Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IMjMhD1csDUhRC3HAQYDZdkbVC8.roa
File: IMjMhD1csDUhRC3HAQYDZdkbVC8.roa (raw, json)
Hash identifier: FnJt8H96DmxL/j/OFM2IGASrK7L7EHshKb/kReRFf7g=
Subject key identifier: 20:C8:CC:84:3D:5C:B0:35:21:44:2D:C7:01:06:03:65:D9:1B:54:2F
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018837632757F18BD3AAC9C1E349EEE18565
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IMjMhD1csDUhRC3HAQYDZdkbVC8.roa
Signing time: Sat 20 May 2023 04:20:24 +0000
ROA not before: Sat 20 May 2023 04:20:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62390
IP address blocks: 45.155.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:37:63:27:57:f1:8b:d3:aa:c9:c1:e3:49:ee:e1:85:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: May 20 04:20:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20c8cc843d5cb03521442dc701060365d91b542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:72:6d:ae:33:f7:30:15:69:90:0a:d7:8c:c3:
dd:73:7f:d5:7d:1d:ff:e6:ae:84:4f:fa:e9:49:ad:
b1:0c:4d:65:ab:60:68:30:6e:92:86:b4:e4:b2:c9:
2e:d4:fe:43:16:e6:58:71:a8:b6:2a:ae:13:1f:01:
0b:d0:62:98:9e:93:9e:c5:fa:25:89:20:bd:7e:ac:
49:8e:08:20:25:a0:48:21:ae:db:f7:5f:cb:ff:95:
27:af:3c:5f:d0:b7:55:7b:d4:e4:ff:cd:39:b0:6a:
9c:24:c4:1c:b4:04:90:4e:f2:5c:45:d3:cb:e1:58:
2f:52:74:0a:c1:3f:1c:e0:a9:12:dd:11:6e:99:b4:
0d:d4:9d:84:ea:e1:a4:9d:df:b7:4f:41:d4:71:3a:
01:78:20:94:2b:12:14:45:08:1a:a3:4f:57:e9:5e:
98:0d:a0:5b:be:dc:82:a0:87:ed:3e:54:57:2d:64:
e4:22:47:ba:12:b0:ce:0a:80:a2:d1:1e:fa:5e:74:
c4:e9:77:6e:00:2a:1a:80:60:4b:42:68:4e:da:71:
69:ab:09:4e:05:7f:dc:d7:82:6e:c5:79:cd:51:fd:
99:70:c5:08:4b:50:56:1d:4c:eb:68:86:9c:f4:20:
0d:d1:95:d3:63:10:7f:dd:b9:bf:89:b8:1e:49:bf:
eb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C8:CC:84:3D:5C:B0:35:21:44:2D:C7:01:06:03:65:D9:1B:54:2F
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IMjMhD1csDUhRC3HAQYDZdkbVC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.88.0/24
Signature Algorithm: sha256WithRSAEncryption
90:77:b1:2c:31:a9:89:ee:cd:5a:d9:41:64:bd:45:0a:dd:97:
54:83:25:39:52:a3:9c:ff:44:26:ea:da:db:2f:cd:8e:88:45:
d1:61:d9:b2:1c:6a:8d:26:30:4e:67:32:ec:fc:a5:af:47:ed:
14:22:05:97:1f:ee:c6:9d:b5:38:df:c4:78:45:d8:48:ca:0c:
ba:61:c2:44:dc:fe:8a:8c:92:9a:8a:d9:66:f5:a4:4b:d2:63:
fc:ec:2b:7b:0a:f1:59:d1:9f:e3:c4:e9:af:51:70:f1:75:cb:
55:67:ba:92:da:35:ce:b7:70:9c:70:07:17:13:02:71:0e:a0:
6e:98:20:40:7d:4f:5e:95:14:c5:41:c8:88:97:2f:10:8a:51:
9f:2c:75:6e:c3:6a:9a:04:82:79:78:36:68:01:44:e1:03:2f:
69:d9:c9:fc:92:ee:ec:34:bf:84:cf:62:a6:ad:ef:89:f0:52:
77:84:32:81:e7:db:d9:4b:99:9d:ff:28:86:07:e5:dd:4f:fa:
43:41:ed:27:4d:5d:44:4d:09:6c:6d:ca:3c:da:0f:82:b1:30:
c7:08:87:a0:90:ac:2c:3b:0c:95:f1:39:5a:c6:6a:58:2f:a3:
f2:2a:ac:c2:7b:0e:83:8f:2b:a8:d0:39:9a:d6:7b:d7:ad:3c:
b0:7d:c0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:14 2024 by rpki-client on console.sobornost.net