Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/V2Ia_pLgE1yQTdu4Bn7DjGRnBeQ.roa
File: V2Ia_pLgE1yQTdu4Bn7DjGRnBeQ.roa (raw, json)
Hash identifier: ZXx/wV52N1m30eJyLjtAfBjjA58sYhwkhnWpAAlANrE=
Subject key identifier: 57:62:1A:FE:92:E0:13:5C:90:4D:DB:B8:06:7E:C3:8C:64:67:05:E4
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01876A9240BC077A48801C869D2395383595
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/V2Ia_pLgE1yQTdu4Bn7DjGRnBeQ.roa
Signing time: Mon 10 Apr 2023 09:49:42 +0000
ROA not before: Mon 10 Apr 2023 09:49:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:92:40:bc:07:7a:48:80:1c:86:9d:23:95:38:35:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 10 09:49:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57621afe92e0135c904ddbb8067ec38c646705e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:89:8a:96:ea:15:2b:f1:b4:e9:04:5b:07:
ca:b0:f5:b6:a4:67:1a:ff:33:c5:b3:40:a6:0b:73:
f7:d1:79:c7:be:ac:66:2a:54:76:81:e1:9e:20:cc:
98:6c:66:85:8a:a0:7c:3f:c1:2b:27:41:29:b5:f1:
c4:6e:44:48:45:27:5c:78:1a:e4:4c:56:df:d7:dd:
3f:20:96:8a:b1:3e:d8:7d:94:fa:b7:db:2a:98:87:
19:81:51:3e:00:6b:c9:a2:47:0e:98:6e:95:d4:ac:
e0:52:54:6d:8c:a6:af:ba:54:74:96:c0:19:f0:84:
02:fb:e4:ea:5e:2c:43:76:2c:0b:5c:9a:69:6c:38:
96:be:05:ab:c0:b8:11:0a:1e:f5:e5:99:8d:7e:5c:
bf:e6:18:e5:bd:91:69:68:93:9b:2b:f7:07:b1:b5:
94:83:de:0c:00:a1:8b:0a:5f:bc:c6:aa:d8:dd:1b:
fb:a3:d1:bd:64:fa:74:10:74:59:93:f2:53:a6:c1:
d3:15:8e:f4:8b:20:20:c4:0a:e8:3d:8c:e7:e4:00:
87:9b:41:ee:cc:64:0f:08:87:64:70:6a:76:65:12:
3b:96:b1:fe:c8:1f:1a:c8:b8:f0:61:3f:33:af:e0:
50:fb:75:56:15:c7:eb:14:2c:a5:af:f9:30:fe:8f:
36:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:62:1A:FE:92:E0:13:5C:90:4D:DB:B8:06:7E:C3:8C:64:67:05:E4
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/V2Ia_pLgE1yQTdu4Bn7DjGRnBeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
77.83.38.0/23
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
be:a1:3b:db:09:30:77:3e:7e:07:5c:be:98:e7:61:95:d9:2d:
92:9d:77:32:d5:0e:15:15:da:cb:17:a0:3a:5b:1b:a1:2b:62:
1e:4b:77:43:25:52:e0:04:17:54:f6:86:e0:ab:e4:75:33:64:
df:a0:20:b1:98:8d:3a:56:83:4a:b6:0b:31:d7:19:a7:5d:53:
38:57:2c:02:ff:d3:d8:79:da:29:1b:10:53:cc:e8:cc:00:76:
45:fc:3a:20:15:30:b1:56:93:67:87:8d:f9:8f:04:09:1c:44:
c2:3c:2f:82:ff:27:da:f4:bf:3b:4e:99:f8:f8:f9:2e:a3:d4:
17:f1:6b:94:60:f6:35:df:9b:58:55:fa:3d:5f:a0:33:c2:5a:
6d:1e:fa:87:2a:ce:0d:18:95:d4:8c:2a:2d:6e:dc:51:83:14:
5e:df:b3:df:de:16:c5:88:30:6d:91:b4:e3:7c:8b:0e:c8:c7:
d3:84:78:fb:5f:8a:ff:2e:ba:00:97:ac:df:80:5e:e2:1b:b9:
b0:e7:94:d6:d5:3a:8b:61:dd:ee:c0:2b:ed:66:81:0d:36:12:
f0:2a:ab:b9:54:55:0e:ff:d8:48:92:c2:c3:0f:7b:f7:9d:21:
c0:4a:3f:a5:7e:c1:3b:7b:ae:7c:83:05:f2:e5:79:12:24:a5:
4c:9f:ed:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org