Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ddjgW7zF0Ep0sP6sjZGWz-fSyd8.roa
File: ddjgW7zF0Ep0sP6sjZGWz-fSyd8.roa (raw, json)
Hash identifier: cJ4PIs1ZKq3rORERAkmOJNGTDlvgDJ8ENARITMXvs+Q=
Subject key identifier: 75:D8:E0:5B:BC:C5:D0:4A:74:B0:FE:AC:8D:91:96:CF:E7:D2:C9:DF
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B204F63F2127893D52D57399C560E6642
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ddjgW7zF0Ep0sP6sjZGWz-fSyd8.roa
Signing time: Wed 11 Oct 2023 19:55:55 +0000
ROA not before: Wed 11 Oct 2023 19:55:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.94.171.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
2.56.108.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.144.213.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:20:4f:63:f2:12:78:93:d5:2d:57:39:9c:56:0e:66:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 11 19:55:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75d8e05bbcc5d04a74b0feac8d9196cfe7d2c9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:79:b2:e7:c3:c1:58:5f:3e:7c:88:33:98:e6:
e7:0c:23:37:c6:ab:28:33:3a:a3:3c:99:30:4a:d2:
09:7a:9f:c1:51:77:0b:ec:b0:e0:8c:9b:50:29:47:
bc:9e:9e:5c:bb:2a:02:4a:7d:ca:db:6d:12:ce:f3:
8c:ea:37:46:f5:01:94:c4:57:38:b7:4c:7e:9e:02:
58:6e:72:07:12:71:e0:84:ea:70:3b:0a:61:2b:2e:
ef:55:59:81:67:09:44:bf:3f:10:ed:fe:56:69:4c:
d9:01:57:47:33:68:ae:67:11:64:93:12:77:a6:e7:
f1:0d:8e:68:81:0d:54:ce:93:70:ee:59:a9:b1:bc:
15:06:6c:a9:4e:a4:46:80:c6:b9:f7:38:87:d7:df:
7b:c1:47:93:f5:f6:42:9d:1d:99:f2:11:8c:8c:a5:
01:47:2a:af:26:55:3b:58:b2:43:f9:a8:d7:a5:5b:
37:a4:83:18:92:9c:9d:08:12:40:2c:57:27:8f:f6:
85:46:94:b5:c4:87:c9:e2:bd:a2:44:a1:e1:8e:5d:
79:30:65:e9:75:91:36:53:f8:37:03:c5:30:0d:a9:
98:ac:25:09:a0:8e:d5:cd:ed:d0:7b:37:11:98:ba:
e7:57:44:ee:21:6e:8c:c5:6a:29:11:6d:08:a7:94:
78:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D8:E0:5B:BC:C5:D0:4A:74:B0:FE:AC:8D:91:96:CF:E7:D2:C9:DF
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ddjgW7zF0Ep0sP6sjZGWz-fSyd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0-2.56.110.255
45.81.113.0/24
45.81.115.0/24
45.88.139.0/24
45.94.171.0/24
45.138.183.0/24
45.144.213.0/24
77.83.39.0/24
85.209.120.0/23
195.62.24.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:91:75:b6:30:0e:5b:ba:f4:15:dc:7d:ce:e2:ac:ef:bc:ab:
25:c3:b7:db:be:ed:05:1d:55:ac:1e:cf:6b:e6:cf:98:05:fa:
00:75:4d:54:8e:2d:cc:58:58:9f:c3:c1:a6:49:6d:16:18:a5:
85:1a:37:43:65:e3:a5:0e:ed:7a:df:77:43:69:d8:5c:1a:14:
b4:81:9e:57:0e:c1:50:55:ac:20:fd:21:13:02:c7:d0:da:86:
3b:b1:14:62:9f:c5:bf:3f:d6:07:70:d2:2f:7d:ee:62:da:be:
49:8f:66:e2:6c:ec:ed:7b:f2:84:8c:3a:7e:db:f3:5e:35:a5:
0e:c0:02:d9:20:31:cc:8e:3e:db:6b:6d:6f:15:69:51:2b:73:
01:e1:75:df:92:5a:ec:82:f0:a0:6c:f6:92:92:7a:0b:bd:6f:
77:62:b0:4a:b5:83:53:95:25:d4:4b:96:c9:90:2e:07:ed:1f:
d1:35:7e:c8:ff:fd:84:65:53:51:ba:db:ca:69:48:48:a4:2d:
0e:b8:0c:d3:bd:e7:6d:08:49:62:f9:9d:7c:55:ec:58:90:12:
11:59:c7:d3:e9:e9:10:90:46:d3:3a:4a:a7:16:91:37:4c:3e:
87:53:68:23:1b:58:b3:9b:50:77:2c:52:e6:9f:b4:eb:4c:28:
49:00:ec:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 21:35:49 2023 by rpki-client on console-ams.rpki-client.org