Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/1Sk2Mzs4G6nppK_gjV8kPl9gAuE.roa
File: 1Sk2Mzs4G6nppK_gjV8kPl9gAuE.roa (raw, json)
Hash identifier: t93tasmxceFC7Mc86LmPJK/8AuPaYAXsYVEQVNK6cKw=
Subject key identifier: D5:29:36:33:3B:38:1B:A9:E9:A4:AF:E0:8D:5F:24:3E:5F:60:02:E1
Certificate issuer: /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial: 018CC2DAD148AE2E2F5F319A2CA6137FF653
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/1Sk2Mzs4G6nppK_gjV8kPl9gAuE.roa
Signing time: Mon 01 Jan 2024 02:29:29 +0000
ROA not before: Mon 01 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 45.143.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 15:56:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:d1:48:ae:2e:2f:5f:31:9a:2c:a6:13:7f:f6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
Validity
Not Before: Jan 1 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d52936333b381ba9e9a4afe08d5f243e5f6002e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:38:90:ae:14:e1:75:33:a0:39:a2:45:f7:
57:1e:7a:24:53:d4:57:99:33:48:ba:7e:67:cd:cf:
f3:c7:bd:7a:ed:3c:95:ad:67:72:ef:85:70:28:fe:
f7:31:09:29:ae:6c:23:f2:b4:44:ba:7e:b6:49:3d:
20:dc:7d:0b:e0:81:d6:ec:8f:c8:0f:49:cf:17:17:
98:b0:21:07:e5:27:c7:9d:7e:fe:74:76:58:69:e5:
79:11:f1:aa:eb:c7:db:3c:58:96:5c:11:00:60:77:
dd:1c:ff:8f:c1:35:ac:ed:62:2e:1c:f1:03:85:b9:
9d:48:1e:9b:6b:dc:da:b3:da:d4:42:02:9e:23:9a:
74:1f:71:a7:b4:9c:83:50:7b:47:ea:0e:e5:08:d3:
6c:d0:3b:d7:52:ef:54:94:05:c0:7a:ba:ee:05:28:
cf:9c:29:e6:7e:3e:1f:af:5e:a8:bf:37:b4:00:4d:
4b:7d:e4:34:a8:b6:7a:36:27:22:88:ce:f3:46:12:
7b:b0:01:35:d3:69:23:ff:89:61:44:e4:24:f0:4a:
1a:d6:aa:63:54:0f:98:fa:20:dc:07:2b:70:eb:c0:
62:00:85:af:17:2f:e6:0c:ed:ae:28:69:29:ba:93:
6f:e3:47:e2:c5:b6:aa:bb:2f:85:cf:f3:d3:e8:2f:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:36:33:3B:38:1B:A9:E9:A4:AF:E0:8D:5F:24:3E:5F:60:02:E1
X509v3 Authority Key Identifier:
keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/1Sk2Mzs4G6nppK_gjV8kPl9gAuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.156.0/24
Signature Algorithm: sha256WithRSAEncryption
96:e9:12:32:bd:46:4c:c6:13:39:10:2d:3a:55:f1:46:b7:f2:
9a:c0:88:31:5c:c8:4d:43:c6:d7:fe:e6:5d:3a:b6:27:cd:70:
5e:0d:21:e6:92:f8:90:50:f6:0d:99:8a:60:c9:ae:28:08:ee:
24:65:a4:34:7c:cf:62:37:52:94:50:a1:56:c9:6a:d9:51:b1:
29:c1:f3:1f:9d:f9:ac:41:60:30:2f:3d:28:17:0c:40:a6:70:
d5:86:58:1c:66:d9:ef:bf:b6:7c:9b:4a:1f:1d:df:de:c2:53:
42:07:58:f2:ee:f5:c1:b7:d0:29:be:26:e6:d9:b9:a3:fd:9d:
c8:b1:ad:b4:d2:5f:9e:7f:78:cc:0a:89:09:59:98:d5:b4:fc:
28:5a:37:ae:67:32:11:1f:79:7d:d7:35:87:ad:b3:13:18:53:
be:57:e0:2c:53:be:48:63:43:ad:74:23:a8:28:b1:00:5f:78:
6b:97:98:b3:3c:2a:58:ed:4e:03:8b:5b:6f:4d:bf:2e:66:bd:
4a:4f:56:96:06:86:06:5e:4f:79:68:7f:7a:1a:9b:b9:6e:46:
62:42:b2:18:09:bb:33:30:65:3d:ce:f6:1f:41:42:06:dc:10:
16:d8:48:ea:eb:33:2c:da:48:3e:d7:a5:df:f6:b2:b2:64:2b:
4d:ba:5a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 22:52:34 2024 by rpki-client on console.sobornost.net