Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/VjPQ4qGSkY38Ga2VXFsuLeCc7q8.roa
File: VjPQ4qGSkY38Ga2VXFsuLeCc7q8.roa (raw, json)
Hash identifier: MN4/IcshLwiEO8cDREtaMM3oAa+PJzKQkjIRXVxAAKk=
Subject key identifier: 56:33:D0:E2:A1:92:91:8D:FC:19:AD:95:5C:5B:2E:2D:E0:9C:EE:AF
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 018BEEC7029771ECAE7DE026CF47DBA734FE
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/VjPQ4qGSkY38Ga2VXFsuLeCc7q8.roa
Signing time: Mon 20 Nov 2023 22:08:21 +0000
ROA not before: Mon 20 Nov 2023 22:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13737
IP address blocks: 45.153.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ee:c7:02:97:71:ec:ae:7d:e0:26:cf:47:db:a7:34:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: Nov 20 22:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5633d0e2a192918dfc19ad955c5b2e2de09ceeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f0:1d:3f:cf:82:d0:ba:6b:d3:65:73:8a:9f:
18:b3:e0:bc:74:91:16:46:22:fc:8b:a3:dc:fc:ec:
4b:b1:ca:60:28:74:d9:00:17:d1:38:61:b4:59:ec:
9c:75:81:12:2f:bf:ab:15:38:f9:db:01:56:66:0f:
46:96:d1:61:a6:a1:6e:13:02:f3:6d:d5:6a:3c:98:
72:3d:e1:04:f6:3c:74:88:f0:80:ea:74:a6:86:f2:
a7:e3:30:68:02:46:a2:34:69:b9:cd:1a:09:85:9c:
e8:60:f7:ef:28:64:e1:44:5b:34:f1:e4:3d:dd:20:
62:4a:c0:84:55:36:c8:45:b3:d2:d0:91:7a:e8:a4:
c3:cf:03:cf:94:0b:f5:83:96:ca:0c:fc:57:22:00:
4d:0d:38:31:4a:ee:bf:81:97:77:35:28:b0:95:a8:
06:85:0c:5d:af:30:3d:2a:fa:de:98:74:a0:d5:f6:
81:01:e7:79:0d:c7:c7:d8:2e:0b:3a:04:10:7d:55:
d6:87:21:a3:af:f2:b9:a0:49:30:3f:ac:c3:59:4e:
9a:2c:5b:ff:1f:96:f5:86:29:4f:7c:8d:a3:9b:ea:
b1:17:59:54:76:af:11:5d:c6:fb:2e:e1:48:5a:a1:
ad:10:8d:92:eb:2c:22:35:20:13:12:f2:06:e4:ff:
c6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:33:D0:E2:A1:92:91:8D:FC:19:AD:95:5C:5B:2E:2D:E0:9C:EE:AF
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/VjPQ4qGSkY38Ga2VXFsuLeCc7q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.111.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a8:86:6f:03:5e:d3:7f:ab:8f:42:67:6f:7d:7f:1a:ce:59:
49:a0:fd:ec:e6:a1:73:f0:17:5c:e9:a0:c8:90:c3:2d:58:4e:
bb:17:30:62:53:1c:99:fc:8b:d1:24:4c:07:26:9f:a7:fd:b3:
4b:a6:61:8e:16:f5:20:09:cd:27:b9:a2:1b:28:25:90:f9:02:
20:a3:ac:2f:2c:9f:88:7b:0f:3e:a9:e3:b3:14:28:46:b0:72:
39:54:66:80:73:e7:99:33:04:88:d2:b5:d1:ca:28:d5:46:14:
fa:11:92:3b:56:11:7c:46:73:c6:c2:db:41:66:7c:88:f6:71:
a8:06:aa:79:27:45:68:0b:cd:fc:50:e3:95:5a:fc:29:00:02:
c9:3e:a4:40:4b:06:53:9a:72:70:ec:1e:ce:b4:64:3f:6e:6f:
e8:80:ec:0e:7e:1e:53:a5:3d:75:74:7c:d3:4c:9f:2c:21:76:
eb:da:8c:6f:9f:de:28:00:1a:b4:49:a4:c5:a2:c9:2f:fc:49:
6c:1a:f6:77:15:76:92:a1:aa:a6:d9:a3:2f:8b:e3:e6:41:39:
d9:73:40:7e:49:3d:5e:5a:92:78:4f:e4:63:6e:1b:c1:73:15:
1f:eb:1e:03:0b:99:1a:db:ce:db:d5:e0:a4:12:f7:8f:27:3f:
22:24:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:33 2023 by rpki-client on console.sobornost.net