Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rY4w4jfnx6zeo2Gs1HJdyoE7Xp0.roa
File: rY4w4jfnx6zeo2Gs1HJdyoE7Xp0.roa (raw, json)
Hash identifier: Td6rxjbKWFuzPR9y9YYyj42C7qvA2Zy5dswaBjIk/dk=
Subject key identifier: AD:8E:30:E2:37:E7:C7:AC:DE:A3:61:AC:D4:72:5D:CA:81:3B:5E:9D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01888055E26FF8768C31F3927E869A77503D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rY4w4jfnx6zeo2Gs1HJdyoE7Xp0.roa
Signing time: Sat 03 Jun 2023 08:18:12 +0000
ROA not before: Sat 03 Jun 2023 08:18:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:80:55:e2:6f:f8:76:8c:31:f3:92:7e:86:9a:77:50:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 3 08:18:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad8e30e237e7c7acdea361acd4725dca813b5e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:71:80:13:da:d5:1d:16:1e:12:ac:7c:fc:
a2:41:0c:4f:f3:a6:3d:7c:4a:23:d4:92:53:50:da:
c9:cd:93:8f:67:78:a7:c7:9f:da:1a:93:df:c0:1b:
6c:dc:c3:1f:7e:68:5c:3e:74:e0:14:ac:49:72:4a:
d6:8c:66:7a:ab:fd:bd:d3:7a:0c:5c:bb:bc:3e:ea:
5a:8c:76:1e:71:fc:95:fd:81:e3:0f:13:4c:e1:6a:
a5:b6:fe:49:9c:f9:9b:24:4e:19:08:c7:06:0b:0c:
6e:23:4f:2e:32:dd:7f:a5:e2:58:b9:7f:fe:5e:71:
ae:ce:1f:88:3f:f9:06:0d:0d:a5:9b:bc:fb:97:d3:
47:78:93:a3:be:02:63:6e:e8:7d:a0:ba:40:ec:ca:
9b:e1:00:bf:ef:b7:7b:ed:7e:38:62:33:3e:f0:40:
07:7b:9d:29:e7:c1:c2:99:96:aa:e0:cb:cd:0b:9d:
26:25:a5:9e:2c:b4:ae:ff:b8:62:39:66:c8:6c:b4:
54:5f:21:2b:02:70:05:78:c9:b6:da:1c:4e:b3:a2:
c7:ab:14:7a:ca:ff:41:5c:a5:2d:32:aa:4c:a1:dd:
f7:94:aa:f9:62:c6:42:85:22:73:e8:97:23:a9:25:
71:f4:9f:4e:2b:67:34:1a:ef:5f:56:97:1a:31:2b:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8E:30:E2:37:E7:C7:AC:DE:A3:61:AC:D4:72:5D:CA:81:3B:5E:9D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/rY4w4jfnx6zeo2Gs1HJdyoE7Xp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.138.183.0/24
77.83.38.0/23
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
33:04:ad:0f:43:c4:e6:39:b0:55:d1:88:ab:ef:bb:10:b6:89:
ab:ee:c0:43:92:8d:20:22:08:c7:b9:55:03:ef:b6:21:10:c3:
81:58:df:4d:10:47:c4:f4:91:ef:6f:a9:4b:92:76:3b:b1:b3:
65:9b:0f:d0:d4:3b:aa:5a:d9:80:67:d2:c7:12:71:28:d3:76:
60:51:12:e3:2a:c2:9c:26:6c:85:d7:f7:9b:7c:82:9e:a3:18:
5c:a2:18:43:ad:5c:01:1c:6f:fe:b2:7c:a0:23:2e:d0:a7:e9:
9b:d7:9c:91:e3:19:10:92:e1:65:3f:fd:dc:1c:36:e6:53:47:
ab:6e:63:1a:d0:86:cf:47:90:32:77:32:af:f7:8a:0d:30:4d:
20:32:a2:64:1c:ad:93:6d:7e:83:90:12:c4:db:76:1c:46:56:
ea:f0:64:1d:c9:ad:d0:97:73:09:84:7a:7e:38:f4:d3:07:e4:
eb:c9:57:8b:90:7a:db:4e:6a:7f:24:7b:28:10:b3:67:53:ee:
ca:7e:92:42:a2:05:cc:a2:e3:50:ea:75:ef:e3:bc:79:c1:dc:
36:0c:10:ee:e6:47:71:6a:f5:a3:bd:d0:49:4b:8f:55:14:58:
78:ac:e6:3f:4f:e4:ae:e0:88:de:97:3f:b0:43:73:51:e0:e9:
e3:16:c1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org