Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/Py7gCqK8Piv2EOeIdLhwo4Z2E9o.roa
File: Py7gCqK8Piv2EOeIdLhwo4Z2E9o.roa (raw, json)
Hash identifier: xquja4yHE0vx3GroDTvVeAEk1xi0F8eyLSXfcJgY4C8=
Subject key identifier: 3F:2E:E0:0A:A2:BC:3E:2B:F6:10:E7:88:74:B8:70:A3:86:76:13:DA
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 0188FC2E5F7D6A4A9BF6E13FBFD3E71B435D
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/Py7gCqK8Piv2EOeIdLhwo4Z2E9o.roa
Signing time: Tue 27 Jun 2023 09:27:57 +0000
ROA not before: Tue 27 Jun 2023 09:27:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 45.147.148.0/22 maxlen: 22
77.83.154.0/23 maxlen: 23
139.28.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:2e:5f:7d:6a:4a:9b:f6:e1:3f:bf:d3:e7:1b:43:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jun 27 09:27:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f2ee00aa2bc3e2bf610e78874b870a3867613da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:0d:44:c1:5f:fb:a5:67:40:87:d2:4a:f5:
15:da:fa:06:9c:51:62:a3:60:86:4b:d7:69:c6:47:
c2:c5:3e:91:58:3b:47:af:a3:90:e3:55:df:79:55:
30:95:91:bc:14:12:54:a3:38:e6:02:6e:89:e6:09:
cf:5c:4d:72:61:dd:8c:79:32:8e:24:f0:9a:cc:d8:
b4:a5:a1:86:15:f3:b2:b8:6a:6a:72:f6:6c:02:37:
e1:6f:87:d6:bf:ba:4c:9f:3f:c2:b1:63:67:d8:b4:
0f:5d:24:ea:bb:3b:cb:15:63:f9:e3:22:f9:99:32:
77:0a:75:3b:33:c9:37:0d:30:4f:ad:fb:e2:6a:66:
01:4c:ac:f6:93:29:ac:3c:9a:36:c2:e8:d6:35:81:
bb:a9:0f:3e:3d:b6:d1:ea:c2:72:89:78:19:df:2b:
36:ad:63:71:2e:c3:af:5e:4a:63:15:dc:0e:f4:ce:
c5:ab:a9:c3:12:63:f5:f2:2d:a0:60:7e:a4:84:db:
63:17:fb:1e:15:77:1b:ba:35:83:c4:c2:38:d9:f2:
c3:33:13:92:d7:e4:f0:70:3a:21:d1:88:ab:c9:87:
2f:6f:50:b2:6a:19:a2:04:38:20:97:0c:2e:7a:31:
39:9f:3b:82:4e:34:1d:17:8a:e2:d3:91:91:4e:a0:
97:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2E:E0:0A:A2:BC:3E:2B:F6:10:E7:88:74:B8:70:A3:86:76:13:DA
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/Py7gCqK8Piv2EOeIdLhwo4Z2E9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.148.0/22
77.83.154.0/23
139.28.168.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:fb:30:25:50:50:f8:33:fd:7d:cb:2f:b5:00:e0:60:76:a1:
b5:ca:ee:34:86:d4:17:c1:d3:f5:db:46:10:29:cc:e8:03:cd:
53:5d:6b:96:c8:e0:c4:63:eb:c8:36:fe:f0:a1:5f:c2:31:82:
b4:17:88:c7:6b:3e:3f:bf:99:7b:05:56:8b:73:02:93:6f:42:
17:ee:ad:2f:bd:ce:a2:04:b6:16:ea:5e:64:79:b3:cf:0e:ee:
2d:1e:48:0f:e4:04:f1:30:ef:a3:3b:a2:ae:39:7a:06:ae:53:
f4:38:8b:6f:ba:4d:96:1b:aa:9d:a4:a2:b3:36:bd:6c:db:b1:
98:f2:60:72:05:dd:fb:7c:a2:49:fe:3e:da:eb:dd:30:ea:ce:
4f:53:7e:b3:38:21:aa:ca:92:c7:5b:20:25:e1:3c:d8:a2:97:
92:98:63:fd:73:d4:84:8d:32:8c:b9:3c:02:70:7d:af:f9:ab:
b2:0d:a9:15:34:13:a9:5b:8d:aa:f5:d2:03:ad:2d:71:d6:fe:
c8:e0:e3:63:ee:c1:01:2d:e3:56:c6:e3:09:76:1f:ea:6d:dd:
6c:e3:62:0b:7b:91:89:cf:c1:c7:86:a8:f6:8e:ff:74:df:53:
ca:37:a1:08:02:06:19:6d:22:54:c1:d8:b2:2b:cd:e5:c9:53:
6a:50:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:54 2023 by rpki-client on console.sobornost.net