Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/PbMmAPmH5c03_vAkeO8MHHMLCxc.roa
File: PbMmAPmH5c03_vAkeO8MHHMLCxc.roa (raw, json)
Hash identifier: 29+a89DMFORRCpxyWpXzZ/dmTxYM3yy+y2YbeY9Pqe0=
Subject key identifier: 3D:B3:26:00:F9:87:E5:CD:37:FE:F0:24:78:EF:0C:1C:73:0B:0B:17
Certificate issuer: /CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
Certificate serial: 01856D94153FBC7F68B2FAD419956DC7AD65
Authority key identifier: B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/PbMmAPmH5c03_vAkeO8MHHMLCxc.roa
Signing time: Sun 01 Jan 2023 13:44:59 +0000
ROA not before: Sun 01 Jan 2023 13:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42189
IP address blocks: 45.15.56.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:15:3f:bc:7f:68:b2:fa:d4:19:95:6d:c7:ad:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
Validity
Not Before: Jan 1 13:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3db32600f987e5cd37fef02478ef0c1c730b0b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:6c:a5:a5:5d:73:76:03:f7:b9:11:41:32:
c0:22:72:84:f6:d6:95:0c:c0:f3:98:dd:09:b2:40:
16:12:ff:63:c8:12:c3:86:62:59:c3:a3:17:9b:44:
36:79:87:3c:7c:c1:90:1d:72:cc:a1:ff:89:bf:93:
5e:63:31:9a:f1:fb:91:ba:d8:89:65:85:63:b5:f9:
74:fe:31:37:47:c4:84:43:77:36:e6:7e:17:81:9c:
a6:41:35:88:1b:c9:96:b8:66:02:f3:ab:b9:f4:c3:
c3:a1:c9:bc:78:6c:54:e3:b6:31:54:1d:34:89:76:
55:52:8c:d5:50:fe:66:4c:19:3e:95:31:93:63:da:
a0:c6:00:99:be:df:f3:4e:f4:3c:5b:51:4e:0b:f3:
5b:b4:ca:e5:61:6f:14:b7:f0:ea:1e:89:97:e5:79:
3f:fe:20:8f:bb:93:59:3a:4e:12:69:ee:ad:1c:47:
9e:13:3e:2d:98:d3:2e:3f:eb:e4:2c:86:aa:7e:81:
53:14:76:59:6a:2b:76:80:15:0f:18:6a:a4:eb:c5:
89:ae:55:1b:39:64:fd:a9:45:0f:45:83:2a:67:9b:
03:b1:ca:8e:e2:a9:26:0b:48:36:f9:cc:17:c0:a8:
cf:0d:96:8e:f8:3a:3f:87:14:ae:ec:03:56:6e:95:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:26:00:F9:87:E5:CD:37:FE:F0:24:78:EF:0C:1C:73:0B:0B:17
X509v3 Authority Key Identifier:
keyid:B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/PbMmAPmH5c03_vAkeO8MHHMLCxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.56.0/22
Signature Algorithm: sha256WithRSAEncryption
67:9e:3a:8e:3d:bd:1a:cb:91:bb:ad:7f:e3:eb:fb:96:a3:76:
80:af:85:d0:15:b9:fe:41:12:93:c2:8b:71:f3:e1:d9:42:42:
5a:a0:b5:bf:5a:4b:8a:3b:2b:ef:13:b1:32:c4:2a:f8:90:0f:
8c:9e:34:a8:57:ce:21:7b:02:e5:1f:db:c3:73:78:fd:cf:28:
26:76:79:bf:fd:0f:73:0f:1d:2e:a3:98:1a:0c:3b:91:9e:d6:
9b:e4:25:a0:e2:cb:b5:77:a4:55:8d:da:c5:85:34:d3:3a:2f:
24:99:99:0a:f8:fa:b6:96:45:5c:a9:25:a7:79:79:7a:46:e9:
ef:28:04:aa:2e:c0:44:49:4d:b2:a6:22:53:ee:ce:33:61:f6:
ad:7a:69:18:ec:42:7c:e8:9f:04:2c:7a:ef:ed:52:34:d4:bc:
cf:96:23:51:cc:18:db:32:48:73:af:fc:a0:00:cc:3e:cc:46:
de:09:69:ba:58:1c:06:e8:ee:c1:50:c9:3e:2b:48:56:c6:59:
55:82:10:64:b8:25:f9:af:17:1d:83:aa:00:db:20:97:50:cf:
2a:e5:97:31:d6:15:d6:ae:5b:ef:48:22:ce:54:28:70:19:cb:
65:c0:b2:ac:ea:0e:64:3d:d4:42:7d:50:8b:a4:b9:bf:1a:5b:
7c:b7:df:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:21 2024 by rpki-client on console.sobornost.net