Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tVWxI928FQvcCDe8anusUkILEh8.roa
File: tVWxI928FQvcCDe8anusUkILEh8.roa (raw, json)
Hash identifier: A33j+fIxNQA4QVMD/D56n4pDczeKLe1KFV+OqUZjkqw=
Subject key identifier: B5:55:B1:23:DD:BC:15:0B:DC:08:37:BC:6A:7B:AC:52:42:0B:12:1F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B3CA5475C50546D76F3FC6E6E16C20021
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tVWxI928FQvcCDe8anusUkILEh8.roa
Signing time: Tue 17 Oct 2023 07:59:06 +0000
ROA not before: Tue 17 Oct 2023 07:59:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.94.171.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
2.56.108.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.144.213.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
45.81.114.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:a5:47:5c:50:54:6d:76:f3:fc:6e:6e:16:c2:00:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 17 07:59:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b555b123ddbc150bdc0837bc6a7bac52420b121f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:57:00:ba:cf:0a:2e:83:59:51:60:54:dd:
d3:d2:06:c2:35:0e:d9:3a:8d:38:d6:af:6d:e1:17:
1a:6c:c3:c7:f5:02:38:b5:0a:be:37:7c:aa:0f:fd:
3a:21:81:62:5e:22:28:1e:36:27:77:a7:a7:24:29:
b1:33:6d:8b:3e:4e:12:9e:b6:90:78:35:ec:04:5c:
c7:4b:94:81:f5:45:32:e7:cb:d0:d8:e5:43:5c:30:
9a:a7:95:d2:4e:35:87:fd:41:c2:85:39:30:60:16:
5d:7c:85:ce:43:ea:14:a5:b6:5b:52:ca:68:e9:88:
1b:74:9b:0a:46:09:28:50:f0:20:ba:91:5c:00:64:
59:81:58:e9:35:5b:33:8f:98:ed:0c:df:d8:40:72:
2f:ed:b9:b6:2b:e1:1d:7f:f9:da:08:94:ea:3b:3a:
a0:b4:6b:75:0d:c8:d3:3c:70:99:c2:95:c0:5b:34:
d8:3f:e7:4d:6d:a2:48:56:f6:0d:27:8e:4e:dd:68:
3f:d6:af:00:22:8d:51:3b:6e:f7:50:a7:9f:8b:be:
bc:b3:e6:99:71:e1:32:c9:98:a5:69:c9:5e:47:ab:
f4:15:43:c6:e2:f4:84:6a:fd:dd:c0:19:34:ab:17:
2b:3b:76:3c:78:55:ca:d0:72:9f:ba:a4:31:e3:3b:
aa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:55:B1:23:DD:BC:15:0B:DC:08:37:BC:6A:7B:AC:52:42:0B:12:1F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tVWxI928FQvcCDe8anusUkILEh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0-2.56.110.255
45.81.113.0-45.81.115.255
45.88.139.0/24
45.94.171.0/24
45.138.183.0/24
45.144.213.0/24
77.83.39.0/24
85.209.120.0/23
193.30.241.0/24
195.62.24.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
11:79:e4:26:e9:65:9e:0b:2a:d3:2c:77:37:cf:36:14:de:2c:
bc:66:c8:02:f4:8a:15:95:08:55:1a:60:65:4a:63:b1:f7:23:
25:1e:e8:e3:7c:f2:64:de:98:b2:d0:b6:4a:3b:d3:34:fc:96:
95:b1:24:03:f7:77:2b:d1:47:8f:25:09:6f:d7:89:5b:6d:22:
da:fa:94:ad:eb:2c:c5:d4:3c:a3:2e:20:bd:21:1e:7c:07:ab:
a7:6d:ed:72:ea:b7:9d:35:28:30:88:4a:8f:c7:03:77:a3:be:
86:c2:40:78:20:d4:bc:c3:d0:a5:2f:d5:9c:39:4b:c8:44:6a:
43:63:90:2f:77:bb:94:2f:dd:20:aa:93:ce:ea:68:ff:83:75:
1b:cb:da:b9:71:e5:bb:2c:b0:94:f5:f1:aa:b9:d0:7f:e1:d7:
b3:a2:d7:70:da:59:aa:2e:11:2d:15:8f:df:6c:b6:5d:87:8c:
23:e7:0c:a8:5e:ac:76:84:aa:5a:6c:92:54:6a:28:85:e5:98:
30:46:e1:b2:8e:a5:3c:2f:ad:f4:68:b3:ca:8b:fd:9d:fa:2e:
d8:fd:00:5c:b2:4f:27:13:86:15:4a:1b:a5:d5:77:3a:4b:51:
c0:06:d1:3d:d6:5b:3f:51:5e:ee:ef:92:f8:a8:ff:13:ba:75:
4d:3a:15:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 13:07:16 2023 by rpki-client on console-fra.rpki-client.org