Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZEoXC1c88c3Vp3gjdCMuk_dIfEE.roa
File: ZEoXC1c88c3Vp3gjdCMuk_dIfEE.roa (raw, json)
Hash identifier: l0wWk7Lwp3zXrPxr/9VCj3Uxl2p9YdCfx7IPFJ4QtAk=
Subject key identifier: 64:4A:17:0B:57:3C:F1:CD:D5:A7:78:23:74:23:2E:93:F7:48:7C:41
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0185EE6274A6D34044EC38EE4AD95DE2C769
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZEoXC1c88c3Vp3gjdCMuk_dIfEE.roa
Signing time: Thu 26 Jan 2023 14:01:47 +0000
ROA not before: Thu 26 Jan 2023 14:01:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 193.30.241.0/24 maxlen: 24
45.9.30.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ee:62:74:a6:d3:40:44:ec:38:ee:4a:d9:5d:e2:c7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 26 14:01:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=644a170b573cf1cdd5a7782374232e93f7487c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:26:f9:aa:8e:c3:67:cb:87:ce:47:75:9c:
81:2e:a2:63:b6:47:ea:ef:2c:4a:ed:8f:df:b5:f3:
a7:84:9f:b6:66:50:9b:5c:f2:2f:06:b4:44:5f:40:
54:ee:52:86:6a:03:a6:28:fb:4c:da:a0:fa:ca:b6:
ab:48:c7:ca:b4:1d:58:f6:7e:25:4a:45:fe:1b:f7:
de:1a:f2:e6:a1:ca:da:b7:75:37:47:c7:b2:d1:85:
0a:3c:af:ea:c8:3c:a1:89:dd:cb:8f:c4:cf:ba:39:
19:c9:70:ec:67:7d:c3:57:b9:a5:eb:f2:6a:d7:81:
69:7e:4e:10:e8:be:6c:a8:64:a1:75:3b:29:af:89:
5a:15:6b:0d:af:fc:23:63:d9:a1:14:4e:3f:f0:b1:
c9:be:20:a5:2c:b5:53:13:bd:74:ca:ee:bd:c3:2a:
14:2c:80:9e:fa:c6:b3:3f:be:a0:a6:84:0f:d8:fd:
e5:19:3c:a0:81:f4:72:9f:e7:c2:f0:3c:8b:f5:db:
5f:21:c6:57:b0:f6:48:27:0a:19:b4:67:78:26:c8:
9a:9b:3e:f3:c9:07:6f:34:9c:94:9a:7a:7b:8b:51:
56:fc:81:c4:24:35:b1:1f:bb:89:80:eb:41:b4:94:
9e:3c:b7:a9:67:5f:bc:0d:5e:66:b3:9d:95:72:ac:
48:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4A:17:0B:57:3C:F1:CD:D5:A7:78:23:74:23:2E:93:F7:48:7C:41
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZEoXC1c88c3Vp3gjdCMuk_dIfEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.88.137.0/24
45.132.180.0/24
193.30.241.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e0:bf:9f:aa:ce:d2:d8:ac:42:e2:60:47:41:08:ed:3b:f0:
3b:32:7a:41:a1:2e:33:49:d0:7f:7d:0d:6d:7a:1e:c7:0a:64:
be:97:7b:be:92:c3:06:84:6a:65:df:bd:df:76:ec:d2:03:46:
c2:db:8b:c0:2c:9d:e9:ea:c8:a7:0e:13:50:76:32:fa:59:d5:
02:1e:ac:a1:f8:b7:06:4d:4f:a7:de:24:72:ad:39:58:9c:8e:
93:1f:bc:21:a9:3a:be:48:b9:ba:59:92:73:cc:e4:30:e9:5e:
52:2f:65:73:c2:01:fa:3d:de:1c:e4:14:77:1c:ae:1d:c3:d0:
a8:c6:d6:39:d2:90:8a:b2:5d:f0:08:4c:03:2a:f1:d3:d2:3b:
fa:28:c4:12:40:7d:b7:d6:f5:c8:c6:89:b2:bb:27:27:b3:8b:
15:03:09:ec:1f:73:64:01:ff:db:c4:2a:4c:9b:53:fe:2a:ff:
c0:2e:98:f3:91:07:93:e7:3e:1c:45:7c:f7:fa:80:a1:4e:f4:
a3:5d:af:6c:a4:c3:e7:e1:25:74:b3:42:f7:51:81:eb:ba:45:
96:b9:e9:e9:24:de:ab:6e:15:18:39:86:d9:61:0e:41:95:c1:
5e:36:f4:2c:6a:14:6e:b7:42:c8:4d:ab:8d:95:6d:85:7a:1c:
39:f9:12:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org