Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/zZFd51CGK6g22yAYnlMfAxHJ3w0.roa
File: zZFd51CGK6g22yAYnlMfAxHJ3w0.roa (raw, json)
Hash identifier: oaJay5AKFvaDCGSjKvhIWbkw3kdikvS8951SizpUV24=
Subject key identifier: CD:91:5D:E7:50:86:2B:A8:36:DB:20:18:9E:53:1F:03:11:C9:DF:0D
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 0188E77C3174835162F3FE3B00D618D6BBA6
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/zZFd51CGK6g22yAYnlMfAxHJ3w0.roa
Signing time: Fri 23 Jun 2023 09:00:56 +0000
ROA not before: Fri 23 Jun 2023 09:00:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.87.162.0/24 maxlen: 24
45.87.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:7c:31:74:83:51:62:f3:fe:3b:00:d6:18:d6:bb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jun 23 09:00:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd915de750862ba836db20189e531f0311c9df0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:83:6e:9d:e1:f9:d2:85:54:9b:3e:a0:2b:
6d:b5:74:09:a1:a9:65:cc:d3:15:c6:1e:9f:52:97:
8b:c0:03:64:3c:f8:31:f3:c7:f9:41:51:e0:fa:18:
8c:bf:dd:96:eb:1d:a1:4b:91:cb:46:bb:98:4c:84:
e4:bb:28:24:7f:16:83:1f:f8:d0:56:bc:e2:0f:d8:
55:a9:80:0e:21:05:3f:57:8d:50:41:e4:d7:87:9e:
45:3d:14:25:4c:a9:d3:1a:44:b5:e5:56:b2:e3:0e:
3b:ca:d5:83:8c:8f:a1:7e:c7:41:2c:f0:14:33:80:
61:b6:98:83:80:74:31:23:92:41:94:50:ae:50:0f:
32:d7:e4:36:5d:51:48:fc:16:54:60:a5:2c:da:a4:
44:36:ca:dc:a3:a5:86:41:65:31:76:92:75:bb:43:
33:1d:db:98:d1:ad:9f:20:b9:99:7c:ad:9a:82:c5:
cf:8c:ec:74:05:25:f0:80:0f:54:76:0f:fe:23:ce:
fc:62:f2:ed:27:c9:41:0f:66:8e:f5:51:81:d0:27:
d5:ee:91:8e:36:2f:80:c5:cf:fa:46:9c:fd:af:1e:
a8:fd:e6:3b:65:02:ab:f3:cf:b9:5f:89:0f:92:8a:
1c:31:8f:42:64:8b:f9:b3:d2:9e:33:c2:ac:52:1f:
be:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:91:5D:E7:50:86:2B:A8:36:DB:20:18:9E:53:1F:03:11:C9:DF:0D
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/zZFd51CGK6g22yAYnlMfAxHJ3w0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.162.0/23
Signature Algorithm: sha256WithRSAEncryption
53:c7:a0:ee:a7:aa:98:ff:0f:da:26:e9:b0:00:7f:0a:dd:0e:
73:44:01:a3:9b:d5:2b:69:07:50:df:48:6a:45:60:a1:69:d7:
30:af:00:06:97:37:85:06:53:4e:56:67:d4:0c:3c:69:33:de:
bc:78:b3:7a:d3:d1:12:1f:ac:25:b0:c2:0a:47:2e:1f:db:40:
73:7d:8d:10:81:4f:8f:a8:0a:fe:73:c6:6c:37:04:f9:71:7a:
50:a4:c1:8f:67:f2:33:af:4a:38:6a:37:a8:b2:0f:9c:8e:a8:
44:90:a8:39:b6:48:3d:e5:a3:40:b1:ba:28:9f:86:68:e0:00:
68:2a:e4:c2:de:e1:19:51:a4:8b:03:17:27:d5:96:94:99:65:
5d:4f:e0:dd:26:bb:4f:33:f0:22:d7:e5:d1:fc:37:5d:ed:e4:
24:71:10:c4:63:01:9b:87:f1:35:07:75:b0:5e:86:97:f3:85:
87:48:6c:08:d9:82:a2:bb:15:cd:a1:5d:5e:03:a4:96:21:4f:
ad:3b:62:5d:4e:b2:77:d3:ab:b2:7c:6f:6a:e8:a8:c1:e2:25:
0f:f5:76:c0:fb:94:d1:98:3a:80:6c:33:d6:db:a8:7a:3a:5d:
0f:3d:2c:8d:b5:f4:c0:07:27:68:4f:fa:fd:72:fb:8c:a8:d7:
95:e2:7e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:52 2023 by rpki-client on console.sobornost.net