Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/CZdQU92KwhPB3TYFX4urmnJF9II.roa
File: CZdQU92KwhPB3TYFX4urmnJF9II.roa (raw, json)
Hash identifier: VYo9KVv7m1xifBZIXfZYsntZv/aUjslvM1stDGqOsLo=
Subject key identifier: 09:97:50:53:DD:8A:C2:13:C1:DD:36:05:5F:8B:AB:9A:72:45:F4:82
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 0185983B439949B162E68F6F5FFEC8C27E26
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/CZdQU92KwhPB3TYFX4urmnJF9II.roa
Signing time: Mon 09 Jan 2023 20:31:38 +0000
ROA not before: Mon 09 Jan 2023 20:31:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201115
IP address blocks: 45.157.175.0/24 maxlen: 24
2a13:3840::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:98:3b:43:99:49:b1:62:e6:8f:6f:5f:fe:c8:c2:7e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Jan 9 20:31:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09975053dd8ac213c1dd36055f8bab9a7245f482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:54:49:14:14:a0:d7:d0:ea:46:8f:ea:95:40:
a7:31:76:31:a6:4f:36:9b:8c:6a:21:63:15:d6:56:
25:be:9b:ea:96:ac:97:9b:4f:a9:1a:e2:ae:9d:e4:
d4:94:63:f4:23:7c:c3:e5:58:cd:32:4d:7f:d9:99:
b1:22:1a:e3:50:20:42:52:0e:e6:74:fe:51:03:10:
5f:fc:44:f9:f1:db:bc:45:58:98:de:54:4d:c8:1a:
62:6f:93:a6:10:0d:eb:eb:5f:c1:5c:5e:be:25:39:
ac:93:4f:54:15:12:0c:48:09:e3:1a:e2:eb:2e:09:
7e:63:0a:df:ed:11:c4:63:ec:f7:4f:c9:41:d7:6b:
6d:b9:83:3b:a1:1b:59:49:ff:56:9f:3b:51:cd:0d:
f7:68:45:96:df:22:6b:e1:38:2b:49:bb:cf:f4:b5:
11:71:58:a4:02:09:11:93:22:3b:67:12:4e:0e:ee:
e7:f2:c1:53:36:07:6a:87:cb:a0:2c:21:53:af:b3:
84:3b:52:dc:2a:42:69:23:de:88:ba:30:48:96:cb:
73:49:61:92:04:43:f4:90:51:f1:d2:61:ca:af:a9:
7e:15:a8:83:5b:79:c5:8e:d2:55:b3:c0:e8:8d:98:
3f:9e:bf:d4:49:11:c4:a7:19:72:6b:b1:a7:5e:73:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:97:50:53:DD:8A:C2:13:C1:DD:36:05:5F:8B:AB:9A:72:45:F4:82
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/CZdQU92KwhPB3TYFX4urmnJF9II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.175.0/24
IPv6:
2a13:3840::/40
Signature Algorithm: sha256WithRSAEncryption
8b:ef:42:75:2e:b2:e8:a7:99:39:5a:15:f3:6f:84:9c:10:30:
e0:57:34:ad:6b:64:2f:23:56:48:ff:56:5c:c1:b8:95:1c:e9:
f9:61:6b:93:cc:e3:ec:ca:3b:b5:d6:f9:0f:04:95:02:30:3e:
eb:1d:b3:84:68:ee:b6:ac:ed:cc:24:45:60:18:ed:9b:15:9b:
b0:8e:2b:29:00:79:e6:eb:71:e0:7b:87:13:d1:f7:51:67:20:
34:87:5a:e9:29:c6:97:d1:83:69:49:41:b8:d3:41:db:13:d2:
6d:82:b8:1f:ab:93:75:79:91:c0:e5:e8:79:13:e7:8b:69:4f:
af:36:d6:cc:54:f7:34:bc:2e:e6:92:6f:54:26:47:64:b4:a8:
80:7c:84:d5:82:bf:7c:32:3d:aa:b5:c7:09:23:2f:62:ce:e7:
5b:3a:4e:9b:1f:72:cb:ec:90:7f:26:c3:b2:e1:72:82:b4:00:
de:ff:92:04:29:12:98:01:15:8d:ff:86:11:80:29:4a:75:5e:
a8:71:18:29:3a:04:06:10:76:bd:77:02:23:20:0b:0e:5c:61:
9e:93:cb:f3:45:9e:f4:d2:bb:f2:00:30:5f:32:90:9f:06:0f:
24:97:3c:03:1b:77:0e:f1:cd:62:dd:91:c7:a4:8e:3b:ac:8a:
2d:28:0b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:33 2024 by rpki-client on console.sobornost.net