Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/2qvumZlucKTOKVtXDGznCY9wt-M.roa
File: 2qvumZlucKTOKVtXDGznCY9wt-M.roa (raw, json)
Hash identifier: 5+8KTZSzLF/iiJMAtF9CBQ7j0l/IwaxXf/2pWKkNTbY=
Subject key identifier: DA:AB:EE:99:99:6E:70:A4:CE:29:5B:57:0C:6C:E7:09:8F:70:B7:E3
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 01857142F1CDA9CD873EC01A3220FB41BE2F
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/2qvumZlucKTOKVtXDGznCY9wt-M.roa
Signing time: Mon 02 Jan 2023 06:54:50 +0000
ROA not before: Mon 02 Jan 2023 06:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56635
IP address blocks: 31.7.192.0/19 maxlen: 19
45.147.136.0/22 maxlen: 22
2a03:a100::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:f1:cd:a9:cd:87:3e:c0:1a:32:20:fb:41:be:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Jan 2 06:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=daabee99996e70a4ce295b570c6ce7098f70b7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a1:70:c3:29:e7:6c:e8:ec:dd:0d:b7:6e:c2:
fa:c3:fa:68:e6:cd:fe:71:b5:d7:19:77:0f:1e:2f:
c7:2f:13:6e:75:e4:3c:de:f1:27:98:5b:52:3d:6d:
44:98:10:fa:a0:da:ad:ef:18:eb:ac:e9:b6:35:7f:
bd:3d:3c:99:81:d3:d9:40:af:db:54:c9:dc:85:e1:
b2:c0:54:50:51:bc:5a:1c:05:5c:d9:8d:de:f0:a4:
0d:70:93:0d:43:a3:ce:33:14:4c:ce:63:b5:5a:88:
1f:d0:0b:ee:96:68:33:a2:70:f7:d4:e9:3a:5c:cd:
c3:bd:17:61:1f:f8:15:a8:a3:26:51:e0:31:02:00:
7a:85:6b:76:e7:09:0a:f6:47:ce:af:7c:80:cd:89:
ee:9c:fa:e1:5e:6f:fa:1f:87:b5:3b:88:a3:c3:22:
c1:ae:a2:49:6b:85:3c:0c:76:00:8f:ad:e1:e6:3a:
25:4d:db:66:38:13:1b:e5:02:9d:90:bb:b7:21:74:
60:af:2a:5a:3a:21:e2:7c:dc:49:a6:25:ce:ad:bc:
e6:ed:fb:e3:91:82:8c:0c:53:46:29:44:78:7f:23:
e6:c5:34:b3:d3:3f:f8:62:e9:fa:dd:b8:7c:03:38:
d5:57:03:b1:a4:9d:e0:76:ec:b7:a6:c6:0f:21:43:
10:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AB:EE:99:99:6E:70:A4:CE:29:5B:57:0C:6C:E7:09:8F:70:B7:E3
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/2qvumZlucKTOKVtXDGznCY9wt-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.192.0/19
45.147.136.0/22
IPv6:
2a03:a100::/32
Signature Algorithm: sha256WithRSAEncryption
1a:2d:56:47:08:15:6b:f1:e8:9f:59:68:45:62:32:7d:b4:4d:
ad:c6:35:08:fb:d1:0d:af:21:9c:59:1e:87:cd:ac:3d:70:dc:
56:e4:14:60:00:48:3d:fe:3a:b4:66:8b:32:73:51:17:06:aa:
6e:9e:e3:ae:bc:bc:24:cc:3d:46:94:67:78:44:e8:64:13:c0:
30:7b:05:f6:92:28:c1:0a:b9:d4:d2:3e:73:74:56:c6:5c:bb:
04:f8:1b:8f:51:6b:6d:1f:b0:64:ee:de:a8:8b:89:e1:2b:ba:
f0:b5:d2:6e:0d:b8:64:86:41:56:01:10:7c:73:bb:00:78:b6:
28:35:f1:40:d0:da:43:d2:2f:17:be:94:4c:64:f2:57:c7:25:
d1:2c:54:43:18:3f:79:cc:15:ba:21:b7:63:04:fd:49:1a:36:
0e:fb:91:76:10:f8:6b:cd:b5:a4:46:db:2b:e0:5a:cf:eb:01:
c9:cb:cb:34:0c:45:2b:9d:d2:76:ce:ac:37:fb:83:1f:b3:70:
f0:60:3a:84:ca:59:2e:cd:db:70:ad:b1:60:69:a3:c0:ab:3f:
4d:85:9b:e3:94:01:d4:05:0f:89:b4:4e:1b:21:a1:11:a7:94:
34:fa:65:b6:3d:38:57:b9:36:8a:48:fd:e2:5b:47:7f:2e:b3:
24:3e:10:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:35:57 2024 by rpki-client on console.sobornost.net