Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/PE6IazrBqXdxaUzW2zQaJ2pcfT4.roa
File: PE6IazrBqXdxaUzW2zQaJ2pcfT4.roa (raw, json)
Hash identifier: x//d/VdDnTVn+RzY4D5ap3RvQrtVLWQU+bZ+TtFkN4k=
Subject key identifier: 3C:4E:88:6B:3A:C1:A9:77:71:69:4C:D6:DB:34:1A:27:6A:5C:7D:3E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A800DA4E5BD2B0F00569B5E34FBC9AE03
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/PE6IazrBqXdxaUzW2zQaJ2pcfT4.roa
Signing time: Sun 10 Sep 2023 17:04:52 +0000
ROA not before: Sun 10 Sep 2023 17:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:80:0d:a4:e5:bd:2b:0f:00:56:9b:5e:34:fb:c9:ae:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 10 17:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c4e886b3ac1a97771694cd6db341a276a5c7d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6e:ac:d5:87:93:31:ca:cb:7b:ae:2a:21:87:
11:ae:0e:69:20:4e:53:0e:13:ef:40:16:28:cc:2a:
b2:6c:5c:58:09:6e:ce:11:2c:37:d9:57:63:16:b1:
c7:95:59:f9:98:16:f6:80:a3:3d:51:76:66:77:06:
7d:eb:d3:29:25:28:dc:9a:f1:d8:a5:c5:45:25:29:
75:4d:37:bb:4d:dd:77:23:b0:6e:f3:a6:6f:0e:cc:
38:6c:33:85:bd:2c:d7:c2:59:9d:af:20:d9:2f:f2:
c5:4b:21:e9:db:34:33:d7:bd:31:29:63:35:7d:6f:
7d:a2:39:cf:49:9c:64:45:8b:cc:40:fe:cf:a2:8a:
8f:0e:37:7c:52:4c:49:c8:63:41:2c:6f:0c:a1:9d:
c5:dd:78:e6:43:4b:79:b9:9e:18:2f:db:e0:ac:02:
c7:32:01:b2:e1:27:68:f8:f0:30:02:1e:22:e6:2b:
23:7a:ce:0a:20:c4:3f:c3:ec:68:34:2c:d3:75:88:
d2:c2:55:09:a5:89:c5:46:e9:ae:3e:e5:f5:e4:75:
15:f1:34:78:ce:53:34:21:41:00:80:f3:15:84:e0:
66:4c:c1:bf:ed:56:76:3c:3d:f4:9c:71:86:5a:58:
57:f3:64:ed:1d:ea:c2:01:85:39:39:a6:a7:c1:b4:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4E:88:6B:3A:C1:A9:77:71:69:4C:D6:DB:34:1A:27:6A:5C:7D:3E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/PE6IazrBqXdxaUzW2zQaJ2pcfT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.138.183.0/24
77.83.39.0/24
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
99:72:bb:61:c3:0f:4e:6e:9e:32:57:c8:d0:7d:c7:46:d3:2c:
23:64:a6:7f:20:b8:48:32:bf:ef:b9:6a:ee:f0:87:e3:94:ec:
44:bb:17:0e:dc:70:98:f0:5b:95:a2:e8:02:f7:a8:c2:62:7c:
29:22:1b:35:8c:13:e6:44:d0:28:2b:60:f3:09:b5:bd:86:ee:
06:c3:24:d8:cb:fb:6e:00:99:11:90:c1:e6:e2:d2:dc:e7:be:
e2:fa:9e:25:08:e3:d4:76:27:28:86:0c:64:42:5d:68:0b:11:
28:c4:90:74:b3:82:16:e8:46:94:8f:e9:d0:ec:b7:5c:7a:f9:
d5:6a:5a:38:b7:0f:e5:94:3b:66:9a:a8:de:24:76:13:f8:5f:
31:43:4d:21:b4:2d:6d:e0:b5:da:3c:18:32:7a:8f:32:e4:2b:
c0:db:77:fd:e5:ab:c3:3a:2e:a7:33:89:78:b8:93:36:98:64:
47:24:c9:b6:c7:96:84:e6:e5:0d:36:9c:19:be:2b:7d:ee:9b:
50:b4:0b:be:20:35:26:2f:50:8d:0f:3d:5a:fc:46:d5:91:08:
06:0a:29:63:d4:00:f2:53:9b:1b:ec:26:ff:51:a7:47:55:7e:
6b:58:67:7d:3c:9c:70:ed:9a:2c:b4:af:0c:99:fc:25:fa:18:
db:48:1d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 21:46:47 2023 by rpki-client on console-fra.rpki-client.org