Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/J8F9LY7Arrc24EWFPga9_ZZy6Iw.roa
File: J8F9LY7Arrc24EWFPga9_ZZy6Iw.roa (raw, json)
Hash identifier: 16to7u85lxuH039+bO886qwY1tFFS46J4q86ZSuBQ4Y=
Subject key identifier: 27:C1:7D:2D:8E:C0:AE:B7:36:E0:45:85:3E:06:BD:FD:96:72:E8:8C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0187704565C2A101AAA95774F2D59E102EFA
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/J8F9LY7Arrc24EWFPga9_ZZy6Iw.roa
Signing time: Tue 11 Apr 2023 12:23:28 +0000
ROA not before: Tue 11 Apr 2023 12:23:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:70:45:65:c2:a1:01:aa:a9:57:74:f2:d5:9e:10:2e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 11 12:23:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27c17d2d8ec0aeb736e045853e06bdfd9672e88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:1a:87:f4:4a:ff:88:ba:ae:48:83:99:2a:
95:04:8a:c6:e3:4b:b2:98:55:1a:b5:f6:29:25:93:
cc:2b:8a:56:c2:cd:0d:1e:8f:ed:8f:1d:b4:38:c5:
f2:5e:d0:19:00:0c:7f:b5:42:ef:63:dd:18:21:68:
7c:30:54:37:71:8c:37:6c:95:71:54:e2:b8:ba:47:
f2:13:aa:1d:68:66:63:75:94:06:ae:b4:c7:07:e1:
aa:c9:e5:0a:e3:32:8b:cf:59:83:d0:2c:21:48:10:
a2:dc:2f:17:11:3c:10:b2:71:72:c2:3e:1d:5e:b6:
91:81:2a:da:14:2f:e0:a2:68:43:b4:eb:1e:33:72:
0c:ab:ea:d5:2c:c4:fc:c5:35:4a:33:9c:75:48:f3:
3b:86:17:98:b5:cc:87:75:ed:d5:75:2c:95:47:ec:
11:c4:c6:80:69:93:4b:fd:36:8a:29:14:22:8c:9a:
16:35:a6:e6:61:8b:e4:4b:13:8d:5b:a4:38:e8:c4:
fb:65:eb:61:54:d6:fb:da:e1:28:0f:67:18:75:2d:
26:4a:3f:ad:93:4b:35:27:c3:d4:1a:64:1c:e3:03:
c7:fd:4d:25:45:bd:df:e5:61:ca:0b:7e:ef:3d:46:
fe:fd:72:df:a0:3e:7a:17:20:68:8d:30:31:a4:50:
0c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:7D:2D:8E:C0:AE:B7:36:E0:45:85:3E:06:BD:FD:96:72:E8:8C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/J8F9LY7Arrc24EWFPga9_ZZy6Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
77.83.38.0/23
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:32:f6:30:f6:4e:30:f3:a5:5b:cc:34:f2:a4:78:f8:fa:91:
af:5c:7e:c1:12:9e:94:e2:45:cb:fe:69:1d:e0:76:6f:17:5d:
6b:d0:3e:72:ec:bf:d8:e8:9c:4a:2f:4f:3e:1c:e7:0b:8f:01:
ba:71:48:9a:f7:4a:0e:10:c3:3c:f1:3f:38:e6:1e:08:2f:8e:
3d:a0:4b:1e:12:48:ba:1f:57:fc:98:ac:d7:85:82:32:4a:7d:
17:12:66:3b:e7:eb:e7:fe:7d:1e:80:cc:7a:03:ce:69:c0:4b:
12:b5:ca:49:b9:88:c0:23:b7:ee:86:fd:64:29:96:f3:18:da:
36:95:a8:d1:15:05:91:56:9a:7a:10:99:44:3d:38:ff:cb:64:
83:54:d8:e0:cb:85:d8:d0:21:17:49:d0:93:60:5a:bf:3c:64:
32:aa:d6:03:cd:68:65:85:be:37:4f:00:39:0f:6d:c1:84:f0:
84:50:05:e1:b1:96:35:cc:45:31:cd:9c:e3:c7:76:7e:c2:49:
c3:dc:c1:db:ee:a4:4b:0c:ea:c5:2a:4b:37:d1:b9:1d:58:14:
6a:17:9d:8f:91:dc:9d:85:07:c5:c6:31:ff:5b:67:f1:49:b4:
12:4d:ca:b2:a4:46:ce:82:09:52:1d:8b:12:40:63:51:0b:70:
ca:5b:a9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org