Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/qYWhf754alOI8CJa3oauDhvFFYs.roa
File: qYWhf754alOI8CJa3oauDhvFFYs.roa (raw, json)
Hash identifier: P0oX4sHHi0E7HYKB6Wag82F60vWmciivryLEPTHIxfo=
Subject key identifier: A9:85:A1:7F:BE:78:6A:53:88:F0:22:5A:DE:86:AE:0E:1B:C5:15:8B
Certificate issuer: /CN=78950ba19b4f17a3473127fd077a9a2002ebea36
Certificate serial: 01856CC1784546CDC8664E54C2EDE6229345
Authority key identifier: 78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/qYWhf754alOI8CJa3oauDhvFFYs.roa
Signing time: Sun 01 Jan 2023 09:54:56 +0000
ROA not before: Sun 01 Jan 2023 09:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207044
IP address blocks: 45.87.224.0/24 maxlen: 24
45.87.225.0/24 maxlen: 24
2a0d:f700:1000::/38 maxlen: 38
2a0d:f700:c00::/38 maxlen: 38
2a0d:f700:800::/38 maxlen: 38
2a0d:f700:400::/38 maxlen: 38
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:78:45:46:cd:c8:66:4e:54:c2:ed:e6:22:93:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78950ba19b4f17a3473127fd077a9a2002ebea36
Validity
Not Before: Jan 1 09:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a985a17fbe786a5388f0225ade86ae0e1bc5158b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:c3:04:5e:f1:9f:a6:81:57:b0:48:b3:f8:
42:0b:41:0a:52:0f:29:88:31:f6:47:e7:89:7c:85:
98:a2:ec:57:30:04:44:b0:c8:b7:23:7f:af:e4:f2:
fe:25:83:d7:44:9a:09:5a:82:b4:3f:6a:ea:05:2f:
83:5b:5a:37:b9:1c:bd:13:bd:e7:fc:ce:19:47:05:
13:57:48:69:0c:e4:d3:cb:5f:7c:88:ba:63:6b:b8:
54:66:fd:e6:15:55:35:cb:8b:94:12:98:25:3e:7d:
e9:a3:97:c7:63:92:a0:ad:3b:b2:2a:0a:70:15:40:
fe:9a:8d:71:84:37:04:5b:e5:cb:a1:f4:17:59:ec:
96:46:46:5c:b3:ae:82:03:7a:ef:62:8c:cd:fe:90:
be:83:f3:99:86:54:69:a8:01:5e:2e:1b:7b:03:ad:
9a:54:bc:62:8d:54:90:01:4b:31:65:b7:d7:0a:da:
54:56:3e:5a:af:f0:38:cc:d0:ce:9f:3b:94:2d:07:
55:6a:e6:f9:16:08:22:39:e3:de:47:a9:94:f5:7c:
ac:6e:ba:0b:5d:bc:2f:bb:37:7e:ab:db:f7:10:10:
05:71:de:3b:c1:07:51:78:99:0d:53:74:c3:f6:26:
2f:a1:3b:00:ff:31:37:b4:fa:b6:6b:09:ce:47:71:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:85:A1:7F:BE:78:6A:53:88:F0:22:5A:DE:86:AE:0E:1B:C5:15:8B
X509v3 Authority Key Identifier:
keyid:78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/qYWhf754alOI8CJa3oauDhvFFYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.224.0/23
IPv6:
2a0d:f700:400::-2a0d:f700:13ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3d:5d:68:a4:75:57:8c:98:9b:8d:f5:88:3e:fb:2d:86:3c:7c:
17:a1:aa:59:60:04:65:f9:c6:e9:d4:11:a3:62:e6:80:ec:0d:
26:3e:2c:7b:e4:09:48:0d:f2:df:36:65:7f:c8:98:5a:ab:cf:
ac:e5:46:a0:5c:e0:b2:ae:ae:fa:49:d4:56:87:6f:0d:8f:d5:
62:04:94:b1:c6:7d:49:4e:48:d7:88:38:b5:92:e7:e7:67:f6:
74:6f:20:34:29:5f:65:18:c5:ec:f6:f8:5b:78:4e:75:19:29:
71:f5:97:20:13:24:94:9f:a7:1b:4d:03:44:64:23:21:0d:80:
bf:10:0d:4c:84:4b:46:ad:f7:04:de:b0:a3:98:e1:7f:f0:2d:
92:5d:50:80:f9:b4:94:89:8a:b6:66:65:67:da:ab:71:60:c8:
71:04:b8:fa:c9:8b:29:0d:c7:9a:90:56:f1:b2:1b:3f:12:5c:
b9:be:f2:c3:26:85:f6:8d:75:8e:b9:53:d0:0f:92:70:4a:87:
40:31:5f:57:80:2b:d5:4a:4d:29:f2:d3:e0:a6:ce:9f:a2:38:
43:35:0a:eb:5a:c3:c8:fc:f4:b1:4c:2e:56:e9:c9:d9:b8:cd:
5c:e7:f9:98:72:08:de:9a:59:4f:a3:62:ce:18:0f:ed:51:a8:
2f:02:b8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:01:38 2024 by rpki-client on console.sobornost.net