Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/NHg8SbO-2rGZO7jrR5_xMj8JMy0.roa
File: NHg8SbO-2rGZO7jrR5_xMj8JMy0.roa (raw, json)
Hash identifier: VaIZD8lluuVilQIetwrrbBpZaESlhn1YOG0sXYihi5A=
Subject key identifier: 34:78:3C:49:B3:BE:DA:B1:99:3B:B8:EB:47:9F:F1:32:3F:09:33:2D
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 0187050DDDA478828B7408064B43F354C241
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/NHg8SbO-2rGZO7jrR5_xMj8JMy0.roa
Signing time: Tue 21 Mar 2023 16:43:27 +0000
ROA not before: Tue 21 Mar 2023 16:43:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44992
IP address blocks: 185.254.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:05:0d:dd:a4:78:82:8b:74:08:06:4b:43:f3:54:c2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Mar 21 16:43:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34783c49b3bedab1993bb8eb479ff1323f09332d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:a3:18:12:0e:40:d1:0b:42:5f:f2:46:41:
91:1f:ad:e8:a3:3c:bc:9e:ba:d0:ca:41:95:f4:ee:
a4:dc:86:a6:62:6c:eb:9b:90:cc:06:8b:5d:e4:c2:
3c:8d:aa:1d:e2:2f:cc:e3:a1:7b:b2:19:8f:f6:26:
97:66:86:dd:a5:2c:3d:a6:8b:9f:54:92:65:b1:4b:
6e:2b:4c:df:45:6e:8f:f5:40:26:60:65:4b:50:d5:
68:8e:a2:97:20:82:2e:32:fa:f8:dc:93:ca:44:99:
64:df:ba:4f:fe:37:0a:1c:d8:34:c6:6e:45:2d:52:
ed:fb:bb:54:f4:44:14:b6:06:e7:b9:d0:cc:ae:df:
bd:a6:90:1c:4e:76:0f:6a:c5:cc:d3:50:4e:ec:c7:
08:8d:73:ae:25:b7:9a:67:dd:8c:29:c4:65:49:32:
bb:52:64:f4:bd:53:28:15:98:4b:3e:a6:87:ba:ed:
c5:82:74:8e:4d:ba:45:5e:f2:8d:45:86:22:c0:a2:
78:d5:4d:db:d3:8a:ec:a6:af:09:39:ed:55:08:23:
95:8b:20:d8:e0:27:80:7a:a4:6c:8e:7b:44:da:00:
68:b8:38:c7:d7:b5:be:e6:14:3c:48:f8:11:d0:62:
57:5a:24:0b:2a:f9:e3:83:46:e9:0f:26:0a:19:20:
ec:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:78:3C:49:B3:BE:DA:B1:99:3B:B8:EB:47:9F:F1:32:3F:09:33:2D
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/NHg8SbO-2rGZO7jrR5_xMj8JMy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.18.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:25:a1:cf:ac:92:c6:9d:88:0d:69:a1:35:42:ac:0d:e4:1b:
14:96:94:71:eb:bf:2a:8d:dd:a9:ce:d5:62:f6:a0:5f:ce:9b:
7c:95:85:77:98:82:81:3e:5b:ca:47:84:00:dc:d3:26:26:aa:
ed:fd:48:ec:73:0c:96:c8:7e:c6:48:ec:11:93:95:c2:26:50:
b0:cb:c9:86:de:2c:c3:dc:72:8e:cc:3f:ea:79:9e:ad:f3:b0:
5c:59:15:2d:74:9c:01:d5:8f:ea:12:ba:21:00:3a:6c:05:a7:
c5:0e:7e:cf:46:5a:6b:3d:03:9c:0e:77:e8:46:35:d0:28:a2:
b7:7e:ec:8e:6c:e2:b6:28:3a:6c:56:1f:b1:75:5b:78:3b:ed:
53:14:3d:f5:fe:e6:95:c8:0b:54:0b:8c:8d:8d:e5:ca:5b:3f:
47:df:43:a2:76:e8:3a:b9:f5:81:5e:4a:f8:26:6f:03:bd:e7:
db:26:3b:3b:53:01:b9:10:3e:62:51:be:e9:ad:49:62:88:e6:
1f:c0:36:89:b4:89:4c:34:f7:01:9b:7c:4e:0c:24:cc:73:d4:
2c:72:e6:68:75:51:2b:2a:64:c4:83:36:d7:be:ff:9a:b1:50:
00:57:15:c2:ef:9b:21:51:7c:92:45:63:d7:22:80:4b:42:09:
4b:c2:3f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:33 2024 by rpki-client on console.sobornost.net