Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JTf0gjoaMWv3W4CdVlEysvnjjXU.roa
File: JTf0gjoaMWv3W4CdVlEysvnjjXU.roa (raw, json)
Hash identifier: r2wkZwfW3aeKiSAvC+gqxCgGLHfZYMFG/bYbfj6Xcrw=
Subject key identifier: 25:37:F4:82:3A:1A:31:6B:F7:5B:80:9D:56:51:32:B2:F9:E3:8D:75
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F48CADF3A916468A75A7301F5E937
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JTf0gjoaMWv3W4CdVlEysvnjjXU.roa
Signing time: Tue 02 Jan 2024 04:29:45 +0000
ROA not before: Tue 02 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 45.88.137.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 17:59:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:48:ca:df:3a:91:64:68:a7:5a:73:01:f5:e9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2537f4823a1a316bf75b809d565132b2f9e38d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7d:94:b6:5e:0b:9c:03:69:bc:0e:dd:12:7d:
5b:f5:e0:28:dd:78:dc:34:f7:9b:0b:12:be:df:b5:
7a:9d:9c:8c:5f:de:14:42:be:36:d6:94:92:47:89:
a7:fa:d5:b0:ea:04:88:6c:7f:dc:6d:96:60:ed:ad:
76:fe:0e:64:a3:65:13:69:b6:77:20:88:da:fc:c5:
d7:53:27:56:87:de:a1:6e:ad:d2:7d:6b:fa:88:a4:
79:65:05:9a:15:0f:34:24:62:62:33:65:aa:62:bc:
4c:16:ea:e7:14:8c:63:03:40:69:1e:83:9a:62:22:
18:f9:63:70:b8:2e:5b:d3:d2:8b:a8:ec:47:9c:11:
04:bf:78:23:f3:d0:c1:e2:c3:2c:e5:db:79:85:9a:
91:0d:d6:57:dc:76:cb:c7:09:9e:35:d0:03:a7:a6:
fc:de:21:40:de:38:0e:4b:bd:36:cc:6a:ed:1d:77:
91:62:f8:de:b1:f5:17:81:31:af:4b:44:83:ad:da:
c2:93:e8:69:c2:03:8a:98:a6:f9:0a:98:75:aa:3f:
a2:d1:f8:b0:59:4f:39:50:1b:36:9a:7f:e3:f1:94:
51:16:f9:56:bf:9c:bc:e9:cb:e9:8c:f7:a8:21:82:
16:8a:e1:b9:49:65:35:17:d4:a0:a6:59:2d:7e:c3:
f0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:37:F4:82:3A:1A:31:6B:F7:5B:80:9D:56:51:32:B2:F9:E3:8D:75
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JTf0gjoaMWv3W4CdVlEysvnjjXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.137.0/24
195.62.24.0/24
Signature Algorithm: sha256WithRSAEncryption
06:74:d5:9b:5f:93:9b:8d:02:9b:75:ed:9a:35:37:98:28:03:
4d:1d:3d:12:49:b3:3e:31:56:bc:4b:59:d2:77:fe:22:86:b0:
e7:e3:3f:3e:a9:10:e5:09:43:d8:de:24:52:70:d5:e7:44:4c:
0a:23:ea:5a:34:20:44:3c:2d:6b:fc:6b:8e:1d:62:b5:2f:8d:
29:b4:08:b5:80:0d:22:cf:00:06:aa:bf:99:78:af:4a:95:0c:
b0:e1:3e:74:e2:e3:ea:39:c9:37:a2:e1:d0:d7:71:a6:12:e5:
7f:f0:08:a7:cd:88:09:be:1b:9f:b9:15:80:5f:d0:47:1a:c9:
d9:50:38:3f:f7:54:74:a8:82:49:bd:65:6a:86:89:a2:e5:1c:
e8:51:bf:0f:46:86:30:50:03:11:98:60:e6:95:ce:9f:a8:70:
04:82:16:17:85:91:1b:df:9b:a4:92:27:be:5c:c4:98:77:09:
92:37:eb:54:12:b4:0c:bb:e1:bf:0c:99:00:db:22:25:07:87:
92:c7:66:83:ed:e8:b7:ae:20:78:2a:e6:91:b4:83:82:e8:7d:
ae:51:8a:8e:14:07:15:fe:53:66:94:cd:7f:45:9b:10:13:db:
50:0c:61:4f:45:8b:f5:68:3b:69:14:f3:ee:58:39:69:cb:c8:
a5:f5:b5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:41 2024 by rpki-client on console-fra.rpki-client.org