Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ECUKtfm5xW4ZcSYkr90sam8ozLI.roa
File: ECUKtfm5xW4ZcSYkr90sam8ozLI.roa (raw, json)
Hash identifier: kvqYxph9SDfL4BhbqZjm0JCLYdltl9lycA4j8QTuqII=
Subject key identifier: 10:25:0A:B5:F9:B9:C5:6E:19:71:26:24:AF:DD:2C:6A:6F:28:CC:B2
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 018A516148D8B684F5E42E2C4A39F3CCF048
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ECUKtfm5xW4ZcSYkr90sam8ozLI.roa
Signing time: Fri 01 Sep 2023 15:34:04 +0000
ROA not before: Fri 01 Sep 2023 15:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210122
IP address blocks: 45.8.176.0/24 maxlen: 24
45.142.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:51:61:48:d8:b6:84:f5:e4:2e:2c:4a:39:f3:cc:f0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Sep 1 15:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10250ab5f9b9c56e19712624afdd2c6a6f28ccb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b6:2d:87:1f:a5:d6:6f:37:1d:3b:a4:e5:b6:
12:1e:12:ed:42:da:ca:19:a9:85:e0:21:7c:13:26:
80:a1:b2:3e:2d:c5:88:eb:ec:12:ee:a3:35:22:1d:
ea:8c:6d:27:44:ba:45:6d:68:e2:72:59:7f:5a:42:
1c:f8:15:45:3c:14:f7:19:1e:9e:ee:a6:bd:b4:6f:
96:76:1d:9c:51:62:e3:b5:8b:b6:73:21:79:eb:26:
de:6c:1a:76:39:a5:2d:11:70:34:23:b2:01:81:ee:
93:c2:c3:5e:d0:27:7b:a2:33:60:8d:82:a9:42:60:
79:ca:7f:e7:84:26:e3:af:fb:be:fc:20:3c:a4:fb:
2c:d2:83:a8:76:2f:68:2e:10:0a:94:e0:dd:f1:95:
cd:bf:a6:fc:bd:4d:63:cc:70:d5:2c:ff:cf:79:52:
67:e7:4b:10:47:5a:40:8a:a0:c6:e4:24:87:6f:82:
d7:4c:f8:d0:a2:1f:e7:f0:e1:35:05:de:53:fe:5e:
b7:4f:12:d4:87:4f:b6:ac:a1:c9:dd:66:2b:c3:e4:
7a:a0:d3:17:f5:fc:72:f5:b4:57:57:28:e1:6a:64:
38:20:82:11:47:cd:b9:28:f7:3b:48:50:2b:bb:56:
34:44:c0:a9:34:04:54:86:e7:a1:73:60:7f:4a:90:
77:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:25:0A:B5:F9:B9:C5:6E:19:71:26:24:AF:DD:2C:6A:6F:28:CC:B2
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ECUKtfm5xW4ZcSYkr90sam8ozLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.176.0/24
45.142.0.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4d:df:dc:26:5c:ef:03:6c:40:25:61:66:3c:15:71:1e:0a:
58:79:30:85:ef:43:3c:7b:83:50:af:aa:8f:04:8c:70:75:a9:
8a:80:f3:14:cc:19:25:4e:ab:37:3e:34:94:98:e0:12:f1:7a:
27:1e:dc:17:c9:2f:93:11:ba:e1:fb:39:0a:68:4a:6a:75:02:
bc:ac:5c:cd:ee:62:9d:d8:1d:7a:cf:ad:0c:75:29:20:13:2e:
b1:2d:06:7b:29:48:81:ad:de:d9:55:e0:9d:d3:f1:11:02:fd:
93:43:f1:1d:36:3e:f5:34:80:67:4d:a1:3c:06:42:7b:5e:40:
31:d2:4f:30:e5:7e:d6:18:20:0c:78:02:a1:0a:58:e4:f4:dc:
5e:43:38:cf:ec:31:55:14:46:c3:f3:86:22:d9:7a:0e:94:80:
1a:38:e4:34:32:51:24:77:76:76:d5:a3:a2:88:80:8f:3d:34:
ab:12:23:8a:a1:c7:4b:db:5d:ed:02:cf:cf:66:25:19:2b:3d:
73:9f:eb:5a:c7:12:9e:cd:64:99:90:24:0e:65:97:96:a8:e5:
cb:d8:a3:d8:b9:8c:00:6e:f8:fd:9a:9a:e9:99:9d:a8:55:6f:
2c:72:8a:b9:ae:d2:1f:e3:74:ca:0e:98:d0:d3:29:e9:32:c4:
b1:36:e4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:16 2024 by rpki-client on console.sobornost.net