Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/dt9munfaOnj2xszgm2spSAJErs0.roa
File: dt9munfaOnj2xszgm2spSAJErs0.roa (raw, json)
Hash identifier: OA9mf17Y4NSh/g2BJ25eAzbRj888vnCzOWcegMFYKDk=
Subject key identifier: 76:DF:66:BA:77:DA:3A:78:F6:C6:CC:E0:9B:6B:29:48:02:44:AE:CD
Certificate issuer: /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial: 01856C0A52B671A8ADB795A03EF2383F11FF
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/dt9munfaOnj2xszgm2spSAJErs0.roa
Signing time: Sun 01 Jan 2023 06:34:53 +0000
ROA not before: Sun 01 Jan 2023 06:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203303
IP address blocks: 45.10.91.0/24 maxlen: 24
185.138.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:52:b6:71:a8:ad:b7:95:a0:3e:f2:38:3f:11:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
Validity
Not Before: Jan 1 06:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76df66ba77da3a78f6c6cce09b6b29480244aecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:66:ed:5b:30:14:ab:47:e7:81:25:1a:cd:
a2:5f:2e:0b:b3:61:bf:7c:c3:1a:9c:33:51:c0:55:
d2:33:e0:80:a7:b7:85:d3:22:c8:67:5f:55:d8:44:
8e:46:41:48:fe:47:49:da:b2:d0:e8:62:9d:9a:2f:
68:39:bf:a9:59:a2:64:70:3e:6e:56:25:e3:86:a3:
9f:05:fa:76:67:ec:5d:aa:5b:98:1f:29:c3:b2:4d:
cf:96:85:fb:db:ac:03:81:37:f9:65:35:49:b6:07:
48:83:99:b0:ba:8c:ff:e1:9b:9a:36:44:6e:de:06:
ee:38:8d:07:ed:2c:98:a7:06:35:5f:3b:07:e6:47:
8a:e7:80:ba:71:67:1e:0f:66:84:54:40:78:31:6f:
13:d6:9b:20:79:c4:c3:69:50:3f:bf:2e:67:45:be:
59:ee:95:6f:cd:3a:97:14:11:5c:30:e5:f4:6b:91:
13:69:5f:e6:f7:04:2c:cf:1a:47:cf:a0:64:0b:63:
d6:05:c3:81:56:2e:a8:4d:09:77:91:3f:3c:35:d0:
d6:64:f2:a8:92:9c:db:d4:14:41:e8:ed:ff:4c:62:
a6:05:ab:a4:32:2b:d6:3c:9a:c9:d2:95:19:79:19:
19:5a:0a:fc:a5:37:65:56:0b:ab:56:25:4c:98:23:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DF:66:BA:77:DA:3A:78:F6:C6:CC:E0:9B:6B:29:48:02:44:AE:CD
X509v3 Authority Key Identifier:
keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/dt9munfaOnj2xszgm2spSAJErs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.91.0/24
185.138.228.0/24
Signature Algorithm: sha256WithRSAEncryption
90:20:ca:3e:c5:54:cf:02:e5:7c:93:b4:18:92:ef:30:d2:f5:
1b:13:19:73:b2:e0:32:a4:50:e1:25:71:0d:f1:b0:5b:df:53:
2c:cf:12:61:29:58:d5:73:5a:31:c8:17:88:4f:5c:d5:e1:4b:
91:32:e1:62:ac:37:b9:f2:b2:5c:fb:67:91:eb:3d:87:a4:dc:
3b:d8:4b:ad:e8:7b:fc:4b:d7:11:01:35:10:f8:d0:dc:03:1d:
3e:0c:8b:9b:ec:c1:be:3a:47:50:3f:2f:8b:fb:00:ac:e3:77:
ae:4e:4a:be:4f:02:1b:cf:c0:39:d1:fa:60:99:38:3a:db:8b:
ed:b6:b5:5a:4b:c7:c2:4f:5b:f1:cb:1f:5f:d9:b7:cc:e1:7b:
59:5d:aa:ce:3b:ce:f3:17:05:bf:b2:e4:90:89:84:29:10:80:
27:a4:dc:9d:2e:01:9c:24:62:cb:0e:64:6b:9e:d4:de:00:94:
76:b2:40:6d:59:28:7f:af:aa:64:0f:b3:3e:19:d3:46:d1:f0:
e8:a9:be:7c:25:a2:a5:22:12:49:8f:df:f8:ea:8b:e1:72:6c:
f6:e7:14:fd:ad:4b:75:e2:85:4a:35:0a:c0:4f:e6:3a:79:43:
b1:61:b9:42:c6:ff:97:de:66:5a:c0:3c:1f:81:6a:0a:46:bf:
e2:d1:65:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:52 2024 by rpki-client on console.sobornost.net