Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/3qT3jo5uAUw-wx9zu_ClMbK9rHA.roa
File: 3qT3jo5uAUw-wx9zu_ClMbK9rHA.roa (raw, json)
Hash identifier: cHkHGoj0bytBdDmquQlYym66h7HSJU/JKrDtF4UQnPA=
Subject key identifier: DE:A4:F7:8E:8E:6E:01:4C:3E:C3:1F:73:BB:F0:A5:31:B2:BD:AC:70
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 0187A218B704522719D40168740CE6EEC7C8
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/3qT3jo5uAUw-wx9zu_ClMbK9rHA.roa
Signing time: Fri 21 Apr 2023 04:35:41 +0000
ROA not before: Fri 21 Apr 2023 04:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.66.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a2:18:b7:04:52:27:19:d4:01:68:74:0c:e6:ee:c7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Apr 21 04:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dea4f78e8e6e014c3ec31f73bbf0a531b2bdac70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:26:a3:61:9f:bf:33:0f:5a:bc:32:a9:5e:fe:
7f:6a:49:60:05:db:37:6d:24:98:1a:b5:c0:c4:88:
6a:42:c3:17:36:1d:63:4b:f1:ef:52:db:ef:a5:9e:
c7:a2:52:7e:d0:02:e5:e0:b2:4a:b0:c2:5c:7b:0a:
7f:78:2e:e6:8f:86:fe:4d:74:d9:d7:f8:fc:c5:fc:
94:3c:91:18:f1:51:b3:4b:84:cf:fa:b1:82:56:de:
bc:b1:cf:06:5d:bc:d4:80:f1:ac:9f:98:1d:c6:30:
fe:bb:d2:83:48:71:28:90:45:23:6d:2c:38:85:6c:
9b:fc:f1:9c:2d:3d:da:f9:2d:20:b1:b1:df:ac:60:
07:e6:23:a9:b8:7b:84:72:63:4f:24:13:5d:0e:27:
0e:61:f6:ba:40:94:de:cd:e4:f2:fd:b1:ff:a0:c1:
cb:6d:6d:3f:5f:96:8c:6f:35:cd:0a:fe:94:2c:31:
49:cc:6b:63:34:0a:7c:b9:b5:8f:da:65:ab:a0:c6:
48:d2:a5:74:45:42:99:fd:d8:47:1d:b9:61:85:2c:
6b:29:b2:7a:69:90:6f:53:0a:d9:0e:f2:ad:a5:c3:
f7:3a:29:e2:a7:fd:60:f3:a8:5b:4c:4f:f2:9f:84:
ca:b5:82:b8:95:e0:17:cc:0f:f7:fe:fa:29:d5:5c:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:F7:8E:8E:6E:01:4C:3E:C3:1F:73:BB:F0:A5:31:B2:BD:AC:70
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/3qT3jo5uAUw-wx9zu_ClMbK9rHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.66.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:91:d7:da:7b:54:99:2f:00:de:25:73:a1:1f:1e:c3:76:9b:
d2:f7:91:12:2d:d1:2b:96:47:10:c2:87:16:25:21:17:bd:77:
aa:40:0f:85:26:0c:85:3e:05:0e:44:18:b5:cb:44:eb:ba:32:
5f:6b:b2:68:df:b8:49:0a:19:dc:ef:a3:e8:41:90:a9:49:ff:
8f:39:b9:35:69:fd:16:40:a6:90:13:10:57:2f:a6:3e:10:47:
b5:af:25:00:75:89:d0:af:52:58:37:e8:f9:c2:e2:55:88:eb:
62:96:b7:a4:3a:cd:b8:c5:11:c5:51:e5:c2:b6:e2:36:a9:31:
90:ca:a6:63:f2:51:80:12:78:76:76:4b:97:36:f1:cd:62:7c:
a2:8b:ea:e9:bf:77:89:23:82:5c:e8:e3:ca:59:2f:07:81:9f:
33:0e:7d:b3:da:a5:c5:e8:86:02:e4:e2:4c:2d:8d:c5:f8:aa:
c7:47:dc:06:96:2a:ae:0b:d6:32:f4:21:b7:a6:dc:bc:5e:db:
ae:aa:73:f1:a9:d8:67:b3:5e:f1:2d:bc:5a:8a:b1:01:4e:a7:
ab:72:79:9f:0c:06:e7:b6:e7:12:3a:0c:e5:36:5c:4f:be:34:
af:b8:d8:54:7e:b1:96:44:ec:2d:e5:3e:05:87:68:3e:89:79:
4a:34:3c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net