Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/M-JSjBS4RsMzcMJpqwCmANTnozk.roa
File: M-JSjBS4RsMzcMJpqwCmANTnozk.roa (raw, json)
Hash identifier: +RrZugeYxgiJfIhUHLDLXCCyWbG9WmKFKuDmiG5RbXw=
Subject key identifier: 33:E2:52:8C:14:B8:46:C3:33:70:C2:69:AB:00:A6:00:D4:E7:A3:39
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018BEC4C8CC027F2493DD5692509F140698D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/M-JSjBS4RsMzcMJpqwCmANTnozk.roa
Signing time: Mon 20 Nov 2023 10:35:21 +0000
ROA not before: Mon 20 Nov 2023 10:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.30.241.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.57.41.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Nov 2023 11:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ec:4c:8c:c0:27:f2:49:3d:d5:69:25:09:f1:40:69:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 20 10:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33e2528c14b846c33370c269ab00a600d4e7a339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:b1:e0:24:88:cf:fa:0a:28:a1:84:e7:81:
9a:06:51:38:11:fd:02:24:88:b6:8c:b7:bc:04:c1:
38:3c:63:b6:97:38:e2:da:5b:ac:37:36:53:09:35:
62:78:59:08:62:0a:59:b9:0c:d3:e9:89:57:db:84:
a9:36:ee:a7:c0:cb:9e:04:13:a4:91:15:d2:c5:a7:
79:d8:cb:a2:f7:8b:c2:00:8c:e2:0f:e0:16:0b:7f:
aa:23:b9:a4:e8:37:5f:62:c3:d7:06:a9:c0:c8:1a:
56:87:e7:41:d6:3d:dc:3a:0d:1d:b5:c7:72:c0:99:
71:8d:62:22:e7:b1:91:f1:43:f4:2b:ac:7e:c6:78:
37:08:9a:a5:9f:7e:19:76:79:10:e1:c5:b2:ce:c9:
c1:8d:56:dd:2d:e0:2e:07:2f:66:ea:61:f4:ed:04:
b2:0f:64:bc:93:07:59:37:fd:16:05:75:47:8b:20:
1c:6b:00:9a:1b:23:3a:b5:bc:91:b0:3a:03:99:ee:
11:6a:ae:d7:c1:00:ff:c2:87:4b:41:19:cd:40:39:
c4:b6:11:49:3b:17:65:ca:20:58:1b:9c:1e:2a:51:
f7:f3:69:e0:c4:ce:2c:19:d6:e6:0f:16:e3:83:a8:
7e:d7:11:2d:64:3b:a8:f2:3f:92:66:64:33:f4:89:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E2:52:8C:14:B8:46:C3:33:70:C2:69:AB:00:A6:00:D4:E7:A3:39
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/M-JSjBS4RsMzcMJpqwCmANTnozk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.94.171.0/24
77.83.39.0/24
85.209.120.0/23
193.30.241.0/24
193.57.41.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:98:5e:08:64:00:1a:22:6e:ae:2e:52:8b:15:c2:9f:45:b8:
fa:25:cf:e9:ca:aa:64:6a:f3:be:48:63:0e:36:5a:ad:a5:00:
c5:3a:ac:33:f9:d0:5c:44:b3:c9:55:ac:d3:2e:c6:c6:53:da:
06:bf:91:e2:74:c0:41:bd:da:25:4c:f1:68:8e:11:93:77:e2:
59:d1:96:63:5b:2c:3c:70:11:e8:3b:ad:ee:3d:80:6a:21:1b:
62:cc:3d:49:6f:62:f8:ad:a2:de:08:22:65:93:aa:e0:90:9f:
36:5d:81:11:af:30:7c:47:a3:7a:5b:1c:ea:a5:0f:e4:0b:cd:
f5:90:09:9c:11:6a:9c:da:e8:09:cb:b7:fe:dc:e4:4e:93:e4:
57:ce:a1:3b:4a:de:45:00:95:7d:cb:56:3a:8b:b7:de:c2:00:
18:1c:82:ec:d6:f0:c8:48:57:31:f1:84:66:a8:bc:07:95:20:
70:7a:08:27:e7:b0:0f:2b:25:bd:78:d8:a3:58:21:1e:84:d4:
37:a2:f8:d0:d8:34:23:36:b3:ff:da:6a:ab:83:ac:6e:e3:b4:
29:95:76:b4:1b:8e:10:41:64:67:21:ad:fa:a7:48:59:12:a2:
7b:6b:91:09:1f:37:ee:66:8f:cb:49:65:77:dc:9b:6c:7e:c6:
a2:64:6a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org