Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JZcF2xwS4vBsHodMk0l4KBgPAW4.roa
File: JZcF2xwS4vBsHodMk0l4KBgPAW4.roa (raw, json)
Hash identifier: whH5IkHVZr2sSmtuwDw3uyi9LXjtvih3vmM6jpcBx5o=
Subject key identifier: 25:97:05:DB:1C:12:E2:F0:6C:1E:87:4C:93:49:78:28:18:0F:01:6E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A7F6704BC1AAFB92E22F244A5B2383D52
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JZcF2xwS4vBsHodMk0l4KBgPAW4.roa
Signing time: Sun 10 Sep 2023 14:02:52 +0000
ROA not before: Sun 10 Sep 2023 14:02:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198361
IP address blocks: 45.88.138.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7f:67:04:bc:1a:af:b9:2e:22:f2:44:a5:b2:38:3d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 10 14:02:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=259705db1c12e2f06c1e874c93497828180f016e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:42:2d:6e:60:de:da:c0:31:9c:ec:77:db:
20:01:b0:b3:aa:80:3f:bb:d5:98:6b:17:34:09:50:
94:56:04:61:0e:6a:7b:1f:f0:a5:29:f7:6b:f2:15:
37:ba:f2:5d:13:39:b5:cf:ab:d7:ad:93:4b:e7:0c:
0f:59:dc:a2:43:59:5f:a2:26:34:54:43:01:3e:60:
93:95:ed:69:05:25:11:73:3d:21:45:a7:c8:a4:9e:
99:bd:b5:cf:ae:c5:98:10:f0:21:75:d6:60:1b:f9:
28:38:ee:3a:4a:53:eb:1f:8b:cf:3c:f0:74:04:b7:
f0:e1:47:5d:63:8c:01:bd:6d:e2:5f:08:be:d2:c4:
9a:11:03:e1:1f:0d:32:d5:63:39:48:9c:4f:b2:87:
f4:47:16:08:13:ac:2f:5b:b7:58:16:e4:51:1d:29:
92:e7:5f:b5:02:b6:07:a3:63:62:5a:5f:42:ec:7d:
3f:35:7b:d8:77:97:30:bb:9d:35:53:e0:05:e4:7a:
27:f8:89:18:2e:2b:c9:e3:0c:f3:6d:b5:b0:08:9d:
2b:45:7f:7e:0d:81:ff:9e:c2:b1:9e:bb:21:a7:d2:
ed:ff:6c:e3:33:5f:5a:e2:7b:68:fc:96:8f:9c:d0:
2b:c8:42:69:42:71:19:5b:dc:03:07:1d:2e:f1:4f:
1a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:97:05:DB:1C:12:E2:F0:6C:1E:87:4C:93:49:78:28:18:0F:01:6E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/JZcF2xwS4vBsHodMk0l4KBgPAW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
77.83.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2c:b3:fa:00:8b:a9:44:76:ef:2a:55:56:2c:ad:96:c9:f2:
b5:01:0e:b1:36:fb:2c:31:78:d8:3e:e4:d8:65:da:99:22:23:
be:79:ce:4a:b5:95:49:f7:36:d7:92:68:ab:ff:74:64:3c:4f:
d7:8d:58:3e:c5:e4:13:9e:0a:ed:86:dd:28:4f:34:a6:57:05:
ca:5a:43:26:94:6b:27:be:47:b6:ff:f6:9c:2f:45:23:f7:e6:
77:1f:31:cb:5e:15:c9:55:2c:17:38:95:e4:fc:21:86:07:2b:
c8:52:d2:a5:09:11:b1:2c:2c:25:8f:31:ca:03:2d:e7:67:ad:
7b:4e:2b:d3:b3:04:39:63:73:57:82:b0:de:90:96:f4:41:23:
36:5f:5c:a0:dc:5e:ec:a2:75:ce:54:37:15:d1:18:71:2b:1e:
36:e9:f3:cb:dd:ae:b0:21:e8:08:71:6b:02:e3:73:ad:dc:6e:
52:6e:c0:c8:4e:64:77:e0:46:32:6a:58:3c:44:f2:27:04:67:
62:c3:f3:46:b8:58:38:d8:ce:1f:8b:cf:2b:41:5f:8a:58:5e:
d0:41:18:f8:32:2b:b1:4b:b8:e8:14:46:29:e0:6e:1d:0c:68:
d0:3a:d0:27:8d:3a:b8:73:37:90:a8:25:42:32:8a:af:8f:53:
44:e8:a6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 13:48:47 2023 by rpki-client on console-fra.rpki-client.org