Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/tPWjkX8Tf_yW7B9R9A-0H4tDFr8.roa
File: tPWjkX8Tf_yW7B9R9A-0H4tDFr8.roa (raw, json)
Hash identifier: ggXVWyomMwOatpWjex71MtJDVfqHVSDvCqB85jgIK4I=
Subject key identifier: B4:F5:A3:91:7F:13:7F:FC:96:EC:1F:51:F4:0F:B4:1F:8B:43:16:BF
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018E298119E591E4905F5A8EA980AC216C7E
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/tPWjkX8Tf_yW7B9R9A-0H4tDFr8.roa
Signing time: Sun 10 Mar 2024 17:55:10 +0000
ROA not before: Sun 10 Mar 2024 17:55:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210164
IP address blocks: 212.46.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 13:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:29:81:19:e5:91:e4:90:5f:5a:8e:a9:80:ac:21:6c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Mar 10 17:55:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4f5a3917f137ffc96ec1f51f40fb41f8b4316bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:60:a4:1f:ce:08:ba:b7:4a:bb:81:1b:c6:a3:
04:12:12:9a:09:b7:a5:90:8e:ad:fc:d2:e3:00:f7:
74:45:5e:5a:08:cb:2f:90:aa:82:55:e8:a4:26:89:
4e:d5:4d:95:f8:85:e9:8f:1d:d9:db:b1:9e:ef:55:
28:21:7c:7e:0d:1c:28:81:8e:8e:fb:56:48:87:df:
61:f8:08:40:56:97:b8:49:50:f5:2d:dc:8d:fa:04:
ae:29:06:c8:4b:3b:d6:9a:dd:c7:80:e1:cc:d1:57:
0c:b7:5d:7d:c2:40:5c:f2:6d:88:66:e4:59:f4:2c:
09:74:04:c6:51:64:c2:01:15:dc:27:38:a0:47:7a:
90:4d:11:dd:e2:84:1b:82:99:81:2c:43:93:96:cc:
33:8f:97:ec:9e:a7:0e:15:47:bf:f4:93:5a:d8:5e:
66:a4:96:cc:e7:e0:b6:a5:58:b6:a2:99:53:fe:15:
28:03:55:2d:eb:ff:4a:fb:35:78:b2:18:24:f5:c3:
3d:3b:77:8d:6f:44:2c:55:80:d0:a4:17:6b:55:6e:
b1:38:5a:e2:a9:2c:06:77:44:29:2c:bf:43:a2:f8:
18:2b:16:fb:2e:9e:21:2a:66:95:2b:44:51:af:6b:
3f:84:be:dc:77:07:c3:65:16:03:62:ab:2d:af:46:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:A3:91:7F:13:7F:FC:96:EC:1F:51:F4:0F:B4:1F:8B:43:16:BF
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/tPWjkX8Tf_yW7B9R9A-0H4tDFr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:4d:fd:ea:08:9f:0f:e3:f2:73:e6:8d:64:01:ea:89:2c:db:
41:cc:98:8f:f6:33:f6:15:cf:0b:22:0e:5a:22:3c:0b:3b:b6:
b9:e0:35:c5:6c:f1:8e:3b:e3:46:d0:fc:12:2e:3c:d7:ce:b6:
d7:7b:f0:3d:40:03:00:48:36:2c:68:6a:3d:fc:2b:68:05:da:
2c:61:14:6c:c3:72:36:57:84:53:bc:b9:a9:60:8b:f5:d1:3d:
72:84:d5:c8:52:3c:a6:aa:61:f4:a7:98:1c:c3:5b:a8:de:45:
f8:8c:74:c6:34:8a:8a:eb:18:a8:67:be:cf:0d:80:1a:5f:2d:
9d:24:de:10:33:be:0f:47:21:4b:47:88:ad:bc:a6:cd:26:1e:
0d:a0:c0:a2:2c:a3:8a:c1:2f:50:e7:d7:30:be:44:a7:23:e8:
5c:a7:09:85:5b:52:c8:95:be:ff:91:d2:49:c7:a3:23:2a:fc:
17:36:f1:15:66:9e:6f:ed:78:e5:e3:dd:c0:4e:0d:04:31:3f:
09:9a:eb:03:42:98:49:b9:64:19:77:aa:cf:0a:8a:38:0e:99:
a2:2a:ac:7a:47:ca:97:ec:72:f9:dc:11:40:43:0c:41:f5:11:
fd:be:71:37:70:9e:27:e7:b9:1b:46:1d:3d:40:af:d5:3d:86:
a8:a8:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 17:59:45 2024 by rpki-client on console.sobornost.net