Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tqaZT3Z_eazgu5ALC6D_eilD8Sg.roa
File: tqaZT3Z_eazgu5ALC6D_eilD8Sg.roa (raw, json)
Hash identifier: 8JszuvoJlrY5fBEKddvAFKfHx3DurEQYsbwUQHj/AXY=
Subject key identifier: B6:A6:99:4F:76:7F:79:AC:E0:BB:90:0B:0B:A0:FF:7A:29:43:F1:28
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A861187E8B8A6E04757622ED3F32E8843
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tqaZT3Z_eazgu5ALC6D_eilD8Sg.roa
Signing time: Mon 11 Sep 2023 21:06:50 +0000
ROA not before: Mon 11 Sep 2023 21:06:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.138.183.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:86:11:87:e8:b8:a6:e0:47:57:62:2e:d3:f3:2e:88:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 11 21:06:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6a6994f767f79ace0bb900b0ba0ff7a2943f128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8e:4d:e8:75:9c:ab:bd:e2:55:86:15:03:54:
9c:d7:c2:c0:f7:62:7a:ff:ad:65:b7:25:99:37:28:
15:18:05:37:65:38:2b:62:5e:31:a2:44:3a:7f:a4:
0b:6c:49:7a:ef:dd:87:b6:06:62:1d:a9:70:57:54:
29:2a:d1:96:c9:f3:1b:8a:8e:08:50:f3:c7:ca:64:
d5:62:10:43:87:58:e9:96:ba:c7:2f:9b:e1:f4:90:
31:dd:08:e6:98:d8:e1:e4:f7:fd:80:a1:7a:ea:06:
14:bd:13:d3:24:db:ae:6d:cc:c5:cf:92:07:06:ce:
0f:cb:92:47:0a:d4:bb:f5:16:ca:96:7e:5c:e1:4f:
ae:ec:9f:41:94:75:ff:74:30:99:7e:f9:1e:1d:bb:
32:80:7b:82:32:80:fa:5e:77:4e:fd:5a:20:b9:96:
94:52:3d:92:23:6d:95:25:59:9e:79:2f:58:e8:d7:
69:51:65:a9:d1:00:ff:1b:b2:a9:9a:83:a3:de:e1:
5f:7c:07:c6:f8:d5:21:d4:cf:31:e7:6e:83:d7:12:
f1:c1:c8:80:a8:d7:23:94:a0:40:57:63:8c:a5:03:
fa:29:c2:2e:6e:61:79:d2:69:8c:b1:52:85:1c:0d:
c4:4a:82:36:38:0f:8a:91:b3:7c:18:68:07:35:c6:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A6:99:4F:76:7F:79:AC:E0:BB:90:0B:0B:A0:FF:7A:29:43:F1:28
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tqaZT3Z_eazgu5ALC6D_eilD8Sg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.171.0/24
45.138.183.0/24
77.83.39.0/24
85.209.120.0/23
195.62.24.0/24
Signature Algorithm: sha256WithRSAEncryption
70:45:d5:e7:ae:f6:94:fc:01:c6:56:38:7c:e3:a4:2e:e9:a9:
3e:74:4a:de:ea:bc:6e:d8:96:05:7c:51:5e:c1:84:c8:6d:b5:
ea:7a:be:49:9a:0c:a9:f1:08:ba:6a:6f:1e:3e:e7:6a:3d:25:
51:16:9a:da:1c:4b:65:9a:37:af:52:87:08:2a:85:b9:ba:6c:
23:fc:8e:83:3e:71:c2:13:46:a9:ae:e1:7c:b7:a5:b8:ec:f0:
b7:0d:c5:3b:45:80:30:10:67:3b:8a:a9:b5:ae:c4:e3:22:6b:
1c:6b:8e:04:a0:40:72:4d:99:07:56:cd:5f:07:00:35:a6:40:
df:50:f0:cc:b0:0e:86:a0:4c:44:df:f8:be:4b:09:80:da:9d:
7d:79:ba:37:72:20:a3:9a:ec:bc:71:82:8b:c6:29:5c:1f:c1:
c7:58:6c:f8:5e:70:02:11:fb:74:2d:08:d1:48:8e:b8:01:30:
74:ae:91:c5:38:8d:e6:bd:07:61:e0:49:a9:41:f4:3e:80:bd:
07:fe:ad:fe:4c:c6:be:02:38:c6:c1:5a:84:73:48:20:0c:b9:
88:e1:51:ad:d2:75:40:84:7f:ec:f2:c7:23:87:ae:57:84:9b:
49:1e:36:5b:9a:2e:7e:f1:10:aa:ea:24:d0:24:83:f1:01:e4:
16:0f:35:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 10:56:05 2023 by rpki-client on console-ams.rpki-client.org