Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/_ibJCVQMASbnYj-tvplk0VOS83o.roa
File: _ibJCVQMASbnYj-tvplk0VOS83o.roa (raw, json)
Hash identifier: DiYmSOLmMQpuQ8JXfkx6/Wmbo8dqsAbhFiUfc1lPDa8=
Subject key identifier: FE:26:C9:09:54:0C:01:26:E7:62:3F:AD:BE:99:64:D1:53:92:F3:7A
Certificate issuer: /CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Certificate serial: 01856CE5F1DFE2AB91633D944A0440FAA0BD
Authority key identifier: 3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/_ibJCVQMASbnYj-tvplk0VOS83o.roa
Signing time: Sun 01 Jan 2023 10:34:47 +0000
ROA not before: Sun 01 Jan 2023 10:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212457
IP address blocks: 45.151.40.0/22 maxlen: 22
2a10:3d00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e5:f1:df:e2:ab:91:63:3d:94:4a:04:40:fa:a0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4c8130cca30a3ff92c9b99db5438dc7f3e2830
Validity
Not Before: Jan 1 10:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe26c909540c0126e7623fadbe9964d15392f37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d5:b1:cb:47:91:62:79:3c:3d:de:d9:c2:a9:
fd:fb:37:f8:b7:f5:db:45:73:92:e2:1c:14:e7:84:
fe:36:82:03:f2:ec:91:f7:c8:c2:f7:c1:03:23:04:
64:8a:69:88:11:2c:eb:60:d2:4d:1f:4c:64:8e:e8:
45:73:62:93:9f:87:2b:64:df:e8:e7:4c:b9:9c:aa:
53:a5:20:ef:b3:99:81:1a:fa:88:41:fe:f2:1d:83:
71:53:75:42:3c:57:e1:86:02:73:73:89:2f:1d:34:
7f:7c:d7:54:b8:8a:3a:12:2b:40:38:4e:51:05:51:
0c:98:15:c7:68:26:c4:e2:89:47:6d:08:f1:7d:5b:
20:cc:54:e3:df:cc:a5:0c:5d:76:3b:53:a7:65:d1:
80:02:5f:0f:ca:bf:60:1f:e3:36:3d:d5:f6:b3:46:
61:d7:be:ed:52:dd:b8:57:0b:18:e9:6a:c2:13:41:
f7:7f:52:93:b5:dd:22:88:e8:f8:dc:b0:fb:e3:e0:
b5:2c:b2:1c:14:16:dc:42:4b:cb:e2:86:94:05:e6:
1a:7c:b3:59:e8:19:d5:52:65:c4:4d:43:8f:b1:1c:
e8:c6:24:82:4d:b9:af:83:f9:7f:69:a8:57:84:d4:
9a:a4:bd:a2:da:73:20:5e:4b:54:09:c3:ab:ac:09:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:26:C9:09:54:0C:01:26:E7:62:3F:AD:BE:99:64:D1:53:92:F3:7A
X509v3 Authority Key Identifier:
keyid:3E:4C:81:30:CC:A3:0A:3F:F9:2C:9B:99:DB:54:38:DC:7F:3E:28:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkyBMMyjCj_5LJuZ21Q43H8-KDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/_ibJCVQMASbnYj-tvplk0VOS83o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/6b050f-c282-4c53-b151-83adb20af00f/1/PkyBMMyjCj_5LJuZ21Q43H8-KDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.40.0/22
IPv6:
2a10:3d00::/29
Signature Algorithm: sha256WithRSAEncryption
49:09:b8:64:a7:5a:f4:53:25:c1:1f:b9:8b:08:ec:54:f8:b4:
01:1f:c2:c6:6c:d6:cd:ed:09:fd:ab:0b:b1:42:83:25:e3:9a:
67:24:1b:0d:c9:5b:2f:dc:a1:c8:71:b0:ae:26:8b:f7:1f:bc:
7c:7a:d3:0e:04:c1:de:5f:7b:3a:66:b2:b7:b0:8b:74:6c:19:
dd:7b:be:66:17:37:86:a0:0b:4a:5c:6f:20:27:e0:0a:1d:ff:
28:0e:08:69:60:76:56:81:61:6d:71:98:ed:9f:f1:44:1b:d9:
b7:a4:b5:8b:c1:72:c2:3d:19:35:9a:b9:7a:03:f6:ed:98:75:
10:2c:90:1a:c8:50:14:40:ed:5a:7e:fb:0c:18:f9:e9:89:f2:
ba:56:ba:54:b6:7f:3d:b9:79:a8:79:0f:64:7d:07:f5:ec:66:
be:e7:fd:d3:38:1b:26:1d:04:b4:e9:c2:5c:08:0c:d4:45:9a:
57:20:6b:61:3a:c1:4a:2f:7e:ba:c4:1c:47:87:83:bf:e9:94:
f4:07:8d:f6:2d:8b:1b:e9:04:59:28:24:30:75:ae:fe:00:cb:
39:d4:ff:26:af:b1:5f:51:70:50:a1:52:06:ab:93:03:4b:8b:
30:5b:b9:19:34:9b:7f:f0:6a:fe:7d:86:a8:af:e5:27:6e:24:
ff:d2:28:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:55 2024 by rpki-client on console.sobornost.net