Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/fVC5kFJOdoWt1_ha8f9CoFzKOyI.roa
File: fVC5kFJOdoWt1_ha8f9CoFzKOyI.roa (raw, json)
Hash identifier: 3j2A4V1aN3uotPVrF60+9QvRrd8CKFyYv572eOt0F/8=
Subject key identifier: 7D:50:B9:90:52:4E:76:85:AD:D7:F8:5A:F1:FF:42:A0:5C:CA:3B:22
Certificate issuer: /CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Certificate serial: 01859C863559F9B3731297A4BD82BC802D04
Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/fVC5kFJOdoWt1_ha8f9CoFzKOyI.roa
Signing time: Tue 10 Jan 2023 16:31:59 +0000
ROA not before: Tue 10 Jan 2023 16:31:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52199
IP address blocks: 45.149.54.0/24 maxlen: 24
2a0b:18c0::/29 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:86:35:59:f9:b3:73:12:97:a4:bd:82:bc:80:2d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Validity
Not Before: Jan 10 16:31:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d50b990524e7685add7f85af1ff42a05cca3b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:eb:b6:27:00:59:a9:70:9f:ee:82:97:85:6f:
31:b2:ba:99:31:dc:63:83:e9:a3:6a:2a:41:fe:c8:
96:6a:5c:50:5f:2d:3b:31:f9:00:98:1e:7c:03:4c:
72:c1:5e:12:84:75:b4:55:12:bf:b0:3e:75:21:00:
dc:91:b4:bb:f8:65:d7:22:1b:e3:41:57:94:a6:8e:
d9:aa:25:c0:d7:c4:03:dd:01:4b:91:eb:9e:25:dd:
bc:9e:f0:23:f0:41:29:98:72:5e:0b:af:e3:9e:cf:
c7:6b:1c:d4:d3:79:f0:a3:1c:ba:79:f1:29:fa:a4:
a3:79:e4:ec:bb:89:ff:43:45:57:2a:ef:3d:a4:41:
dd:58:6a:f8:c0:da:31:71:24:4b:ba:b0:7a:b6:d6:
8b:53:61:fe:50:a7:17:85:c4:1f:c0:bb:a6:d1:70:
d5:c1:0a:7d:ba:97:17:4a:08:cc:6f:33:ba:c8:c1:
5a:f9:e0:1b:a6:14:38:71:89:04:2e:58:17:98:f4:
9f:cc:05:4d:72:8e:b1:7e:91:4b:6c:9c:32:fd:3d:
d2:7e:7a:a9:e6:35:96:0f:d3:da:2a:b9:68:4f:99:
bf:e2:d0:4b:8d:23:a9:70:30:9b:02:7e:65:b2:8f:
28:5d:52:d8:14:52:20:b0:54:46:35:b4:3a:1f:85:
ce:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:50:B9:90:52:4E:76:85:AD:D7:F8:5A:F1:FF:42:A0:5C:CA:3B:22
X509v3 Authority Key Identifier:
keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/fVC5kFJOdoWt1_ha8f9CoFzKOyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.54.0/24
IPv6:
2a0b:18c0::/29
Signature Algorithm: sha256WithRSAEncryption
95:0f:e5:d8:2b:0c:c0:15:24:7c:5e:75:1b:2c:c7:b9:e4:0c:
aa:91:a8:c9:ad:6a:de:33:81:a7:3a:e5:ca:90:6f:c0:18:44:
89:5d:18:78:19:3f:ff:24:8f:c5:da:41:9f:c1:cf:aa:15:3b:
a2:70:84:0c:f3:c5:67:c3:49:07:02:fe:e4:21:b9:e0:e6:30:
8e:83:90:cb:bb:5d:8e:b0:cc:96:50:79:5d:dd:aa:1f:ed:a9:
4a:f4:2e:bc:8b:aa:48:f9:7a:41:07:4c:15:21:ba:04:1a:d2:
db:53:42:2c:30:45:c6:ea:d4:f8:5e:36:d7:a2:42:95:a6:b0:
7d:3c:dd:0d:79:9b:be:c8:26:91:06:0b:58:04:3b:b5:e0:72:
80:b4:89:b7:8c:96:14:dd:ff:0f:da:10:11:ce:59:32:fc:8a:
74:6f:60:77:1e:98:db:f6:0b:99:15:15:36:2b:34:36:3d:63:
c0:67:58:55:8f:e4:99:6d:15:80:42:38:0a:ba:3c:e6:df:6e:
ee:8e:86:f5:8b:4e:96:d2:c0:fa:63:d8:07:f5:e8:61:71:55:
c7:0a:b1:52:61:d6:cb:f3:ac:45:57:fa:1f:76:a3:e8:79:16:
6e:a6:0e:2d:cd:08:bc:3f:79:7f:de:d7:e5:37:92:ce:fd:96:
5c:c6:81:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:33 2024 by rpki-client on console.sobornost.net