Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/VmUctnPlY9hFWMhlMzIpzOEtWgc.roa
File: VmUctnPlY9hFWMhlMzIpzOEtWgc.roa (raw, json)
Hash identifier: 0bQklM472tbDsuyDacGTrFu5Jgh6fDMC/b7qMGRlgjw=
Subject key identifier: 56:65:1C:B6:73:E5:63:D8:45:58:C8:65:33:32:29:CC:E1:2D:5A:07
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 01856D8198DB03DF0C57B2D47E9BFC7EFA06
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/VmUctnPlY9hFWMhlMzIpzOEtWgc.roa
Signing time: Sun 01 Jan 2023 13:24:47 +0000
ROA not before: Sun 01 Jan 2023 13:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 45.158.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:98:db:03:df:0c:57:b2:d4:7e:9b:fc:7e:fa:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 13:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56651cb673e563d84558c865333229cce12d5a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:89:da:aa:42:2d:01:04:85:02:d8:e1:7f:
09:4d:4d:33:21:ca:e5:79:1b:c8:84:a1:c2:06:2c:
40:b2:ad:9d:b9:74:26:c7:5a:cf:8c:44:10:b6:e5:
27:1b:0a:b7:51:f6:e5:c2:3c:b5:98:8d:9e:1f:63:
1d:b1:23:9d:f0:a6:13:c7:48:20:69:9d:3f:4f:b8:
05:a3:6f:3c:e9:aa:c8:00:9c:4b:b3:a4:ac:84:ac:
43:62:5b:d6:5b:7a:9b:da:7d:d0:f8:83:d1:77:76:
12:63:a2:a9:12:cc:e3:a6:75:6f:79:d0:b1:2e:c0:
f2:ab:85:8c:29:b3:ad:db:95:39:66:10:db:46:93:
91:81:10:a4:f2:a6:07:77:86:37:30:c3:52:91:47:
09:32:21:dd:25:67:a7:a3:f5:07:82:90:dd:a9:af:
f2:2f:db:83:ac:b4:0f:32:94:d9:93:bd:bc:52:40:
bd:cf:a6:bf:99:b0:68:5b:60:30:ef:54:40:9c:ec:
32:cc:0f:f1:bf:03:7d:b7:e4:1a:fe:11:15:b7:17:
7d:e9:59:c3:18:69:c6:d1:a5:6c:74:2a:c5:ee:8d:
b2:8f:a8:9b:38:23:5a:44:12:87:9f:d2:66:45:3e:
9a:9c:84:32:6e:eb:26:db:53:b4:3e:0f:e0:a4:2a:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:65:1C:B6:73:E5:63:D8:45:58:C8:65:33:32:29:CC:E1:2D:5A:07
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/VmUctnPlY9hFWMhlMzIpzOEtWgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.12.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:1f:ca:db:f0:82:dc:d0:3d:23:f8:f4:8f:a6:83:7e:12:e2:
ce:38:88:8c:0d:71:54:ff:5c:e1:40:d4:ca:df:64:a2:f7:78:
df:8d:55:88:a8:ea:1c:b7:ed:f3:6d:0a:e7:d5:ac:65:bd:4e:
2f:1d:83:c6:23:44:41:c0:74:8c:af:a0:33:97:9d:d1:5c:75:
26:93:77:d3:31:76:a6:d4:a4:f2:5e:17:40:62:6c:db:14:48:
a5:a6:77:ec:3b:19:20:ae:ea:5b:d2:a6:28:4a:75:f2:30:4f:
88:d2:8e:a6:15:8c:8a:27:25:af:c3:30:3b:56:89:f3:d9:93:
b8:bb:32:df:9d:a0:ef:a7:05:ab:34:77:cb:44:af:77:a9:e1:
5a:7e:6f:99:61:6c:75:46:26:2a:fe:78:bb:92:c6:d1:cb:17:
7d:7b:cc:6d:f7:14:4c:92:c8:43:01:28:f4:96:47:83:96:86:
b5:d9:7d:ac:f5:a6:5e:9c:e0:c3:f1:28:c8:95:c7:8a:6f:4a:
7a:bb:72:40:a0:d4:59:62:2b:1d:b9:c4:5d:18:a7:86:d7:65:
ee:be:ce:cd:cf:55:81:24:7e:d3:bf:fb:b2:58:5a:28:49:07:
28:41:18:8f:a0:43:91:55:63:84:19:7c:93:bb:2d:7b:64:f2:
ef:93:23:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:46 2024 by rpki-client on console.sobornost.net