Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/p_-p5j_ezRvIo-nvXX_aSXow6l4.roa
File: p_-p5j_ezRvIo-nvXX_aSXow6l4.roa (raw, json)
Hash identifier: 1VMpNFemvtHVuHJisRFt5uKKRs+emPbRoxS+kAAPP5w=
Subject key identifier: A7:FF:A9:E6:3F:DE:CD:1B:C8:A3:E9:EF:5D:7F:DA:49:7A:30:EA:5E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018ACB4A46EE3B6089F8B46EB6C16B4A19DC
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/p_-p5j_ezRvIo-nvXX_aSXow6l4.roa
Signing time: Mon 25 Sep 2023 07:42:37 +0000
ROA not before: Mon 25 Sep 2023 07:42:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cb:4a:46:ee:3b:60:89:f8:b4:6e:b6:c1:6b:4a:19:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 25 07:42:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7ffa9e63fdecd1bc8a3e9ef5d7fda497a30ea5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:16:ee:7c:44:4a:60:e9:4d:b1:29:14:cf:
9d:ed:0c:da:bc:5b:53:0b:32:70:39:b9:bf:e8:50:
8f:c3:94:6b:f0:be:ad:36:57:e8:52:c0:7e:75:f5:
ee:ed:e1:4a:39:79:2f:f2:2a:d5:f0:66:2d:47:17:
0c:3e:3e:7f:59:2a:d7:a2:47:15:cd:8f:b4:d6:b9:
67:b6:4f:20:b9:9e:71:e4:fa:37:d8:e2:d3:54:0b:
06:7a:db:68:ac:d9:a9:67:8d:72:b8:ef:74:0c:f8:
f1:8b:da:41:90:39:74:05:e2:81:ce:cb:89:10:37:
0c:60:ea:0d:ed:c5:ed:7d:2c:82:2b:85:91:0b:3d:
3a:9c:57:0b:08:fe:b7:44:15:9e:39:38:51:09:7f:
02:52:8f:ed:1a:38:7e:cb:f6:fb:e9:2b:44:c6:a7:
91:77:f3:c2:77:f1:88:fc:65:52:51:8e:ff:f3:f1:
23:46:f3:98:14:26:d9:f1:91:bb:b4:70:e5:11:d8:
c2:e3:b8:31:05:0c:51:c9:98:64:5b:4b:d9:6e:72:
30:0d:cb:3c:84:81:cd:db:2e:bd:ed:21:70:fc:91:
09:f3:71:ac:0b:ca:15:71:d5:83:1f:5e:cf:74:85:
64:90:57:4a:9a:6f:64:80:70:d2:25:47:c3:7c:f8:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:A9:E6:3F:DE:CD:1B:C8:A3:E9:EF:5D:7F:DA:49:7A:30:EA:5E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/p_-p5j_ezRvIo-nvXX_aSXow6l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.110.0/24
45.94.171.0/24
45.138.183.0/24
77.83.39.0/24
85.209.120.0/23
195.62.24.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a3:12:79:52:e1:f3:fc:23:6d:1c:03:8f:ef:59:94:2b:19:
9a:ab:e7:8c:9a:60:0a:65:e9:ca:8d:29:ac:56:6c:bb:50:d8:
ba:1a:f7:f2:51:f3:92:09:a0:f3:1d:a9:39:0a:d1:56:d1:d8:
8b:21:06:c3:fa:be:c7:82:4f:59:2e:fb:b3:ee:64:ca:6b:3e:
cc:85:50:1c:21:12:7c:3f:f2:68:3f:4e:79:0c:93:f5:30:ee:
75:ec:01:e2:35:18:5f:6d:9b:5e:6a:ac:6e:27:92:4a:6a:1d:
e5:56:1b:45:c3:40:4d:ae:8d:04:d0:31:f9:ca:35:94:2b:c1:
89:50:bc:89:39:03:f1:e9:a6:71:4d:ea:29:4b:b5:a2:3b:28:
df:09:f5:e3:ef:f2:d3:15:3e:7f:fe:ce:8e:cd:75:1e:a3:17:
a2:73:75:20:4c:52:f0:c9:44:ff:55:a5:a9:1d:07:a4:35:54:
93:9e:7e:f2:29:1b:e5:1a:56:65:a3:e7:e2:68:4a:f1:7d:dc:
7d:87:2e:25:a3:90:79:db:af:4e:19:98:c3:b1:6c:53:a7:7e:
d9:65:37:0e:e3:11:22:35:71:5d:5e:b1:9d:ed:44:ab:aa:d2:
2a:98:60:51:8a:b8:0a:bd:b4:0c:d6:c3:f9:cf:64:88:32:72:
c0:58:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 12:47:04 2023 by rpki-client on console-fra.rpki-client.org