Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ALT_TpnQMOjak-XQgpigzNexFQI.roa
File: ALT_TpnQMOjak-XQgpigzNexFQI.roa (raw, json)
Hash identifier: RL2HmtdVwURsaWVMgJoF9DA7KZPqeikdk/eoWs8dxSI=
Subject key identifier: 00:B4:FF:4E:99:D0:30:E8:DA:93:E5:D0:82:98:A0:CC:D7:B1:15:02
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 0188921CF76494801CDEE7784165B27FD4B4
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ALT_TpnQMOjak-XQgpigzNexFQI.roa
Signing time: Tue 06 Jun 2023 19:09:11 +0000
ROA not before: Tue 06 Jun 2023 19:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202425
IP address blocks: 45.148.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:92:1c:f7:64:94:80:1c:de:e7:78:41:65:b2:7f:d4:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jun 6 19:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00b4ff4e99d030e8da93e5d08298a0ccd7b11502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:99:62:e0:99:c7:2e:1a:05:f1:b8:8c:89:0f:
2b:85:aa:5e:ed:3e:5b:29:0e:91:f8:33:43:c0:96:
8f:a2:94:fe:ca:b0:6d:3a:d6:34:11:01:d1:56:ba:
8d:ee:8c:5e:4f:c3:12:d9:b7:45:83:b5:fc:2f:e8:
b1:d0:98:96:70:8b:d9:8e:59:80:32:5f:fb:d2:04:
33:e9:b0:90:a8:ae:73:57:82:32:50:b8:3b:49:fd:
34:d7:03:59:77:37:c1:8d:ce:c9:cc:c7:38:e2:80:
42:db:08:82:72:01:6b:f0:73:92:86:56:5e:37:93:
98:05:85:13:ce:9d:8e:d6:41:97:c8:33:bc:6c:09:
68:a2:a0:1e:5a:b3:05:12:8e:e2:b7:31:5c:33:b3:
26:f8:2a:08:df:b7:dc:80:0c:27:2a:c8:93:a3:0e:
c0:23:48:0e:48:66:07:67:25:76:21:63:f8:78:9f:
d0:1a:d2:4b:49:37:34:ab:e1:1e:b9:1f:eb:a9:b9:
9a:73:3c:58:e5:56:24:54:8c:f2:29:9d:52:b5:ed:
29:01:dd:e0:8e:07:58:a1:4d:6e:83:86:ca:5b:91:
6e:2e:cf:1a:6c:b8:ad:7f:05:e1:89:37:9d:7d:47:
2a:63:8a:f9:ac:42:df:0d:ec:e5:f0:dc:aa:16:db:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B4:FF:4E:99:D0:30:E8:DA:93:E5:D0:82:98:A0:CC:D7:B1:15:02
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ALT_TpnQMOjak-XQgpigzNexFQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:50:57:6f:04:15:d1:df:c3:8f:ef:ce:e4:1e:d5:69:a3:19:
5b:3f:e2:a9:7c:65:68:e4:bd:f4:43:e3:da:cf:a9:1a:6f:99:
4e:18:2b:6b:64:e0:ad:6a:af:a9:42:8f:17:aa:f2:6f:11:eb:
71:b7:c7:c7:45:59:8d:8f:b3:20:f6:ed:ae:e8:a4:f4:c1:1a:
b4:48:17:a3:12:2c:38:51:96:58:96:ec:39:f7:18:d4:a3:e2:
09:29:67:d4:19:06:37:6f:30:e1:f0:67:9e:13:37:7a:e8:70:
d5:10:d1:00:76:d8:aa:9b:af:19:cc:50:d1:47:07:f1:70:b8:
17:4f:43:ec:06:7a:f8:5d:e6:21:d5:7f:3b:18:75:d0:93:70:
45:84:ed:ee:be:04:c0:9a:9c:33:e7:41:95:3d:dc:66:0d:90:
71:a8:af:f3:89:da:fc:d5:f6:eb:73:2f:f0:0b:b8:5b:82:01:
fa:7c:7b:1b:67:dc:e7:33:1e:c2:e6:90:7f:80:4f:c0:9b:1c:
1d:3b:8c:40:cc:31:a6:3c:4a:96:04:97:98:88:92:92:2a:78:
68:1f:46:e9:63:cb:a2:70:97:87:13:ad:fa:7c:1e:7b:6e:c5:
ff:d7:91:bf:19:70:af:12:de:e3:18:8a:47:05:11:82:5d:5b:
15:4d:57:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiSHPdklIAc3ud4QWWyf9S0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy
ODVkZTcwHhcNMjMwNjA2MTkwOTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGI0ZmY0ZTk5ZDAzMGU4ZGE5M2U1ZDA4Mjk4YTBjY2Q3YjExNTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZli4JnHLhoF8biMiQ8rhape7T5b
KQ6R+DNDwJaPopT+yrBtOtY0EQHRVrqN7oxeT8MS2bdFg7X8L+ix0JiWcIvZjlmA
Ml/70gQz6bCQqK5zV4IyULg7Sf001wNZdzfBjc7JzMc44oBC2wiCcgFr8HOShlZe
N5OYBYUTzp2O1kGXyDO8bAlooqAeWrMFEo7itzFcM7Mm+CoI37fcgAwnKsiTow7A
I0gOSGYHZyV2IWP4eJ/QGtJLSTc0q+EeuR/rqbmaczxY5VYkVIzyKZ1Ste0pAd3g
jgdYoU1ug4bKW5FuLs8abLitfwXhiTedfUcqY4r5rELfDezl8NyqFtvyswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAC0/06Z0DDo2pPl0IKYoMzXsRUCMB8GA1UdIwQY
MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt
NDc3MjMxMTkxYTM1LzEvQUxUX1RwblFNT2phay1YUWdwaWd6TmV4RlFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1
LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZSQMA0G
CSqGSIb3DQEBCwUAA4IBAQAPUFdvBBXR38OP787kHtVpoxlbP+KpfGVo5L30Q+Pa
z6kab5lOGCtrZOCtaq+pQo8XqvJvEetxt8fHRVmNj7Mg9u2u6KT0wRq0SBejEiw4
UZZYluw59xjUo+IJKWfUGQY3bzDh8GeeEzd66HDVENEAdtiqm68ZzFDRRwfxcLgX
T0PsBnr4XeYh1X87GHXQk3BFhO3uvgTAmpwz50GVPdxmDZBxqK/zidr81fbrcy/w
C7hbggH6fHsbZ9znMx7C5pB/gE/AmxwdO4xAzDGmPEqWBJeYiJKSKnhoH0bpY8ui
cJeHE636fB57bsX/15G/GXCvEt7jGIpHBRGCXVsVTVch
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:16 2024 by rpki-client on console.sobornost.net