Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/avk3saIinC_34-zVbbVAFTgJBd8.roa
File: avk3saIinC_34-zVbbVAFTgJBd8.roa (raw, json)
Hash identifier: BSTZhn9OhTrOt9jPGeK1wp6d/4C2pEyASeXzOyrH5Sk=
Subject key identifier: 6A:F9:37:B1:A2:22:9C:2F:F7:E3:EC:D5:6D:B5:40:15:38:09:05:DF
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018D1208AAA548E15184B4F9F6482F1F50AB
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/avk3saIinC_34-zVbbVAFTgJBd8.roa
Signing time: Tue 16 Jan 2024 11:29:34 +0000
ROA not before: Tue 16 Jan 2024 11:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203511
IP address blocks: 45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.151.2.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 14:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:08:aa:a5:48:e1:51:84:b4:f9:f6:48:2f:1f:50:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 16 11:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6af937b1a2229c2ff7e3ecd56db54015380905df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:23:92:74:7b:aa:10:c0:9a:10:89:3b:37:
5a:91:dc:75:b4:fb:bf:03:cb:df:5f:26:30:53:be:
54:ed:c9:a8:49:e4:2b:e7:55:d5:d9:43:06:79:74:
3b:97:8a:95:21:d5:b5:8a:f1:7f:8a:56:07:81:eb:
9b:15:6c:c2:b8:62:cf:b0:ff:19:b4:a4:88:7c:d8:
01:4d:51:43:0a:0e:72:2c:70:5b:8e:bb:1a:be:12:
49:80:91:64:a3:33:1f:91:fe:82:fe:e9:69:2a:c3:
90:f0:40:f0:32:bc:10:8c:4a:e3:0b:db:33:9f:98:
a3:82:e5:92:c9:10:73:8d:d8:5c:74:97:44:08:25:
71:a8:be:a6:26:3a:a7:ff:70:c3:90:87:ac:77:7a:
87:e8:e3:3c:2c:91:47:89:29:fd:38:02:e7:9d:83:
93:15:c4:2f:51:8b:72:b4:f7:af:25:cd:f2:92:40:
8d:60:cc:6c:07:a8:d8:f7:df:fd:0c:df:89:4c:34:
3f:5d:ed:b0:ea:ac:97:c2:34:bc:2d:b6:55:81:d1:
97:af:60:19:e1:29:54:25:3c:3a:96:a6:ae:56:45:
2d:4b:f6:cb:bd:55:3e:58:dc:f3:61:c2:af:c8:7e:
ee:50:0f:f0:ca:b0:32:73:4e:90:9d:36:00:84:33:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F9:37:B1:A2:22:9C:2F:F7:E3:EC:D5:6D:B5:40:15:38:09:05:DF
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/avk3saIinC_34-zVbbVAFTgJBd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
45.94.171.0/24
45.151.2.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
10:03:d5:6b:b8:8e:d2:ba:98:33:84:c9:e3:4a:81:07:31:41:
a2:34:bc:69:6b:35:ac:59:34:d9:12:cd:cd:d6:8e:db:f3:0b:
16:f0:8e:e5:64:c3:06:71:60:5f:cd:78:4c:a2:81:f6:82:0d:
c1:41:20:6a:d5:e5:3b:45:57:c7:3d:05:4d:4b:67:ab:0a:26:
4d:23:f1:fa:1d:36:68:ad:54:e0:de:c8:c2:a7:06:c5:9c:d9:
ff:9f:c8:a9:98:e4:da:a0:64:25:e3:63:f2:8e:d7:43:5e:e3:
2a:52:9a:c6:c7:20:47:1e:35:3e:fc:37:59:9a:63:42:83:89:
f6:5d:d1:f4:8e:3b:76:00:ba:f7:f4:29:c5:9e:cd:c2:e0:e5:
ec:15:2d:6c:ca:3d:bc:10:4a:13:82:6a:c5:d5:89:c8:3d:0e:
2a:c0:7b:12:50:f4:28:c5:a7:a9:0e:6c:da:a6:74:dd:2e:5d:
9a:fb:3e:04:b4:62:e4:74:d8:a8:63:11:b5:ad:b4:d5:de:c9:
a0:d7:b7:d2:00:a8:d8:a4:5c:57:1a:57:a7:d1:0e:34:e1:8b:
a2:6e:58:5b:07:cd:91:7e:9d:a4:32:b7:ea:b0:50:03:c0:b9:
01:bb:1e:45:08:c5:cf:d2:4e:d6:69:f5:29:b0:5e:31:e4:c6:
ab:e8:73:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 19:12:48 2024 by rpki-client on console-fra.rpki-client.org