Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/uZY9ocQ1psMpIiS84PD0KaVNAFU.roa
File: uZY9ocQ1psMpIiS84PD0KaVNAFU.roa (raw, json)
Hash identifier: D9m9cwNUEZlDt833u+irEaEl8c34GNQavvmz5xFFepI=
Subject key identifier: B9:96:3D:A1:C4:35:A6:C3:29:22:24:BC:E0:F0:F4:29:A5:4D:00:55
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018D115D8FA4F4C1C18D8555D5EFAB4C5878
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/uZY9ocQ1psMpIiS84PD0KaVNAFU.roa
Signing time: Tue 16 Jan 2024 08:22:40 +0000
ROA not before: Tue 16 Jan 2024 08:22:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 193.30.241.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
193.57.41.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 11:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:5d:8f:a4:f4:c1:c1:8d:85:55:d5:ef:ab:4c:58:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 16 08:22:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b9963da1c435a6c3292224bce0f0f429a54d0055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b3:c7:4f:30:8f:fe:2c:83:54:56:89:6f:df:
be:75:c3:c1:26:d5:bd:a1:dc:b1:e3:37:fb:89:bd:
88:ac:fe:b6:c1:74:78:65:3b:a6:44:59:f1:06:d5:
50:5f:34:9c:b6:b5:c6:92:15:ea:1b:2d:f3:36:9a:
cf:8b:b6:e5:9a:d4:43:9c:93:1a:c6:10:7c:76:b6:
0b:c6:0a:2c:57:59:76:2d:27:c0:57:14:ab:50:b6:
c2:79:fb:b3:0f:f3:2e:1d:da:04:7c:9a:4f:86:ff:
83:52:fb:d9:24:58:f7:2f:03:62:3c:3f:2e:84:e8:
27:97:ac:a5:77:68:6d:41:88:fb:93:e4:d3:d1:d3:
34:0f:c0:94:c3:3c:f0:09:e3:d4:76:eb:41:e8:8f:
f5:b7:cd:76:e5:be:54:5f:ac:cb:02:3f:89:4f:a8:
b7:b2:9f:50:c3:eb:8e:51:03:05:eb:76:af:7c:65:
16:05:c0:62:89:7a:5f:3e:e6:e9:9e:76:eb:90:24:
b6:fd:89:d9:22:cb:10:fa:8d:cf:fc:72:88:b2:7c:
eb:81:86:ef:31:d5:d8:2c:7f:47:79:08:36:ca:cb:
e2:af:22:e0:b8:3c:21:de:0d:08:9f:79:bd:d9:c7:
07:7f:04:e4:ab:9e:7c:99:fa:a6:10:ce:19:71:3f:
57:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:96:3D:A1:C4:35:A6:C3:29:22:24:BC:E0:F0:F4:29:A5:4D:00:55
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/uZY9ocQ1psMpIiS84PD0KaVNAFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.139.0/24
85.209.120.0/23
146.19.125.0/24
193.30.241.0/24
193.57.41.0/24
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
16:e3:bb:cc:1a:44:ec:99:81:b2:64:fd:8a:10:39:34:97:fc:
c5:ea:74:23:2f:74:5a:19:0b:31:67:e6:21:25:f2:44:24:72:
14:06:b3:6e:6d:85:42:6b:2b:6d:8a:b6:f4:f5:52:19:43:42:
a2:1f:e3:2c:47:73:4b:02:0d:f1:18:ae:bf:66:ba:ab:9b:38:
1e:98:b9:54:5e:2d:00:53:dc:6f:f0:29:8c:ae:5b:05:33:39:
9d:f6:d3:66:f6:9b:27:cd:f2:f9:40:57:40:0b:39:9e:94:f4:
89:f6:98:f2:4d:5b:6e:73:a6:6d:3c:8f:44:f8:02:3b:90:ea:
91:da:c8:06:65:7a:a5:b8:49:ff:03:b7:c4:c5:31:12:d0:a1:
69:45:20:0d:92:4f:ff:8f:97:12:00:79:10:c3:b0:a4:3a:b0:
0c:0b:6f:57:cd:cc:b2:13:d0:75:69:b6:99:45:69:d5:6c:3e:
c7:40:05:ce:cc:da:56:a8:37:01:50:1a:7c:37:26:0a:6e:f3:
51:89:88:14:ba:7c:55:9c:e1:56:7b:93:1d:d1:48:e9:db:c3:
16:ed:88:dc:02:98:91:a9:2a:80:fc:42:dd:b6:19:50:73:dd:
a5:2b:0f:21:ae:48:20:22:7e:c9:e5:e6:b3:9a:3c:f1:0a:fe:
ae:4a:56:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org