Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/r9YYoI-yv_FnCrDPDeEO7EwmtGs.roa
File: r9YYoI-yv_FnCrDPDeEO7EwmtGs.roa (raw, json)
Hash identifier: Z3JjnLBqcc/RIb1W61Ocav0NZGomVTfh+QkBWJ1PxlM=
Subject key identifier: AF:D6:18:A0:8F:B2:BF:F1:67:0A:B0:CF:0D:E1:0E:EC:4C:26:B4:6B
Certificate issuer: /CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Certificate serial: 018C34C54D501C326EE62DA5157836F4A75B
Authority key identifier: 25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/r9YYoI-yv_FnCrDPDeEO7EwmtGs.roa
Signing time: Mon 04 Dec 2023 12:19:54 +0000
ROA not before: Mon 04 Dec 2023 12:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47482
IP address blocks: 45.66.35.0/24 maxlen: 24
45.66.32.0/24 maxlen: 24
45.66.33.0/24 maxlen: 24
2a09:61c0::/30 maxlen: 30
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:34:c5:4d:50:1c:32:6e:e6:2d:a5:15:78:36:f4:a7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25cf9d8d552cdc7d8c0dc6f649b301f2351409ee
Validity
Not Before: Dec 4 12:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afd618a08fb2bff1670ab0cf0de10eec4c26b46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:76:b8:3c:3f:26:c2:19:b4:62:8a:c0:c7:
99:d7:1a:ac:7b:c7:da:61:7a:84:e9:f0:eb:f9:81:
47:1f:cb:25:48:b9:a7:ec:b5:40:52:91:de:a5:a0:
d2:de:50:19:55:c3:b9:a8:db:c9:1e:31:10:95:34:
92:4d:39:65:72:7c:64:b5:46:aa:f5:fb:0d:68:37:
33:84:d1:c1:0a:11:de:2a:5f:15:09:17:d8:2d:08:
6c:58:ce:da:b0:79:d2:d5:51:b9:3f:4a:a0:36:52:
c8:d6:f2:47:90:92:5e:40:95:13:ed:3c:ec:06:36:
41:07:7a:fa:0c:c1:3b:62:ab:39:f6:3b:66:ab:05:
ac:8a:65:db:6b:27:2b:98:73:44:57:ae:a3:1b:fb:
27:89:8b:11:77:a2:4d:eb:34:fb:08:77:cc:8b:f9:
3d:fc:a2:8c:67:58:4a:02:23:69:b5:46:31:f4:46:
bb:88:e4:f9:2e:c4:dd:1b:57:3e:27:9a:83:6c:a8:
09:ef:75:95:8a:3c:8d:1f:c7:70:93:73:a0:81:d0:
15:c9:ce:99:b4:bd:e0:0d:ab:99:a7:d3:03:96:d1:
67:2e:db:00:46:d0:5c:14:25:52:94:7e:50:52:52:
5f:22:f3:2d:ae:94:71:be:19:64:ac:f4:33:f0:14:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D6:18:A0:8F:B2:BF:F1:67:0A:B0:CF:0D:E1:0E:EC:4C:26:B4:6B
X509v3 Authority Key Identifier:
keyid:25:CF:9D:8D:55:2C:DC:7D:8C:0D:C6:F6:49:B3:01:F2:35:14:09:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jc-djVUs3H2MDcb2SbMB8jUUCe4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/r9YYoI-yv_FnCrDPDeEO7EwmtGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a0e08a-9ff0-44b4-bcc4-a10690a744e4/1/Jc-djVUs3H2MDcb2SbMB8jUUCe4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.32.0/23
45.66.35.0/24
IPv6:
2a09:61c0::/30
Signature Algorithm: sha256WithRSAEncryption
58:59:3c:2f:5a:c9:24:96:4f:ee:cf:37:7b:30:fa:cb:bb:13:
1f:39:e8:3a:61:15:ce:53:4f:fb:f3:91:7a:da:fc:10:da:98:
c6:45:49:00:e7:37:ab:d4:97:89:59:e3:33:b9:08:ae:4a:e6:
3a:60:f9:42:8c:de:ba:c8:08:e5:9b:b6:54:0e:8a:8f:2e:97:
17:b4:ca:f0:79:3f:63:43:0a:71:66:88:b8:e4:60:2b:4c:8f:
f5:59:1c:89:14:f5:cf:22:32:ff:89:54:fc:d2:05:ae:1c:6b:
1e:a0:79:20:72:63:ed:13:48:e6:31:7d:48:cf:55:b2:40:a7:
59:90:bd:a2:16:70:fd:e4:db:00:83:55:b7:66:cd:de:26:6a:
c8:a9:06:3a:da:ed:0c:01:5d:5a:75:04:75:81:43:f2:1d:dd:
80:17:f4:d7:b7:18:fd:98:06:13:ed:a7:41:1e:04:cd:77:df:
07:df:ec:c3:d1:6a:e5:e9:18:46:c8:f7:14:4f:05:ad:5a:e4:
cf:fb:49:4d:32:7c:bf:e9:05:3b:d6:44:81:19:b9:e7:8f:45:
f7:74:5e:b1:65:92:9f:ae:2f:3f:fd:d2:37:4f:65:48:6f:d3:
39:dd:f1:79:43:cb:36:f2:33:06:e6:dd:b7:ce:d0:51:de:cc:
d4:11:74:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:56 2023 by rpki-client on console.sobornost.net