Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/H6USlW6WvMp1qRw7lqXR8P_cDog.roa
File: H6USlW6WvMp1qRw7lqXR8P_cDog.roa (raw, json)
Hash identifier: 64NW9BzMnnQJtpLdr4Fm4C95jID+p7G3LyRaUfZYfVU=
Subject key identifier: 1F:A5:12:95:6E:96:BC:CA:75:A9:1C:3B:96:A5:D1:F0:FF:DC:0E:88
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018E10190DB76F26983B1B14611268492145
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/H6USlW6WvMp1qRw7lqXR8P_cDog.roa
Signing time: Tue 05 Mar 2024 19:31:01 +0000
ROA not before: Tue 05 Mar 2024 19:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Mar 2024 17:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:10:19:0d:b7:6f:26:98:3b:1b:14:61:12:68:49:21:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Mar 5 19:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fa512956e96bcca75a91c3b96a5d1f0ffdc0e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:8c:15:5e:d8:b1:78:d7:02:23:fd:d3:c0:
aa:84:57:83:92:4d:5c:35:19:7a:94:1b:16:cf:33:
1d:ca:60:10:4a:92:d8:d3:e0:cf:2c:f2:ae:a0:bb:
30:e7:2c:e0:23:51:78:60:76:1d:67:3e:0d:c4:0c:
20:60:14:c5:aa:1e:bd:88:2c:5d:1d:b5:1f:24:2c:
be:ea:21:47:2c:a4:5c:e7:9e:4f:3b:71:05:4e:62:
58:ec:d5:c5:f6:0f:42:6a:e0:2f:12:38:ee:b8:88:
39:17:8d:ad:63:b2:e1:bc:db:c1:68:49:e5:ca:50:
47:25:28:d6:8a:c8:48:ff:45:77:cd:bc:90:fc:04:
60:18:7c:69:c6:dd:70:06:c4:50:02:4e:9c:2c:e3:
7c:a6:60:0c:ef:56:2f:74:d7:4c:6e:53:b6:30:32:
2d:8f:94:53:06:cd:55:ab:71:38:93:59:ef:9f:b5:
35:cc:01:fa:0a:8f:6e:3c:da:cd:b5:b4:ba:cc:c1:
25:d5:dc:a5:4a:e0:a9:eb:4d:31:a0:86:b4:5a:5a:
b2:f3:e3:79:c6:df:ae:ae:ba:d0:42:17:1f:8d:1e:
e8:a9:67:00:ad:9a:d2:bf:83:72:78:9d:67:27:b7:
0c:8e:0a:61:93:6c:35:8e:71:50:9f:ba:9a:30:b9:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A5:12:95:6E:96:BC:CA:75:A9:1C:3B:96:A5:D1:F0:FF:DC:0E:88
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/H6USlW6WvMp1qRw7lqXR8P_cDog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
02:77:98:98:e2:51:9e:80:98:da:14:9b:e5:b9:bd:b4:41:61:
bc:4e:72:f8:14:c0:ac:a3:cf:6d:84:f2:53:2e:8d:32:75:88:
93:52:b3:eb:d7:26:76:4a:b7:89:15:42:56:c9:9d:c7:7d:2a:
f2:83:82:0f:52:eb:bb:c3:49:52:fd:0c:f7:9b:14:bf:6b:9e:
da:eb:6c:18:df:94:b0:d0:6f:aa:22:52:42:bf:b0:8f:b1:23:
73:c3:28:3b:af:75:ef:3f:31:d1:1e:7a:06:4b:2d:b8:2f:a7:
73:91:fa:ae:9e:a4:28:85:a5:f8:0f:c0:b9:1c:ac:1d:1e:3a:
10:5e:3a:df:08:54:f7:25:dc:d0:99:bd:a6:e9:16:fd:31:79:
d8:37:6e:91:a6:56:b2:99:11:b4:30:58:21:31:05:e3:60:25:
eb:8a:b8:b1:5c:77:d8:8c:7a:a3:02:a3:a9:04:e3:3d:3c:21:
63:a0:07:1a:41:e6:4b:ef:be:ba:44:47:c2:6c:1c:aa:82:db:
4e:c9:b0:4c:3d:6b:da:6b:c2:0e:e9:3b:96:e4:49:a0:06:68:
fe:fa:ef:92:a0:45:b1:e0:fa:6d:a1:9d:2f:c9:69:fb:3e:05:
87:4c:5f:d1:d3:43:39:2c:40:91:25:9a:92:0a:3d:29:2c:ac:
9e:d9:57:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 10 20:56:20 2024 by rpki-client on console.sobornost.net