Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/c_oNqgGJ0FkD0fe7iWWHwPs9S78.roa
File: c_oNqgGJ0FkD0fe7iWWHwPs9S78.roa (raw, json)
Hash identifier: /0fYvA+NkWvFyVtbIF1R3EEcz1Ri3lMUdXUwDOS+XA0=
Subject key identifier: 73:FA:0D:AA:01:89:D0:59:03:D1:F7:BB:89:65:87:C0:FB:3D:4B:BF
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01877E7EA5A2CB96200B641949E48F88D5A8
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/c_oNqgGJ0FkD0fe7iWWHwPs9S78.roa
Signing time: Fri 14 Apr 2023 06:40:41 +0000
ROA not before: Fri 14 Apr 2023 06:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
45.88.136.0/23 maxlen: 24
85.209.122.0/23 maxlen: 24
194.242.97.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:7e:a5:a2:cb:96:20:0b:64:19:49:e4:8f:88:d5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 14 06:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73fa0daa0189d05903d1f7bb896587c0fb3d4bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:2b:d3:c9:b0:72:44:84:ad:a9:7a:f1:4b:
58:e6:c6:d0:69:0c:f6:81:a6:d6:5a:8b:ff:1c:d8:
57:fa:38:df:84:bc:eb:99:27:26:22:d6:cf:1e:c0:
aa:95:85:09:ad:5f:81:d3:0d:af:4c:f3:dc:da:12:
f7:76:80:54:a5:10:1a:e5:01:f1:95:11:9c:5a:15:
5e:de:c5:ed:48:b7:bd:3e:41:71:a1:8d:27:63:15:
33:10:2d:27:23:5a:32:6c:75:14:83:1d:7e:09:b1:
b5:5a:2c:b1:04:d3:f2:1d:10:8c:87:cb:11:3a:a5:
0e:2c:6d:aa:a7:7a:a0:1d:bf:63:7a:3e:33:95:a5:
e0:78:df:79:e3:64:81:f3:84:1e:54:e8:b2:f3:51:
32:f9:57:6f:d6:57:e7:36:48:13:d3:10:90:27:47:
89:ff:66:a6:3f:ff:5c:1a:f3:67:92:99:48:a9:65:
e9:02:6c:9c:d3:14:fe:bc:44:6a:8e:67:b7:1e:39:
dd:ae:b8:c5:3e:93:43:64:08:c2:1b:dc:2a:e6:70:
dd:e1:2f:41:33:cf:59:5f:f3:71:f2:cf:4f:fb:90:
e2:71:be:89:22:04:29:f5:83:45:c6:80:98:2d:64:
d5:a0:e4:87:bd:df:15:2f:bd:f0:86:c0:63:5d:b1:
62:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:0D:AA:01:89:D0:59:03:D1:F7:BB:89:65:87:C0:FB:3D:4B:BF
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/c_oNqgGJ0FkD0fe7iWWHwPs9S78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.13.189.0-45.13.190.255
45.81.112.0/22
45.88.136.0/23
45.132.181.0-45.132.183.255
45.144.212.0/24
45.151.3.0/24
85.209.122.0/23
194.242.97.0/24
195.177.92.0/23
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:d4:f5:4b:e4:7b:d9:2a:14:32:1f:38:e6:de:91:d6:2e:e7:
23:4a:5f:35:97:93:d4:6d:4e:0c:1a:33:45:61:d5:56:81:a0:
38:ef:d9:0b:c8:8c:06:ae:a5:a3:87:75:8c:3d:48:be:32:21:
1e:d5:22:cd:cf:58:88:6d:c9:13:8c:87:60:58:8b:c0:a8:82:
3d:4e:d7:3f:49:27:cf:b1:16:8b:42:68:69:06:2b:cc:53:99:
e2:b0:fc:6c:e3:15:05:7b:93:bc:43:80:03:89:36:06:1e:c6:
59:69:23:37:2f:a2:10:f2:86:6d:e5:0e:92:65:fd:88:4f:7a:
30:d5:53:b5:ac:f5:48:71:30:70:fb:c0:05:3c:48:af:8c:1c:
ad:3c:31:9b:c2:10:6e:a5:8a:5f:bd:be:83:49:ed:86:71:9c:
f5:c9:25:f9:e5:60:9d:df:60:97:59:c2:0c:68:3e:9a:fb:38:
31:34:70:26:9b:b2:6d:c1:10:e5:0e:da:28:74:46:39:1f:69:
8e:54:47:bf:42:57:64:7a:ec:1c:27:59:4d:d2:7f:38:8b:9e:
c1:18:53:0a:0b:ca:b4:ab:57:6d:d9:b7:35:6f:dc:d1:34:5f:
ce:de:c1:85:9d:e7:58:73:5c:22:5c:ae:57:5f:67:8c:ea:5f:
79:6d:d1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org