Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/oMxrf0R4vhQ2JsWYRFinjpR5gns.roa
File: oMxrf0R4vhQ2JsWYRFinjpR5gns.roa (raw, json)
Hash identifier: DIlkLugGx/LstzFMgpz9OFmlI2aZDmMrTw6xbKsvUH4=
Subject key identifier: A0:CC:6B:7F:44:78:BE:14:36:26:C5:98:44:58:A7:8E:94:79:82:7B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018769EF4A9BF8F5B57DA9D9073ACD19D77A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/oMxrf0R4vhQ2JsWYRFinjpR5gns.roa
Signing time: Mon 10 Apr 2023 06:51:42 +0000
ROA not before: Mon 10 Apr 2023 06:51:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.170.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Apr 2023 09:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:69:ef:4a:9b:f8:f5:b5:7d:a9:d9:07:3a:cd:19:d7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 10 06:51:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0cc6b7f4478be143626c5984458a78e9479827b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1e:b4:65:ea:7f:e7:77:dc:6a:df:e7:66:11:
42:a4:fb:33:4c:46:d9:25:f5:16:3c:77:d0:2b:b9:
2a:1a:13:5a:63:a0:9a:3b:23:11:7f:8d:64:28:e9:
8b:42:51:13:33:44:3d:06:bc:e0:7a:93:ef:fc:75:
90:df:58:a9:56:57:a8:3c:45:bf:84:a1:16:ee:7c:
1e:c6:e7:ab:3b:ee:5f:8d:0c:cc:f1:92:c5:3d:97:
3f:cb:c9:6b:fe:e7:aa:99:28:7c:79:3a:1b:ec:49:
a8:26:9b:9f:da:b2:40:1c:11:ef:82:97:2e:05:37:
72:13:79:aa:c7:90:06:ee:16:9c:75:eb:5a:8e:35:
4d:92:19:12:3a:bf:f9:27:78:53:88:13:34:da:d0:
4e:de:a4:f0:3f:1e:ad:39:bb:90:e3:ed:e7:46:a0:
c2:a5:91:9b:6a:5b:74:8f:15:1a:93:85:69:09:e0:
be:65:4c:fa:25:d8:49:e0:b7:1e:3c:b1:fc:35:28:
6d:d2:b8:b7:5c:47:2d:df:8e:00:09:6d:97:d8:78:
38:eb:2b:32:4b:88:1e:1d:9a:09:38:5f:dc:81:61:
cd:4a:3e:4c:bf:0d:7a:de:23:bf:00:14:d9:15:d0:
d2:7d:6a:e0:01:6b:5d:1e:30:09:ce:ed:4d:a8:e1:
92:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CC:6B:7F:44:78:BE:14:36:26:C5:98:44:58:A7:8E:94:79:82:7B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/oMxrf0R4vhQ2JsWYRFinjpR5gns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.170.0/23
77.83.38.0/23
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:ad:79:1d:d9:55:ec:05:f6:a3:7f:c0:5c:b9:e8:e0:5a:bd:
82:09:29:64:aa:be:1f:57:de:87:d8:62:82:6d:29:15:95:b4:
74:b4:84:be:d1:03:44:44:a5:6c:08:88:59:ce:94:10:8f:8d:
25:dc:fc:b4:ea:c4:32:3e:c9:dd:ae:b5:f4:19:97:ae:ac:2b:
71:39:c9:45:f2:3c:f1:e5:d7:60:af:6f:77:15:c4:4d:a3:9d:
ea:4a:78:d5:0a:a0:c1:ac:4d:9e:23:94:0c:f8:51:a4:d0:3a:
68:89:70:3c:16:38:85:38:d3:35:61:35:b7:41:f4:57:63:e2:
57:50:b6:08:88:59:82:d5:43:7e:40:d1:85:3e:3f:c6:f4:6f:
7c:52:58:d7:0f:5c:72:79:fe:16:89:94:46:1c:ea:d8:7a:a4:
26:fd:eb:9b:5d:16:dd:70:bf:c1:80:25:f6:55:7a:af:23:bc:
04:1c:1c:c3:7c:56:e7:b0:06:a5:4d:bb:ec:8b:28:dd:11:7d:
03:ea:7d:af:53:ec:f3:17:c4:28:a9:00:5b:d8:85:45:96:06:
c5:9c:84:18:5e:68:ab:fc:a3:c4:f1:46:d2:bd:f5:ac:52:ae:
0e:8c:13:bd:88:01:6d:60:99:93:fa:d7:e1:8c:ba:de:21:72:
f7:5b:cb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org