Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/2p-LAGxLQHAlRD1q_jAJiBUip7A.roa
File: 2p-LAGxLQHAlRD1q_jAJiBUip7A.roa (raw, json)
Hash identifier: Lo+AiFrWw0gI5Jpr0hBaNQxgWway0AT69ooJm/CtCuo=
Subject key identifier: DA:9F:8B:00:6C:4B:40:70:25:44:3D:6A:FE:30:09:88:15:22:A7:B0
Certificate issuer: /CN=0fbe444b6150c04304227f94bfa2768306d7f4c8
Certificate serial: 01856DCAD979FFAFC4FE6BA8AC24CEABFDBF
Authority key identifier: 0F:BE:44:4B:61:50:C0:43:04:22:7F:94:BF:A2:76:83:06:D7:F4:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/2p-LAGxLQHAlRD1q_jAJiBUip7A.roa
Signing time: Sun 01 Jan 2023 14:44:48 +0000
ROA not before: Sun 01 Jan 2023 14:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43915
IP address blocks: 45.80.160.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:d9:79:ff:af:c4:fe:6b:a8:ac:24:ce:ab:fd:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbe444b6150c04304227f94bfa2768306d7f4c8
Validity
Not Before: Jan 1 14:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da9f8b006c4b407025443d6afe3009881522a7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:75:fb:56:fa:4a:86:98:e1:8f:7c:ba:d6:
6d:44:c1:ec:39:da:d9:cf:7c:6e:26:ea:97:16:fa:
ad:7b:ff:e0:53:13:45:ec:1b:e0:4a:a0:83:8c:f0:
82:d7:8b:75:70:6c:5c:0c:ac:ae:bc:c5:81:a2:9b:
55:e6:04:a0:10:3e:47:7d:a9:ba:9d:99:c4:81:21:
fa:c6:ce:dc:0c:5e:85:01:c8:70:94:07:89:33:b0:
8a:e7:ee:5a:b5:9c:aa:22:cb:ea:b4:1f:0c:a7:4e:
ee:ee:5e:22:b6:f6:f2:d2:8d:be:9d:84:d5:c5:6d:
d0:4b:12:96:2e:63:8d:e7:07:01:12:90:6b:1a:7d:
be:38:a9:3f:59:e9:23:5d:eb:42:b2:e1:a0:3c:95:
1e:e0:eb:af:43:21:74:f8:f5:54:32:85:05:98:1d:
86:ac:c9:59:bb:9a:29:3f:db:0b:9b:06:8f:1e:4d:
bb:3c:f8:2f:4e:15:b7:c9:4d:39:5f:dd:cc:29:05:
01:cd:59:1a:f8:fd:fa:78:a3:1f:b2:fb:25:a4:c4:
80:f4:9e:82:b7:0e:ba:31:ad:8d:36:06:71:6d:ea:
cf:9d:bd:6d:45:a2:f9:26:da:60:44:89:b5:82:0c:
e2:44:6d:26:25:de:db:67:90:46:a6:e4:0d:e3:f9:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9F:8B:00:6C:4B:40:70:25:44:3D:6A:FE:30:09:88:15:22:A7:B0
X509v3 Authority Key Identifier:
keyid:0F:BE:44:4B:61:50:C0:43:04:22:7F:94:BF:A2:76:83:06:D7:F4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/2p-LAGxLQHAlRD1q_jAJiBUip7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f82c8f-e5ad-41e2-9e69-49d60dd317ef/1/D75ES2FQwEMEIn-Uv6J2gwbX9Mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.160.0/22
Signature Algorithm: sha256WithRSAEncryption
60:e2:82:6b:99:ca:36:e6:a1:e3:81:29:55:dc:b2:19:1e:ce:
85:2b:b2:75:cc:61:f9:87:76:71:36:79:32:62:f7:94:e1:0d:
56:75:88:dc:d4:7b:74:3c:d6:1c:2c:c1:30:12:84:92:42:46:
35:1b:56:bd:d4:e0:28:7e:31:7f:4f:44:7e:48:73:16:29:9e:
fe:f4:70:b8:4d:0a:a4:d8:82:13:b4:6d:40:f8:e3:23:91:3a:
9e:fd:38:71:bd:2e:59:2f:d8:d7:2b:4e:e5:a6:8d:e0:fb:ea:
3c:33:f1:95:19:99:51:65:f4:72:dd:a0:b5:2e:38:9f:0d:5c:
42:7f:8c:12:fe:b8:b7:ec:c8:bb:a6:3d:3c:55:9e:30:89:93:
23:75:76:13:88:73:42:e6:05:07:74:f4:1b:00:07:61:bb:73:
9d:3c:a7:b4:6f:44:dd:2d:7e:ff:40:cd:cb:52:11:8e:4a:21:
f0:4b:79:04:c3:1a:00:f3:37:25:d3:07:27:8a:0d:d9:4a:3b:
aa:c5:d5:5e:b0:f0:63:6c:b3:8d:e2:65:49:7c:6b:40:ee:b5:
f8:40:0c:2e:fa:5c:45:d5:78:b1:fe:a2:9f:76:70:63:6c:4e:
c6:68:93:0a:4a:74:fc:00:41:36:2b:18:4c:47:35:c5:c0:ff:
95:c1:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:35 2024 by rpki-client on console.sobornost.net