Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ExzBk9vpPLVc219Lgdp6zoecxZQ.roa
File: ExzBk9vpPLVc219Lgdp6zoecxZQ.roa (raw, json)
Hash identifier: Xb6tysVD7rjEgjyW3k9YZsa8nsdiIclGUXPposH8OnQ=
Subject key identifier: 13:1C:C1:93:DB:E9:3C:B5:5C:DB:5F:4B:81:DA:7A:CE:87:9C:C5:94
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01889F5DE993FC960C50301D2C508CA7558C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ExzBk9vpPLVc219Lgdp6zoecxZQ.roa
Signing time: Fri 09 Jun 2023 08:55:11 +0000
ROA not before: Fri 09 Jun 2023 08:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
2.56.111.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:5d:e9:93:fc:96:0c:50:30:1d:2c:50:8c:a7:55:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 9 08:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=131cc193dbe93cb55cdb5f4b81da7ace879cc594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:a1:0d:95:fb:b6:d0:23:4c:98:c4:39:fa:
6c:38:59:9f:b9:14:23:09:c3:2c:23:9c:46:7e:01:
fe:5a:d4:d4:53:1d:cb:49:60:6e:70:52:14:fa:58:
fb:b1:5e:4a:97:2d:82:ba:52:6a:0f:4b:a6:7a:43:
b0:74:d3:0c:ce:22:2c:3a:d5:1a:c8:84:8a:1f:82:
19:09:3b:c5:f5:15:e1:1c:8a:c0:52:7b:5f:f7:e1:
08:dd:57:d6:ba:e6:37:70:5a:80:21:4b:c4:78:8d:
3b:f8:f4:34:2d:0a:d0:fb:c7:4f:1c:4f:b9:69:18:
a5:57:bf:1d:00:a6:84:97:60:1e:af:35:21:ec:60:
d3:23:d3:d2:08:78:d9:88:4b:ff:4c:bc:78:2c:b0:
4e:9e:eb:81:f6:30:34:22:5b:d1:f2:22:84:1e:0d:
02:85:46:35:a8:09:e1:29:be:c6:5d:fc:44:c4:3a:
a9:3d:db:55:4f:28:31:e7:eb:96:3c:26:9b:3e:9b:
5d:21:3f:b3:4c:25:a6:b7:3f:3c:ae:b5:eb:dd:87:
d0:eb:33:9e:f0:26:11:e7:ea:d3:9e:17:46:6c:19:
b7:dc:4f:82:cf:8c:6a:c2:0f:5f:0c:b1:80:53:94:
4d:9d:68:df:63:31:20:40:0b:7c:17:fa:c8:81:47:
a6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:1C:C1:93:DB:E9:3C:B5:5C:DB:5F:4B:81:DA:7A:CE:87:9C:C5:94
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ExzBk9vpPLVc219Lgdp6zoecxZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0-2.56.111.255
45.94.171.0/24
45.138.183.0/24
77.83.38.0/23
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:39:6b:f8:85:c0:20:ce:f8:50:4d:9a:73:56:a0:92:92:0c:
9d:bd:b7:a4:1d:33:f6:48:44:28:e6:a5:2e:02:54:19:c3:45:
b6:19:00:4e:99:a3:78:ca:aa:a3:47:eb:ba:2a:f1:70:48:25:
99:08:7e:72:0e:98:ba:65:00:d3:b5:13:50:a9:99:55:3b:1a:
e0:6a:da:70:a4:55:69:4f:22:84:09:3a:22:4d:cb:92:8a:af:
a2:ff:59:ca:ae:71:b7:e1:fa:a4:ae:05:da:b4:70:56:02:a9:
ca:02:84:3c:4f:c0:71:e3:96:5c:60:a2:7c:be:e7:6b:62:7e:
c5:2e:42:6b:d4:f0:97:c4:26:1b:82:e8:9a:0a:04:a9:07:e5:
a7:6e:52:18:0a:ed:17:96:e3:c2:65:49:3a:12:cc:28:c2:db:
ce:9b:f2:d9:aa:2b:9e:ce:40:57:a1:62:11:e0:22:79:78:04:
15:90:92:33:9b:51:27:a1:33:60:13:f2:4f:86:53:86:e2:53:
09:5b:16:27:83:86:e7:e4:1e:4e:45:93:86:69:f7:12:78:10:
b6:30:4e:e1:19:b6:04:55:40:6f:45:f3:4d:8f:60:5f:98:c5:
2b:67:81:f7:c7:83:04:da:18:2b:af:d4:55:4b:92:cd:21:f5:
30:25:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org