Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/SPddK9-_Xu905udQfoxr35B-Ebg.roa
File: SPddK9-_Xu905udQfoxr35B-Ebg.roa (raw, json)
Hash identifier: ys+LDxfHlCczPtYQbf3pHpPfiwFLe3nEKiWZ+7rXY90=
Subject key identifier: 48:F7:5D:2B:DF:BF:5E:EF:74:E6:E7:50:7E:8C:6B:DF:90:7E:11:B8
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018B7306EE37F92B7D63833B2C4A9E74B952
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/SPddK9-_Xu905udQfoxr35B-Ebg.roa
Signing time: Fri 27 Oct 2023 21:25:15 +0000
ROA not before: Fri 27 Oct 2023 21:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47583
IP address blocks: 194.55.132.0/24 maxlen: 24
194.55.133.0/24 maxlen: 24
45.145.184.0/23 maxlen: 23
45.145.186.0/23 maxlen: 23
193.202.44.0/24 maxlen: 24
193.202.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:73:06:ee:37:f9:2b:7d:63:83:3b:2c:4a:9e:74:b9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Oct 27 21:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48f75d2bdfbf5eef74e6e7507e8c6bdf907e11b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:50:6f:a2:27:0c:be:4e:48:4e:6f:46:f0:cd:
b5:c7:8a:79:25:68:a7:4c:89:a1:11:62:a2:70:6e:
f3:8f:84:5f:f3:e5:4b:a0:d5:81:69:be:21:a2:e7:
ed:93:63:75:b4:3d:4a:a1:90:19:2a:0c:0b:10:dc:
f2:ba:26:ee:e1:9b:b3:e2:41:13:2d:ca:38:e4:25:
06:32:34:5b:82:6e:7c:d0:b1:c3:2f:1c:f2:eb:b8:
0b:89:d6:41:2f:2f:fb:68:08:0f:52:71:90:92:ce:
d7:6c:2a:79:a9:a7:df:ce:bd:d9:33:d6:0a:cb:66:
b2:c1:d4:48:88:d8:58:63:ce:35:3d:f9:39:52:86:
97:58:df:cc:0e:ab:84:03:6d:26:ce:c4:ea:20:16:
ac:9d:7f:2c:ae:b5:a2:d1:e2:8c:ca:4e:bf:77:da:
84:17:cb:d2:1e:66:83:93:f0:ca:ae:0e:71:2e:15:
2b:89:c9:d0:91:52:f3:29:d7:71:a6:e0:31:57:6e:
fc:7e:7c:f2:bc:7e:4e:2d:34:75:81:68:10:ed:7d:
df:e8:54:39:b0:ef:34:0f:62:dc:5e:e5:3f:2c:94:
6e:e8:ae:24:a9:5a:41:6c:29:a0:22:29:c6:1a:6d:
fd:73:a0:7f:30:a8:c2:c5:b1:77:fc:45:ee:55:8e:
34:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F7:5D:2B:DF:BF:5E:EF:74:E6:E7:50:7E:8C:6B:DF:90:7E:11:B8
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/SPddK9-_Xu905udQfoxr35B-Ebg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.184.0/22
193.202.44.0/23
194.55.132.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:53:2c:35:de:49:ad:b6:32:ac:e3:fb:66:7d:11:aa:80:c2:
29:f1:fb:5d:8b:fd:71:73:6a:f3:a6:8e:de:7b:65:ce:04:dd:
09:58:52:d6:35:99:cd:aa:0e:85:5d:73:3b:ee:0c:79:86:ff:
4b:4a:f0:59:15:d3:95:a7:89:a3:a4:3c:12:11:e1:30:d6:41:
c8:50:89:84:b1:b6:80:35:c1:88:b0:5b:b8:1b:87:96:71:4e:
85:b5:d2:69:a3:e1:68:75:8c:e2:a7:f7:e8:c7:25:7e:37:d8:
16:ca:d8:df:a0:1a:c4:19:9f:ff:ca:cb:65:04:65:0d:03:1c:
25:cf:c5:24:e0:e0:a0:88:5b:6b:92:84:f3:9c:54:8c:6b:c1:
f4:ec:57:65:67:86:ba:1f:5a:da:f2:08:48:bb:15:de:83:cf:
50:ba:71:d5:1a:85:88:9b:d3:6a:59:83:5b:17:fa:f0:99:4d:
4d:c6:e2:6b:f3:12:93:2b:3d:fe:07:52:bb:cc:1b:42:02:93:
17:82:01:f8:99:89:a5:43:11:c9:6a:04:d9:aa:ba:06:9f:a8:
fe:99:db:21:fe:98:6c:c7:59:4e:c4:fb:1f:33:f3:29:c9:12:
ff:9f:67:c0:3e:28:33:fd:da:4b:f7:ec:fe:b4:30:a3:3c:6c:
39:20:13:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:46 2023 by rpki-client on console.sobornost.net