Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1D9Ub8qYRLAJ5yChSMt-CLrBTe8.roa
File: 1D9Ub8qYRLAJ5yChSMt-CLrBTe8.roa (raw, json)
Hash identifier: PpZuzh4Y9NW75VINBPHNCFByZzFwIBoy6e/IZrkd8hU=
Subject key identifier: D4:3F:54:6F:CA:98:44:B0:09:E7:20:A1:48:CB:7E:08:BA:C1:4D:EF
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018689AEBC6FF1EF81D6C1C3C9F6E937A866
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1D9Ub8qYRLAJ5yChSMt-CLrBTe8.roa
Signing time: Sat 25 Feb 2023 17:46:15 +0000
ROA not before: Sat 25 Feb 2023 17:46:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 81.28.253.0/24 maxlen: 24
95.214.177.0/24 maxlen: 24
45.132.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 May 2023 16:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:ae:bc:6f:f1:ef:81:d6:c1:c3:c9:f6:e9:37:a8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Feb 25 17:46:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d43f546fca9844b009e720a148cb7e08bac14def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:bc:12:04:90:db:4f:bf:e6:56:74:a4:c4:
66:95:05:e3:17:b2:73:78:c7:21:c6:40:a8:98:28:
16:50:9c:a5:cf:a6:1e:6d:38:f4:67:ec:29:90:26:
2d:95:28:44:8a:7f:b8:d8:5e:b4:5e:49:6f:d4:48:
dc:64:46:ab:36:7c:7d:48:df:c6:ce:2e:e7:78:5d:
29:af:88:a1:b2:f7:34:d4:2e:35:82:0b:e2:5d:98:
d8:39:b2:cf:4c:99:6c:40:1b:26:cf:ae:b8:ba:5c:
9e:ef:70:b1:a1:9e:b4:49:fd:2c:b2:b0:c5:0e:e2:
7d:51:4a:39:ee:1b:ea:c0:5f:fe:10:cf:65:da:ab:
47:f8:00:ef:5d:25:bc:80:dc:f2:11:a9:94:cf:79:
1a:ff:a3:35:90:13:24:41:f0:db:48:96:08:d9:06:
6f:28:cf:c0:32:61:55:78:d0:61:c9:31:7f:57:7d:
77:94:40:44:b5:2f:65:2a:87:7a:00:74:09:29:86:
e8:24:9f:7f:d2:68:d2:c1:d5:cc:f8:c3:8a:aa:bc:
b1:d0:d5:48:cd:c0:2a:91:5a:ad:e9:69:81:6a:6a:
f0:f2:9f:48:56:a9:b7:64:51:00:47:3b:61:14:3a:
96:86:ab:1c:ad:ba:96:ad:30:0c:98:39:5c:6d:a5:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:3F:54:6F:CA:98:44:B0:09:E7:20:A1:48:CB:7E:08:BA:C1:4D:EF
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1D9Ub8qYRLAJ5yChSMt-CLrBTe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
81.28.253.0/24
95.214.177.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ff:7b:01:1b:11:d8:fe:35:47:1c:8e:2f:8b:48:c3:6d:a0:
d9:49:6f:82:36:76:01:98:08:6e:ce:5d:48:03:29:2a:d6:28:
f6:0a:1d:ab:2f:d1:9a:5a:44:39:f7:02:72:c8:8b:d3:bd:04:
85:f1:46:ce:a8:36:a7:0b:c6:d6:e1:87:3e:06:f6:d2:5a:9d:
ff:60:58:44:0b:a1:b8:a9:8b:f7:40:da:38:26:c7:b4:31:3a:
9f:16:5e:c7:8e:b3:10:18:26:11:8c:a7:2d:ea:17:00:5b:25:
97:d1:2d:95:f6:44:ff:c4:6a:66:ca:3c:7e:e9:d5:da:63:12:
97:03:73:aa:c9:e9:51:68:b7:b8:cc:35:12:6b:ee:c4:c3:e3:
f6:50:e0:34:2c:9d:02:6a:22:5c:26:27:66:88:f9:d5:38:9f:
b5:e9:e5:f8:07:57:d4:dc:f5:0d:97:62:94:62:5c:21:d6:6b:
b7:2c:59:b2:ce:d4:64:05:9a:8b:e7:b9:b8:5b:c8:48:fc:ee:
92:93:c7:67:47:ab:ff:80:ef:f8:b6:3c:01:16:be:1d:aa:a4:
24:9e:8a:cc:cb:1d:26:bd:a7:e8:01:dd:b7:fd:49:0e:b2:17:
4d:2e:5c:e4:68:9c:71:23:f1:44:15:58:2d:0d:7f:84:ae:46:
17:15:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org