Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Y1Kii32Cq48V48E2BLVuKu0vzus.roa
File: Y1Kii32Cq48V48E2BLVuKu0vzus.roa (raw, json)
Hash identifier: HqpMSaNzQxhg9vEp1gEN9rJ0vPknODKO5fsBe98XYrg=
Subject key identifier: 63:52:A2:8B:7D:82:AB:8F:15:E3:C1:36:04:B5:6E:2A:ED:2F:CE:EB
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B81C028CDE8345A64CD0085F423D101E2
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Y1Kii32Cq48V48E2BLVuKu0vzus.roa
Signing time: Mon 30 Oct 2023 18:02:16 +0000
ROA not before: Mon 30 Oct 2023 18:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202972
IP address blocks: 91.223.110.0/24 maxlen: 24
45.9.30.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.81.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:c0:28:cd:e8:34:5a:64:cd:00:85:f4:23:d1:01:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 30 18:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6352a28b7d82ab8f15e3c13604b56e2aed2fceeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:fe:b6:9c:f5:ed:ef:bd:29:16:4d:ef:56:
63:d9:62:64:95:54:f5:37:8a:a9:8d:76:1c:27:19:
d2:27:29:b7:b8:57:f5:3d:24:75:d6:93:b5:57:76:
39:78:21:a2:af:8b:44:5f:09:21:d2:23:80:4f:cc:
0c:f3:eb:83:81:4e:08:eb:79:15:fe:07:be:95:39:
31:43:73:d0:5f:f0:72:6a:77:b2:bb:38:b4:17:64:
5c:3c:ab:25:3d:7c:61:82:9a:fb:4f:c8:12:ae:25:
83:58:3d:50:3b:1d:c7:64:31:cc:96:b8:d9:42:6a:
33:8e:15:68:54:67:69:e9:8a:e6:fa:5f:92:52:ba:
77:34:85:21:40:fc:c4:f2:16:2d:af:34:68:1f:05:
00:8d:2e:e1:ba:3e:70:56:75:17:87:3d:6c:a9:86:
9a:cf:68:08:4d:99:2c:41:eb:b6:d4:07:b3:8a:b3:
a5:a6:39:7e:82:fe:6e:26:dc:9c:46:b8:20:f3:eb:
b6:90:db:8d:28:9f:c8:c6:6e:28:a4:2c:98:a3:92:
7f:08:5b:9c:53:0e:a7:ab:32:8b:64:84:f8:48:7e:
25:31:2c:3b:67:84:1d:f1:ce:06:a4:36:72:57:e5:
68:a0:18:4f:bd:93:7b:45:c8:6b:c9:a4:d8:b5:50:
e9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:52:A2:8B:7D:82:AB:8F:15:E3:C1:36:04:B5:6E:2A:ED:2F:CE:EB
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Y1Kii32Cq48V48E2BLVuKu0vzus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
45.9.30.0/24
45.81.112.0/24
45.132.180.0/24
91.223.110.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b5:dd:32:f0:26:61:ef:b9:31:38:94:28:31:75:9e:06:4a:
e4:dd:7f:70:73:44:88:75:13:66:81:73:10:34:57:c2:43:63:
a4:4c:64:74:4c:fa:f2:6a:70:d0:52:5b:75:7a:66:5e:a4:14:
d2:57:da:62:41:3d:54:00:70:c8:35:f1:cd:9f:fb:3f:18:89:
80:58:1d:b3:2d:6f:97:f7:9e:e9:d3:71:04:3e:92:38:77:36:
b4:8c:d0:95:33:9c:56:46:4e:f1:d1:e3:19:ad:dd:1d:a8:eb:
98:85:7e:3b:01:c3:29:43:6c:a3:2a:ca:1a:0d:e7:f8:4e:38:
4b:0d:de:7c:a3:c7:9d:a7:3d:b7:22:a8:84:ae:24:48:d7:7f:
b6:06:6b:5b:8b:44:b9:58:db:5f:83:b4:99:5c:50:5e:85:70:
8e:86:de:b4:6e:05:35:f6:7e:a7:26:24:6f:8c:ee:46:78:99:
30:68:c0:7c:ac:ce:ae:4a:7c:c5:5a:95:06:f4:92:7d:48:7b:
4a:25:95:75:33:89:f1:ec:30:00:b1:88:6a:0b:9f:22:4a:5a:
fd:b9:40:68:e1:72:0a:5c:3a:a0:32:52:7a:65:12:ec:c9:23:
fe:92:00:24:16:93:f5:0d:1e:46:91:82:01:8f:2d:29:dc:6a:
88:60:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 12:07:32 2023 by rpki-client on console-ams.rpki-client.org