Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/kJNffdl1Rdw4bpW1aR7gOiuZhz4.roa
File: kJNffdl1Rdw4bpW1aR7gOiuZhz4.roa (raw, json)
Hash identifier: f5vPUYLpNzaMvAEJaSSqHcVRGpHY1FQHm2Y1yKxJH+A=
Subject key identifier: 90:93:5F:7D:D9:75:45:DC:38:6E:95:B5:69:1E:E0:3A:2B:99:87:3E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018968E50713986D0DF86E52BB529C360604
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/kJNffdl1Rdw4bpW1aR7gOiuZhz4.roa
Signing time: Tue 18 Jul 2023 12:06:27 +0000
ROA not before: Tue 18 Jul 2023 12:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.57.41.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:e5:07:13:98:6d:0d:f8:6e:52:bb:52:9c:36:06:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 18 12:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90935f7dd97545dc386e95b5691ee03a2b99873e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:40:9b:42:4f:15:b2:ff:03:78:6c:8d:2f:
b5:cc:9c:a8:31:09:a1:e2:72:07:fe:6b:a8:32:4a:
f0:5d:ec:a3:bc:48:c4:2c:31:b8:da:fb:f4:a2:ed:
64:aa:12:e8:b1:71:a9:5a:70:b7:8c:aa:d4:ce:3f:
7e:b7:9a:71:ab:f1:52:06:45:30:37:b5:b3:dc:f1:
8b:e4:9b:13:43:26:aa:b8:65:6d:a3:97:7e:a9:d4:
a4:e4:35:ed:b0:7b:a3:5e:42:b6:32:42:6c:b8:64:
e4:52:50:d5:ba:a1:74:7b:4b:68:b2:d7:c2:c7:0e:
35:ad:91:f6:97:3e:2d:85:50:d6:2a:c9:82:32:c0:
30:78:f4:d5:d9:89:ee:ed:9c:24:92:b2:1f:39:06:
33:79:fc:ed:83:88:2a:97:c1:24:4d:bb:d5:8a:dd:
07:e6:f2:65:c0:30:e3:65:ec:4d:b5:bc:b8:56:a0:
51:2b:12:89:38:40:15:21:06:91:9e:58:3b:f7:1e:
dd:bb:76:d3:44:2f:c8:63:83:57:69:f9:ed:0c:f9:
43:ff:1b:76:c4:98:fb:f0:26:ce:75:4c:6a:47:63:
da:4d:ba:3d:dc:02:49:21:57:70:6d:f1:af:6d:f8:
e3:62:e6:6a:00:8b:b6:7d:1f:d2:7e:e5:f9:cf:ef:
02:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:93:5F:7D:D9:75:45:DC:38:6E:95:B5:69:1E:E0:3A:2B:99:87:3E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/kJNffdl1Rdw4bpW1aR7gOiuZhz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.138.183.0/24
77.83.39.0/24
85.209.120.0/23
193.57.41.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:58:ec:35:79:25:81:0d:51:0e:51:f1:de:42:5f:0a:44:18:
bf:c6:5f:9b:d2:31:bd:73:a8:76:09:d5:bc:f6:fc:2b:2d:b4:
a8:b0:0a:64:46:1c:e8:b1:c2:91:bc:41:a5:d2:2a:23:09:bd:
ff:8c:f5:37:3a:3f:61:07:0e:ab:9a:44:44:af:bf:a9:e2:77:
10:f0:1d:37:e9:db:4b:95:c9:f3:ce:54:1f:c5:81:38:02:04:
e4:1f:16:cc:b5:c4:85:76:c8:85:17:33:0b:11:d3:db:3f:97:
8f:c7:95:38:b5:5e:24:71:ba:9e:f3:ec:85:2e:7b:b1:5c:af:
aa:ea:94:d8:cf:66:99:ff:c7:53:5c:3a:06:bd:61:e2:02:20:
26:4e:4c:62:41:c2:af:f9:a1:47:fe:3c:28:82:28:12:41:1b:
5f:06:5e:66:9f:1b:b5:01:04:f1:87:63:eb:c1:cb:b3:a3:b2:
09:8a:44:60:ee:73:37:52:ce:8d:c7:ac:7c:b1:26:85:de:c9:
23:7a:1a:90:c8:27:91:52:cb:d4:ca:cc:49:4a:87:49:86:74:
8d:a2:5a:52:36:15:36:ad:59:e5:ab:9c:c8:51:d1:4c:84:c9:
92:d9:e7:1d:fb:d6:ee:fb:c6:06:8e:2a:d7:cc:c9:e4:77:48:
bd:4d:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 13:24:09 2023 by rpki-client on console-ams.rpki-client.org