Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/1uCScElMgeWlx2MMoCGDzUxcY1Y.roa
File: 1uCScElMgeWlx2MMoCGDzUxcY1Y.roa (raw, json)
Hash identifier: PyArSM/xScITcC1x5+3bVRW9XGm1hJP1uZL3iocimtE=
Subject key identifier: D6:E0:92:70:49:4C:81:E5:A5:C7:63:0C:A0:21:83:CD:4C:5C:63:56
Certificate issuer: /CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Certificate serial: 0188DDD187166EA132C8BADF9BD46AC70550
Authority key identifier: 39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/1uCScElMgeWlx2MMoCGDzUxcY1Y.roa
Signing time: Wed 21 Jun 2023 11:57:56 +0000
ROA not before: Wed 21 Jun 2023 11:57:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209046
IP address blocks: 45.9.44.0/22 maxlen: 22
45.9.44.0/24 maxlen: 24
45.9.47.0/24 maxlen: 24
45.9.46.0/24 maxlen: 24
45.9.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:d1:87:16:6e:a1:32:c8:ba:df:9b:d4:6a:c7:05:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Validity
Not Before: Jun 21 11:57:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6e09270494c81e5a5c7630ca02183cd4c5c6356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9d:57:3b:45:0e:5d:c7:5f:34:2f:40:66:e6:
f7:c3:f3:69:d6:d6:52:39:70:aa:d4:86:8f:af:3a:
8d:36:b3:f5:d9:28:e2:09:da:b2:36:ef:52:31:6c:
d5:d9:5f:95:fe:a4:1f:ff:4a:ad:d4:ec:d6:4d:36:
50:d8:8a:f7:7f:06:67:18:f8:97:e0:5b:96:54:7e:
00:9a:cd:0b:06:cb:eb:b5:3b:a7:c6:2a:f3:be:bf:
95:3b:35:46:47:87:95:d4:01:b0:3f:b8:6c:25:fb:
89:1e:52:2b:59:70:5b:d5:e5:de:2c:d1:7f:ec:ed:
ec:9f:d7:f1:de:57:88:e0:d1:8c:b4:ae:72:6d:28:
32:3b:4f:46:5d:51:3f:f7:3d:d6:5b:e4:09:3e:f0:
28:f2:c7:9d:76:04:91:88:e2:9d:55:3b:2e:d2:1d:
e9:2f:94:d1:37:1f:8a:7d:d0:11:ae:38:1a:77:8b:
4a:f6:c1:a0:5d:5d:0c:bd:40:da:0e:0e:b6:f6:e8:
7b:5c:3f:20:11:0c:c9:c2:9c:55:df:b3:3f:0f:8b:
c6:1d:f9:ac:03:c5:9f:1d:55:87:0e:24:9a:a4:e1:
d3:a3:65:2d:f8:d8:a4:df:d1:02:e4:b0:10:0f:8a:
2c:6f:6d:39:3a:42:ad:ba:34:ad:3f:b0:5a:65:9c:
16:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E0:92:70:49:4C:81:E5:A5:C7:63:0C:A0:21:83:CD:4C:5C:63:56
X509v3 Authority Key Identifier:
keyid:39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/1uCScElMgeWlx2MMoCGDzUxcY1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.44.0/22
Signature Algorithm: sha256WithRSAEncryption
79:89:e0:cd:c0:e9:87:bb:8b:94:d0:23:b6:fe:cf:02:f8:92:
1f:f8:78:a9:37:74:8e:86:8a:61:7f:ab:bb:28:b7:58:7b:aa:
3f:1a:86:12:69:1a:42:64:f9:1c:32:14:5d:83:cd:3d:b9:91:
20:4e:3c:d0:e9:2e:d7:5f:c2:f7:44:2c:39:8f:df:fb:f3:c5:
71:c7:18:3b:a5:68:76:5a:cc:13:35:71:6f:1f:aa:64:d2:72:
a8:c3:be:d5:36:f8:0b:fc:fa:b0:15:21:b3:c8:87:2e:0c:53:
df:e8:1c:47:83:8a:d8:12:84:79:ae:b8:8e:26:b6:d5:21:1f:
46:7f:d7:97:2f:21:40:87:81:c3:20:ae:60:5a:bf:da:14:30:
f7:0f:05:fc:76:b5:31:a8:a4:97:24:13:4d:a4:34:37:c4:04:
34:ec:a1:b1:da:02:98:91:87:b9:6f:25:86:c3:52:7a:44:e2:
31:f2:ec:aa:5a:74:a1:a4:22:28:2b:5b:4a:66:bd:09:c4:47:
0f:c5:14:a5:2a:63:c9:a4:af:c5:8b:19:37:c4:df:d8:c0:1c:
af:41:5f:0a:d9:1a:0c:fe:2c:ca:a3:28:ae:b5:9b:f6:8a:57:
41:05:96:53:21:4c:06:65:bb:b5:94:29:7d:9b:c7:dd:34:a1:
39:b6:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:17:13 2024 by rpki-client on console.sobornost.net