Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/onxiyKF_DfHk7K0Y-nbmE8ic-_8.roa
File: onxiyKF_DfHk7K0Y-nbmE8ic-_8.roa (raw, json)
Hash identifier: AUbwO8SgKBSpWnlntm4hJIwV3vWngTajVyOBIAvFAz0=
Subject key identifier: A2:7C:62:C8:A1:7F:0D:F1:E4:EC:AD:18:FA:76:E6:13:C8:9C:FB:FF
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 018570152FC1733D8F9D5E893F530423B363
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/onxiyKF_DfHk7K0Y-nbmE8ic-_8.roa
Signing time: Mon 02 Jan 2023 01:25:14 +0000
ROA not before: Mon 02 Jan 2023 01:25:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51409
IP address blocks: 178.255.56.0/24 maxlen: 24
178.255.57.0/24 maxlen: 24
178.255.58.0/24 maxlen: 24
178.255.56.0/21 maxlen: 21
178.255.59.0/24 maxlen: 24
178.255.60.0/24 maxlen: 24
178.255.61.0/24 maxlen: 24
178.255.62.0/24 maxlen: 24
178.255.63.0/24 maxlen: 24
185.41.227.0/24 maxlen: 24
185.41.224.0/24 maxlen: 24
185.41.225.0/24 maxlen: 24
185.41.226.0/24 maxlen: 24
185.41.224.0/22 maxlen: 22
45.146.157.0/24 maxlen: 24
45.146.158.0/24 maxlen: 24
45.146.159.0/24 maxlen: 24
45.146.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:2f:c1:73:3d:8f:9d:5e:89:3f:53:04:23:b3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Jan 2 01:25:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a27c62c8a17f0df1e4ecad18fa76e613c89cfbff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:1b:35:f4:85:45:fa:b3:86:09:e8:1e:ca:
eb:ea:e0:8b:d4:21:32:a3:71:51:77:d9:f7:e5:2c:
24:a3:38:a7:94:f8:04:94:09:3f:8a:18:2c:7e:75:
e0:bb:75:39:d5:7b:fd:0b:b0:8d:c7:6a:a3:18:12:
7b:7e:24:4d:0b:7c:a7:07:60:c1:21:a6:c4:1d:0d:
e1:58:a5:ca:3f:08:65:2d:ee:21:d8:aa:74:6e:7f:
a3:3a:02:31:f8:ec:51:e3:06:65:83:c3:eb:97:87:
6a:c5:b6:c2:10:67:40:d5:66:fe:ea:75:63:c0:81:
4e:4d:11:72:8e:6f:05:6a:f7:3d:3e:b3:56:0f:db:
98:f7:43:e3:4c:d3:4e:06:ee:73:c0:bd:b4:3f:da:
53:55:25:20:c5:cd:6e:b1:74:eb:fe:fa:07:f4:47:
96:9c:47:5e:48:bd:16:66:3a:49:d6:7a:64:6e:e6:
45:de:c1:eb:a4:9f:24:97:91:a5:0f:45:76:db:53:
7e:34:5d:0d:93:b1:7d:e4:85:ce:1d:00:cb:2f:55:
7b:ee:82:c2:34:2a:8c:0b:63:7f:fe:83:eb:fd:23:
9b:6f:dc:ae:42:2e:b3:f4:79:c3:3f:b8:8e:b2:09:
2f:19:77:12:67:ba:b8:c3:21:7d:a5:4d:0b:70:73:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7C:62:C8:A1:7F:0D:F1:E4:EC:AD:18:FA:76:E6:13:C8:9C:FB:FF
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/onxiyKF_DfHk7K0Y-nbmE8ic-_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.156.0/22
178.255.56.0/21
185.41.224.0/22
Signature Algorithm: sha256WithRSAEncryption
63:bb:81:77:5c:85:99:3f:b1:00:ac:26:2d:fd:de:e2:c3:a7:
96:cb:b4:db:c6:eb:96:bc:34:44:24:54:b5:40:4f:39:0b:42:
f4:1e:16:2a:f2:5a:3e:ac:91:c8:6d:b2:b9:e9:7d:ee:64:bc:
32:0d:be:1e:cb:e5:03:a0:25:18:2f:a2:c4:5a:14:42:5f:cb:
59:78:06:6c:9c:fb:41:e5:4f:82:ff:ad:47:d8:1b:7a:33:86:
eb:af:e1:5d:5a:17:03:a7:db:24:72:58:56:60:8d:5e:9c:a4:
cf:86:93:d5:e0:3b:6f:18:47:72:bc:31:7d:1e:73:4b:92:ee:
f4:a5:fc:1a:4d:c4:c3:cf:dd:5a:29:ea:69:22:0f:69:89:4c:
a3:56:27:28:6e:c8:96:ab:c7:a9:d5:67:6e:75:78:32:2a:ea:
60:aa:68:4a:7a:87:b7:b2:26:04:43:35:ee:d9:e2:0b:61:28:
3b:03:4d:70:36:db:05:e1:d9:7b:32:46:5a:a4:59:44:3c:59:
fa:7a:ba:07:10:3c:9a:6e:15:bc:1a:81:b5:0c:65:81:e1:63:
7d:69:53:60:0c:78:32:77:cf:76:b5:88:7a:5b:77:ad:39:3d:
80:52:b5:81:b0:84:89:1b:98:f4:bb:b4:ff:34:8a:7a:7d:a5:
86:49:0f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:48 2024 by rpki-client on console.sobornost.net