Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/pKxY5jjSjHH5IzJBcVp-Uby8kfk.roa
File: pKxY5jjSjHH5IzJBcVp-Uby8kfk.roa (raw, json)
Hash identifier: /sdggj/5TuYFHoMYfZ7SrQlCB9Q5CrUSDS6jZwEpc4w=
Subject key identifier: A4:AC:58:E6:38:D2:8C:71:F9:23:32:41:71:5A:7E:51:BC:BC:91:F9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B04D9CB3AB7A63978F8CA3460BFD382C4
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/pKxY5jjSjHH5IzJBcVp-Uby8kfk.roa
Signing time: Fri 06 Oct 2023 11:57:43 +0000
ROA not before: Fri 06 Oct 2023 11:57:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:04:d9:cb:3a:b7:a6:39:78:f8:ca:34:60:bf:d3:82:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 6 11:57:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4ac58e638d28c71f9233241715a7e51bcbc91f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:8d:19:43:a6:58:36:43:3c:c8:64:be:a1:
fe:ab:f4:29:f5:1c:0d:e7:29:18:26:3c:33:c0:ea:
63:8d:79:e5:df:fb:7b:e5:62:ca:2d:06:cf:4d:44:
c1:78:90:72:7d:d5:45:ab:f7:4c:3d:b6:95:aa:9d:
6b:ab:f5:ed:65:ee:c0:e4:39:1e:da:6e:3b:fd:3b:
a1:07:d0:84:8a:e8:81:fd:9a:5a:38:c4:bc:c7:5c:
3d:c0:6f:49:2c:92:c4:f6:e3:63:0f:16:74:e5:d8:
97:27:8a:d6:bb:0d:af:c1:25:1f:02:b8:9b:e3:f8:
08:1d:09:ac:f7:2f:18:84:95:96:7f:c9:23:68:a9:
57:14:2e:05:ea:77:39:56:33:c1:11:d2:1a:95:78:
81:9f:52:5b:24:f6:4d:e3:c6:a2:1f:a4:f7:93:ae:
82:f8:5b:9a:f7:52:86:23:a8:f4:80:b6:53:35:6f:
96:68:1a:8e:23:ed:fe:cc:5c:57:8d:b5:b1:c6:ea:
1a:4b:1b:3a:24:be:79:ae:87:15:58:32:45:81:6a:
55:64:e6:40:c4:dd:07:eb:e6:a8:33:b5:ab:53:1e:
15:c0:4f:15:c6:7a:27:d4:c3:42:3e:01:7f:16:36:
99:c1:f1:3d:53:0b:df:03:65:57:91:60:79:01:6b:
cf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AC:58:E6:38:D2:8C:71:F9:23:32:41:71:5A:7E:51:BC:BC:91:F9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/pKxY5jjSjHH5IzJBcVp-Uby8kfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.113.0/24
45.81.115.0/24
Signature Algorithm: sha256WithRSAEncryption
78:3d:21:bb:15:82:b0:19:3c:32:12:9b:82:36:97:44:3a:b3:
94:72:39:e4:7a:2e:5f:50:d6:87:02:7d:5e:f3:43:5e:39:cb:
88:76:e5:f5:fc:32:90:5a:8b:b2:e6:27:65:0a:55:49:66:47:
d7:0e:40:25:55:53:05:fc:c1:18:6d:9e:de:43:ec:8d:c0:d9:
78:12:84:12:13:bd:ee:9c:20:ff:96:0a:e2:51:5a:4b:98:ef:
33:94:2f:3f:01:4b:99:e3:71:d8:e1:f8:6b:a0:68:a6:5a:2f:
fa:4b:4b:09:3e:94:b5:6e:47:7f:a6:b0:b3:52:6b:52:1b:c5:
b2:f4:47:1b:cb:23:e0:11:ba:7a:35:75:90:cf:05:1b:04:f3:
3d:fb:74:2c:74:74:6e:e0:54:b1:f4:19:62:9c:c7:e8:04:08:
77:4f:2e:10:26:0d:4b:3d:38:f3:f1:54:dc:ac:fd:8e:8a:8b:
08:a2:be:88:71:46:c0:f4:84:cc:99:5a:86:a7:2f:54:63:1d:
6f:37:73:be:ad:f8:2b:ef:70:9d:3b:6d:fb:5a:a1:8b:60:e1:
55:c0:8b:46:68:79:10:85:ed:7a:e1:5e:91:80:87:4c:fe:31:
7f:98:8c:3c:60:b1:cc:92:ec:d9:36:f8:06:78:20:ee:7a:d2:
a2:39:95:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net