Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ndRw0luN8141xNuh4VeQY06X-UA.roa
File: ndRw0luN8141xNuh4VeQY06X-UA.roa (raw, json)
Hash identifier: U7p0/ABdk7AS1I+07A7WkZ45QFgP/UkzymJ/Akzdf6w=
Subject key identifier: 9D:D4:70:D2:5B:8D:F3:5E:35:C4:DB:A1:E1:57:90:63:4E:97:F9:40
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 0189DFA76C2E98A750B4F1896D20A4DC4225
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ndRw0luN8141xNuh4VeQY06X-UA.roa
Signing time: Thu 10 Aug 2023 13:33:58 +0000
ROA not before: Thu 10 Aug 2023 13:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208949
IP address blocks: 45.142.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:a7:6c:2e:98:a7:50:b4:f1:89:6d:20:a4:dc:42:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Aug 10 13:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dd470d25b8df35e35c4dba1e15790634e97f940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:bf:18:1e:dc:ad:f4:d8:8f:66:02:25:d7:
eb:fc:c3:5a:c4:fb:21:4a:ec:b9:44:71:59:b4:eb:
d0:08:b6:2e:60:c3:e7:f1:7b:71:01:9e:e7:04:35:
e5:9b:44:0a:59:64:14:49:c3:77:a1:f8:6f:67:33:
ec:48:02:5a:17:a5:87:b0:de:66:86:c8:cf:43:ef:
58:a4:46:77:25:67:1d:b2:a4:91:20:f6:25:87:d2:
43:ba:ef:2e:30:72:b3:5a:4e:78:82:a9:89:d6:9c:
f6:a6:18:4a:a3:cb:67:21:a3:d5:86:a9:41:77:88:
21:4d:5f:48:00:79:b3:7e:8d:e5:6f:d2:e7:d4:39:
94:43:ab:af:ee:7c:76:0c:5d:d1:04:33:15:0c:23:
71:d0:04:3c:d5:93:0c:a7:97:b4:22:07:99:58:4e:
eb:57:35:c3:82:9d:d3:16:98:5f:ff:58:00:02:f6:
61:c2:c9:48:cb:1f:c3:af:67:63:5f:d0:9e:7f:7d:
05:64:8e:cd:e5:dd:fd:8d:e1:37:4f:bf:7c:5b:f2:
e8:e0:1a:4a:d5:60:df:33:61:5d:74:3d:22:70:50:
62:17:24:c8:1f:cf:81:fc:b7:fc:67:30:03:7c:af:
fa:1b:0a:9b:19:2c:ad:1b:f7:f6:09:a4:11:0a:cf:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D4:70:D2:5B:8D:F3:5E:35:C4:DB:A1:E1:57:90:63:4E:97:F9:40
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/ndRw0luN8141xNuh4VeQY06X-UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.2.0/24
Signature Algorithm: sha256WithRSAEncryption
51:52:df:6b:f1:72:ea:ef:d8:2f:0f:c0:14:17:cc:7c:3d:23:
00:94:9d:b3:08:95:26:b9:ed:95:ba:ca:c7:71:17:48:fc:cd:
32:cf:de:6e:dd:44:28:7c:e5:ab:b9:61:40:6d:dd:27:f2:fc:
70:6b:a7:c5:85:41:30:43:eb:de:c2:34:89:d0:26:8b:a0:76:
4e:97:0c:36:dd:97:d8:c7:38:d3:2f:90:7e:ee:ad:7a:7d:7b:
26:ad:e5:8c:1e:f7:f1:48:0a:65:8e:f3:9b:dc:8e:85:61:3c:
e3:0f:f8:b1:16:f9:f5:b7:7c:c6:3b:8c:06:9e:4e:9f:1a:2a:
81:04:92:2c:89:57:c6:90:12:a6:49:23:db:6f:40:9a:6e:17:
cb:b0:17:9e:be:ca:ec:1d:96:2e:28:2c:bb:75:6b:76:cf:75:
3d:cd:9e:62:d6:2e:75:cb:6a:65:ba:68:d2:e4:82:bb:b3:43:
3d:0e:19:5b:67:95:2c:6b:76:5a:22:17:1a:d4:4b:b6:20:c2:
c6:37:c7:1b:91:f4:97:ce:40:c3:81:13:00:60:19:88:70:a1:
29:a2:c7:85:99:73:c2:ca:bf:81:00:53:9b:13:82:de:ae:8d:
a5:b5:6d:e1:4a:fa:c9:6e:8c:7e:9f:1e:ab:7d:64:80:e9:59:
d4:53:cb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:17 2023 by rpki-client on console.sobornost.net