Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/epgcQBhnwdNcfR1MLzLKnCXnOg4.roa
File: epgcQBhnwdNcfR1MLzLKnCXnOg4.roa (raw, json)
Hash identifier: uTiI4ToYRtKpblsUqxxwRbUcReJboQ6Qsys3sJlqkEc=
Subject key identifier: 7A:98:1C:40:18:67:C1:D3:5C:7D:1D:4C:2F:32:CA:9C:25:E7:3A:0E
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 01856D4ABA8777F759C7DFBF888D44A91ECF
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/epgcQBhnwdNcfR1MLzLKnCXnOg4.roa
Signing time: Sun 01 Jan 2023 12:24:52 +0000
ROA not before: Sun 01 Jan 2023 12:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202335
IP address blocks: 45.8.179.0/24 maxlen: 24
45.8.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:ba:87:77:f7:59:c7:df:bf:88:8d:44:a9:1e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 1 12:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a981c401867c1d35c7d1d4c2f32ca9c25e73a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f0:e1:55:00:49:c7:1a:7c:0e:c5:89:b5:7c:
65:ac:58:ed:87:64:d0:84:b2:a2:de:73:e7:9a:9d:
fe:3c:08:85:8e:14:8c:b0:0b:d1:80:8a:e0:b2:44:
f6:63:21:ac:1b:a2:79:74:8f:7e:00:49:f4:c0:13:
36:b4:0e:02:47:87:5f:e8:9f:47:14:d7:0f:0e:49:
25:66:56:51:62:0d:48:0f:39:ef:dd:c3:be:a5:e1:
34:4d:64:e8:9e:67:70:08:c0:6e:7a:5c:6e:ad:90:
18:36:72:a2:3f:e3:d0:72:6b:26:8a:64:5a:e9:2b:
d0:fe:90:f2:a3:a3:7c:fd:69:ea:36:ef:49:da:62:
9e:c8:94:56:d0:b0:1c:60:ee:35:ea:81:b5:5e:79:
a6:42:ad:62:eb:ed:39:6f:4c:2c:06:05:58:94:5b:
ea:9f:d5:be:31:24:00:36:34:f4:e9:2f:14:68:1a:
61:36:61:20:dc:3a:af:54:75:08:7d:e9:43:fa:19:
8b:4a:c6:7d:81:8f:a4:17:6b:8f:47:8c:33:27:b3:
86:f6:48:7f:03:88:7f:f6:25:c8:34:b1:1f:44:1c:
2b:ef:32:75:ba:69:f8:63:a7:0a:be:e4:5e:88:5d:
f5:ce:b8:60:de:59:b3:48:60:e3:bf:97:56:a7:59:
f2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:98:1C:40:18:67:C1:D3:5C:7D:1D:4C:2F:32:CA:9C:25:E7:3A:0E
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/epgcQBhnwdNcfR1MLzLKnCXnOg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.178.0/23
Signature Algorithm: sha256WithRSAEncryption
26:93:de:14:2b:1b:88:25:a1:84:17:e8:46:1f:51:24:6a:5e:
b7:7c:64:b1:30:d6:4e:5d:1b:d6:c6:a8:e1:d8:bf:f5:d7:1e:
42:ea:c8:87:2e:92:9b:73:29:8f:ff:d0:64:38:3c:66:6c:44:
3c:0e:ee:55:0f:b6:1c:d7:9c:2b:28:8e:5b:74:a3:a3:6c:6b:
75:d5:8a:98:34:e9:3f:ab:84:b9:6d:a7:02:67:00:0e:93:97:
3c:a2:17:1f:0a:41:76:2c:91:42:be:00:da:2f:75:50:ae:f3:
a5:db:02:02:24:22:b2:85:4c:6b:47:fe:46:c4:fe:bc:8f:65:
9a:94:2e:7d:5b:7c:cc:7c:a9:9a:3e:9e:c1:8a:c0:b6:1b:a3:
7b:41:98:99:ea:39:6b:03:76:13:3a:eb:e3:46:69:2e:37:44:
dd:3f:aa:6d:e3:43:29:1c:7e:b4:c3:f5:8e:95:ff:84:f1:6b:
62:8b:77:1e:64:85:23:ae:35:63:a9:73:f8:92:ba:a3:c2:34:
c0:2d:f9:60:b1:50:a1:cf:22:21:f4:d4:7d:60:5b:48:83:3b:
fb:f4:35:51:da:90:4b:8b:25:ab:e6:d8:14:6a:81:2c:ab:6f:
fb:3c:2c:26:da:ad:fc:d4:b1:d6:22:6e:7b:e2:36:72:7d:8d:
ae:07:6e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:16 2024 by rpki-client on console.sobornost.net