Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9kA1rMOPLOlOVaaIEirDpYyHC9M.roa
File: 9kA1rMOPLOlOVaaIEirDpYyHC9M.roa (raw, json)
Hash identifier: FYyOE7/vpYbZy6X1zEyUTh1oYb92SqRUD4FMdx7N8vE=
Subject key identifier: F6:40:35:AC:C3:8F:2C:E9:4E:55:A6:88:12:2A:C3:A5:8C:87:0B:D3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188F6A1762DB24DA973F60A99CCA9A6BCC7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9kA1rMOPLOlOVaaIEirDpYyHC9M.roa
Signing time: Mon 26 Jun 2023 07:35:56 +0000
ROA not before: Mon 26 Jun 2023 07:35:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.148.116.0/22 maxlen: 24
193.163.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:a1:76:2d:b2:4d:a9:73:f6:0a:99:cc:a9:a6:bc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 26 07:35:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f64035acc38f2ce94e55a688122ac3a58c870bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f6:bf:a3:a7:03:9a:ed:f5:5b:11:bd:02:78:
7d:15:a8:0e:b8:c8:37:a7:fa:cf:e8:49:8f:8d:8f:
f6:b8:fe:d5:b2:15:9b:d4:8a:37:33:5b:d5:d0:42:
fd:95:62:90:1a:e0:d3:c3:85:c4:ac:e7:f2:94:b4:
82:76:8a:c0:16:af:36:9f:5d:71:29:16:46:6a:f7:
05:2a:44:e5:c6:01:ba:65:34:2d:d4:7a:50:21:ff:
67:72:81:1e:df:50:c2:30:5f:04:05:52:47:29:b8:
a1:77:ac:a9:89:c7:5f:37:d7:70:02:4e:f5:c5:14:
83:6a:6e:8c:7a:55:b7:50:5a:8a:4d:2d:f8:e6:78:
ed:5b:ea:f6:ad:53:12:43:83:5d:f8:dc:cc:40:00:
00:93:43:8e:1b:41:2e:8c:79:0b:cc:b2:2f:4c:6e:
25:9c:c7:80:02:00:73:3a:07:0c:d9:fd:31:60:3a:
a3:59:c7:b2:8d:ca:5f:82:a1:81:11:49:89:df:f6:
11:76:ed:63:e2:8d:7a:f5:47:ed:0a:07:2b:60:9e:
ed:86:a8:a6:7d:8b:96:75:27:09:4b:ce:fb:66:0c:
ed:84:9c:9a:33:2d:37:4e:56:64:e5:4f:bc:65:17:
27:3a:61:a9:bf:4a:58:a0:0c:d1:5b:37:23:9d:bd:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:40:35:AC:C3:8F:2C:E9:4E:55:A6:88:12:2A:C3:A5:8C:87:0B:D3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/9kA1rMOPLOlOVaaIEirDpYyHC9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
193.163.85.0/24
Signature Algorithm: sha256WithRSAEncryption
73:17:44:07:bb:18:60:24:71:5b:b3:5e:2d:2f:9b:fb:06:10:
87:5d:f8:a1:5e:7f:1e:0b:e2:84:d4:33:92:07:fb:10:5d:c6:
56:d5:9d:dc:59:08:c0:a3:82:61:f0:c6:5b:7c:b0:17:93:ec:
61:8c:61:82:23:ad:1b:cf:2c:85:6b:41:3d:66:07:4f:6d:f5:
da:cb:ea:99:a9:0b:85:52:09:9a:26:ea:5e:f1:bd:34:aa:31:
ed:95:23:3b:68:6d:15:97:79:2e:f6:65:c8:aa:3e:e5:af:39:
94:66:28:ed:66:e4:5f:b4:fc:eb:6b:f4:8c:99:1e:bb:c2:1f:
36:23:19:93:b4:b5:73:09:60:06:8c:92:e0:51:67:fe:af:42:
e6:03:93:1e:90:f2:f2:11:c0:f9:94:99:1b:a6:fb:57:a1:47:
a0:51:31:7a:55:48:44:a4:05:3d:2c:a1:4b:0c:82:4f:3d:41:
99:0b:a1:ba:ac:48:9e:f0:06:26:8e:ed:68:3c:c9:87:19:e5:
53:a8:1a:1b:fa:8d:0e:f3:83:30:cb:10:c1:1d:d1:22:14:68:
b4:37:de:73:9c:33:42:45:66:ca:82:48:6d:95:5b:04:3d:28:
10:11:ef:cb:d6:d2:ec:57:ab:af:ff:48:fe:52:04:85:4c:8d:
46:73:35:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:13 2023 by rpki-client on console.sobornost.net