNEcd_YKRrvA.roa
Signing time: Mon 02 Jan 2023 09:55:45 +0000
ROA not before: Mon 02 Jan 2023 09:55:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 45.88.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 08:59:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e8:92:bb:20:18:fd:48:9d:85:50:09:e5:64:d0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 09:55:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0da08f7113e7bdc0a3bdd62734471dfd8291aef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:56:18:20:de:9e:6a:7a:cc:33:99:bc:88:
83:85:13:c7:af:79:71:88:df:c9:9f:b9:21:d3:59:
0d:f8:55:9b:72:24:60:80:fc:24:7f:38:8b:68:8b:
c9:e4:87:4f:80:d9:ad:91:cc:41:0e:f0:89:a7:a3:
91:49:0b:e3:e7:63:36:6c:e1:00:28:f9:93:26:3e:
7b:a0:be:ef:57:e2:49:e1:9f:e3:3e:cc:f4:29:71:
61:fd:bf:df:c1:cd:de:76:6e:65:57:a3:ab:85:53:
e1:1b:4d:c6:c1:c0:00:e5:54:d8:55:59:8f:2a:ee:
bd:be:5f:0d:7a:9e:50:8f:94:9f:fd:6d:f0:f4:95:
95:23:69:ef:e7:54:e1:21:31:26:10:b9:e9:31:5a:
f8:9a:dd:d5:ec:45:32:cd:75:5c:75:a0:be:60:17:
d8:18:f0:7a:ec:68:3f:01:3a:99:08:c3:1e:bd:6c:
51:c1:eb:2a:7e:4f:66:75:e2:61:94:6d:26:22:9e:
d6:7b:1e:39:23:31:a8:23:1a:45:4f:c7:d4:79:f5:
19:99:24:2d:ca:1a:c2:5e:4e:2a:80:22:1d:f9:6b:
cb:4c:ce:11:ab:42:e2:f0:57:c5:cc:22:6a:52:8d:
bf:43:2f:b9:da:c0:de:7e:68:b0:6b:81:ce:a0:aa:
7e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A0:8F:71:13:E7:BD:C0:A3:BD:D6:27:34:47:1D:FD:82:91:AE:F0
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DaCPcRPnvcCjvdYnNEcd_YKRrvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.139.0/24
Signature Algorithm: sha256WithRSAEncryption
46:2e:00:d6:1f:2e:4b:40:18:67:29:06:8c:64:d7:00:8f:b8:
bd:3d:be:0f:94:7c:fd:66:d4:ef:df:5c:a7:11:99:4c:53:1f:
aa:ab:f7:79:a6:d8:ad:0a:3f:09:f8:90:c6:b0:e4:c7:94:d0:
c8:ae:be:d3:a2:63:bf:38:78:fd:66:e4:5d:a5:0a:82:ab:96:
d0:46:fa:87:17:c2:ca:f2:5d:d3:e3:fd:26:84:2c:00:a3:eb:
94:dd:11:bf:e5:db:cf:01:ce:f8:4a:8d:dc:71:05:68:a4:4c:
94:c6:75:3c:10:fe:f0:35:a5:93:f5:49:ae:98:23:ed:b6:65:
e3:39:c0:ce:d7:b6:93:49:db:c0:c3:35:20:1f:2b:38:bd:d3:
63:5f:18:39:27:b4:e4:ae:3a:6a:95:15:99:c3:69:51:71:91:
af:2a:eb:49:64:c0:c0:93:10:7f:f8:25:9e:06:6f:a2:a7:ca:
a1:50:10:9d:27:cc:e0:41:78:80:ad:6e:8f:ea:9b:33:34:7e:
a8:9c:b5:5e:bf:57:bb:1b:dc:ff:43:0c:c0:36:38:3e:32:32:
0a:ac:d3:87:1b:47:9e:bc:6a:d8:b1:3a:b6:89:aa:55:1f:50:
23:f0:d7:30:32:41:00:71:09:60:76:07:25:1b:7f:f7:22:64:
70:54:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org