Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/fri02DJIynOCudXQX26Hst_SAlw.roa
File: fri02DJIynOCudXQX26Hst_SAlw.roa (raw, json)
Hash identifier: /I22OsPuycRuHxgNog6ssJ04QEh0BfVwo+eb8AHZ6Fs=
Subject key identifier: 7E:B8:B4:D8:32:48:CA:73:82:B9:D5:D0:5F:6E:87:B2:DF:D2:02:5C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A7E8B4AF17876ED353398ADFD3DCE187F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/fri02DJIynOCudXQX26Hst_SAlw.roa
Signing time: Sun 10 Sep 2023 10:02:52 +0000
ROA not before: Sun 10 Sep 2023 10:02:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Sep 2023 17:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7e:8b:4a:f1:78:76:ed:35:33:98:ad:fd:3d:ce:18:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 10 10:02:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7eb8b4d83248ca7382b9d5d05f6e87b2dfd2025c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f4:fa:bf:5c:07:2e:30:bb:a3:b7:ea:61:e1:
64:43:0a:77:f0:8c:a7:2e:2b:12:6a:d6:ef:5d:84:
b2:e1:e7:e0:9e:02:07:e9:81:4d:be:fa:70:ed:e9:
15:3a:58:6a:73:fb:1c:ad:7f:32:b4:ae:4a:62:7b:
13:80:9c:05:1e:c3:21:01:9f:1b:57:ed:64:53:f0:
b9:0e:ee:87:d4:0f:78:50:31:72:0a:fd:d5:8b:c1:
ed:ab:12:89:44:dd:e8:fc:3b:e1:df:e0:09:a2:9c:
43:92:3b:77:f6:1f:b3:08:80:76:0b:70:03:f6:ad:
61:ca:7c:84:a8:1e:45:98:f8:f3:e3:14:b3:0d:0b:
1c:ea:07:9a:98:b5:3b:ac:e5:bf:5d:92:e9:d7:5f:
8c:d7:70:94:ff:b1:dd:1a:02:1c:c4:c8:08:0a:58:
f1:5d:8a:dc:c6:02:7d:07:4d:ef:78:d2:9b:92:36:
46:70:08:a9:41:80:ee:c4:dd:b8:54:a9:1a:19:b3:
af:e3:ba:8f:72:18:28:f8:2c:10:d5:57:49:74:b6:
02:9e:fb:15:a3:4e:c9:6e:d9:44:21:e8:ec:f8:5e:
d9:df:d3:c2:d0:e3:f5:8e:bc:24:c8:44:a9:31:34:
bf:32:ca:38:1e:8f:e9:80:d7:bb:31:44:cf:7d:7b:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B8:B4:D8:32:48:CA:73:82:B9:D5:D0:5F:6E:87:B2:DF:D2:02:5C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/fri02DJIynOCudXQX26Hst_SAlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.138.183.0/24
77.83.39.0/24
85.209.120.0/23
195.62.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:68:5f:ad:1e:ce:8a:a7:52:06:82:19:8a:91:7f:47:c7:e7:
bd:3b:e0:a0:3e:0c:e9:6c:c6:23:a1:7a:0f:1d:86:57:dd:47:
98:de:75:28:26:84:25:bb:55:1e:7c:65:19:58:0c:76:07:63:
2b:68:3d:62:9a:8b:97:d6:b9:04:9e:c3:ce:e4:6e:e1:26:f8:
0b:db:78:69:a6:41:73:3a:29:2c:59:c9:39:90:1a:ba:dc:8c:
75:f9:74:cc:a2:e4:53:37:90:68:f5:6f:19:f7:a2:ee:e4:2b:
e3:5d:55:03:93:02:4c:2a:f5:1c:fc:eb:8a:33:32:94:24:0f:
d0:69:10:29:d9:99:70:33:7e:c6:c8:0c:2d:3f:77:17:6c:ca:
19:cf:5b:45:c6:2a:08:c4:ee:da:23:2e:c5:64:f8:ff:4f:20:
e9:9e:50:35:d8:fc:2a:00:55:69:bf:df:f6:8f:e2:8e:f7:6b:
73:58:3a:9b:4b:29:86:fb:a7:0b:6c:71:e7:d0:55:a6:d6:aa:
22:da:91:75:34:96:9c:f6:59:f9:e9:3f:72:42:ea:49:f6:1d:
58:fd:b1:8c:93:2c:9a:8b:95:97:bf:39:0f:21:6e:f6:a5:db:
5c:bf:32:e1:14:09:11:23:df:1a:bb:8e:54:80:33:6c:40:66:
aa:38:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org