Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/yRitcM9sayoR4fjafqetC6OpMh4.roa
File: yRitcM9sayoR4fjafqetC6OpMh4.roa (raw, json)
Hash identifier: GVTqWlXumAuRpK8NNgveI2WnZDsS/mMpwu2mtvAzfLM=
Subject key identifier: C9:18:AD:70:CF:6C:6B:2A:11:E1:F8:DA:7E:A7:AD:0B:A3:A9:32:1E
Certificate issuer: /CN=d2ba2618ab4b6042ee25c4679e0775e4306d71c6
Certificate serial: 01856F14AA816A8BE5FA696145B87418EF25
Authority key identifier: D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0romGKtLYELuJcRnngd15DBtccY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/yRitcM9sayoR4fjafqetC6OpMh4.roa
Signing time: Sun 01 Jan 2023 20:45:03 +0000
ROA not before: Sun 01 Jan 2023 20:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42881
IP address blocks: 45.145.176.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:aa:81:6a:8b:e5:fa:69:61:45:b8:74:18:ef:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ba2618ab4b6042ee25c4679e0775e4306d71c6
Validity
Not Before: Jan 1 20:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c918ad70cf6c6b2a11e1f8da7ea7ad0ba3a9321e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:f2:b0:bc:de:db:00:fe:35:7c:e7:8b:2b:
7f:8e:9e:d2:a4:a3:0a:27:f2:39:ce:3e:4b:d8:3c:
9e:81:29:c2:fd:3c:a9:8d:f7:c1:f0:df:ec:82:ac:
fc:3c:6f:1d:71:08:a4:c9:8a:ca:5b:4f:e7:36:db:
77:98:3b:b0:7e:41:a1:9a:84:cf:ad:d4:53:1f:5d:
2a:a5:15:33:31:87:85:42:87:17:e9:2f:08:a4:b2:
5a:ab:97:30:44:90:64:98:3b:4a:ea:b1:25:86:30:
07:63:88:7a:49:56:84:1d:02:6f:de:26:85:4f:52:
06:1e:01:d0:f3:a6:26:22:86:07:3e:e9:8c:2e:f9:
d0:0b:9a:e8:47:25:bd:86:3f:98:ff:0e:ee:08:41:
d4:6b:36:f2:37:5c:2f:ce:cc:59:d0:70:9d:c3:7f:
e1:c5:be:5e:2c:1b:c6:7a:c7:ac:fc:7e:4a:af:e8:
79:a3:5f:e0:82:59:ab:cb:88:a2:47:13:69:d2:43:
a0:35:91:a5:75:f4:0a:00:b7:31:16:0e:0e:fd:95:
34:c2:6e:95:3c:1e:53:bb:f1:25:57:1b:5e:2b:fb:
5a:42:de:7c:11:44:b8:59:c3:a6:57:14:d2:07:1c:
fa:ca:47:55:68:0a:64:49:be:3a:55:64:a4:ec:84:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:18:AD:70:CF:6C:6B:2A:11:E1:F8:DA:7E:A7:AD:0B:A3:A9:32:1E
X509v3 Authority Key Identifier:
keyid:D2:BA:26:18:AB:4B:60:42:EE:25:C4:67:9E:07:75:E4:30:6D:71:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0romGKtLYELuJcRnngd15DBtccY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/yRitcM9sayoR4fjafqetC6OpMh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a67996-54f1-4f1e-a760-8e0d5293aac8/1/0romGKtLYELuJcRnngd15DBtccY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.176.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:c1:27:2f:51:c6:cd:7b:aa:26:cd:f3:46:d7:e5:a5:80:87:
f9:5a:33:6e:b8:5c:63:26:70:b3:80:95:37:b2:e7:dd:47:9b:
28:dd:52:32:f8:16:04:d1:17:0f:38:dc:9c:63:41:2e:10:61:
c1:87:d4:f8:2a:08:b5:c7:d9:1e:b1:31:b9:ef:df:3a:9f:dd:
cd:d7:2d:4b:88:48:c8:ae:5c:a0:b2:33:ce:d4:4e:15:9d:50:
b8:63:a0:dc:01:6b:2a:8f:db:66:16:af:5a:fb:d8:a4:5d:f6:
34:37:34:f3:d9:4b:07:18:0f:85:74:2d:a9:c3:1d:e7:4e:05:
60:01:83:6e:ea:37:91:79:7d:a0:2e:07:76:38:c4:5e:1b:72:
9d:b0:e1:11:42:11:0c:e3:59:ad:31:73:f9:38:08:23:28:af:
e6:1f:d5:92:e2:50:61:da:c0:c8:cc:c3:b7:38:86:3a:51:b9:
44:84:7f:7b:9d:93:f5:4d:f2:5a:cc:5f:63:10:7c:68:97:ae:
a4:9d:cc:9b:04:4e:38:87:ac:41:74:3a:fb:30:cb:5c:87:06:
33:94:d9:f1:e5:c6:28:21:89:48:f2:3e:29:84:a4:2c:df:b8:
70:cc:f4:d9:79:10:f2:40:9f:e9:f6:5c:40:ff:7a:47:3c:98:
14:80:41:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:00:56 2024 by rpki-client on console.sobornost.net