Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/BW9c3KqBs1Uh3j5MHspa_G969D0.roa
File: BW9c3KqBs1Uh3j5MHspa_G969D0.roa (raw, json)
Hash identifier: coB9AqdYiFn5QSXHB1rXNaKkYotadMt2MB2smcWut+E=
Subject key identifier: 05:6F:5C:DC:AA:81:B3:55:21:DE:3E:4C:1E:CA:5A:FC:6F:7A:F4:3D
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 018B90025DCBA1644CA660E9D77E3376126B
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/BW9c3KqBs1Uh3j5MHspa_G969D0.roa
Signing time: Thu 02 Nov 2023 12:29:16 +0000
ROA not before: Thu 02 Nov 2023 12:29:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58026
IP address blocks: 65.111.0.0/19 maxlen: 19
104.167.16.0/20 maxlen: 20
104.207.32.0/19 maxlen: 19
45.78.80.0/20 maxlen: 20
45.3.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:02:5d:cb:a1:64:4c:a6:60:e9:d7:7e:33:76:12:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Nov 2 12:29:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=056f5cdcaa81b35521de3e4c1eca5afc6f7af43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:c0:90:46:df:9b:38:b4:15:6d:74:b9:89:
3f:1a:eb:6e:72:46:e0:91:e9:8a:3d:66:23:8e:4b:
b9:61:24:e2:99:e1:68:e6:b3:81:d3:3c:04:11:78:
06:33:ff:60:9e:b6:e7:78:55:c3:8e:14:6b:7c:d6:
12:d5:2c:93:9e:de:62:9a:9d:86:c6:66:c6:51:37:
99:66:7e:47:18:25:20:68:8b:a9:df:72:2b:01:b5:
f9:36:f2:47:62:8f:1b:2b:53:22:6f:34:db:b0:3d:
1b:7a:f6:5e:df:32:11:fc:42:5f:2d:45:3f:55:02:
5c:8c:50:60:02:3e:54:be:c8:5b:e9:74:d7:0c:9a:
4b:73:ab:1f:28:f8:69:0d:cd:96:2b:fe:38:8c:c6:
12:b1:3a:85:34:7f:36:6c:e8:58:88:cc:3a:f3:ee:
53:70:ea:bb:7b:e0:73:5f:73:4e:c2:f3:d0:cd:e2:
c3:bd:99:f3:78:49:41:a6:25:c0:b6:27:f3:da:1e:
c7:8c:96:98:46:5f:7c:60:5c:b6:5a:18:3d:84:12:
c5:cd:91:31:68:90:96:9c:36:95:2d:15:9b:b6:96:
2a:c8:1d:1b:02:fb:67:95:33:9b:ec:5b:e1:50:b3:
d2:1e:7b:2b:41:d3:8b:f0:b7:d7:e7:93:9c:0c:4a:
dd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6F:5C:DC:AA:81:B3:55:21:DE:3E:4C:1E:CA:5A:FC:6F:7A:F4:3D
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/BW9c3KqBs1Uh3j5MHspa_G969D0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0/19
45.78.80.0/20
65.111.0.0/19
104.167.16.0/20
104.207.32.0/19
Signature Algorithm: sha256WithRSAEncryption
70:9c:a6:23:f3:00:ae:be:fd:4a:7d:52:fc:99:17:19:5a:9f:
d9:c9:60:4d:d6:c3:be:af:c7:75:67:f8:fe:e7:66:53:5a:c1:
7a:74:98:58:99:a9:e7:e1:73:11:65:b3:48:77:55:d2:8f:00:
c4:83:68:46:d0:76:f9:74:22:37:53:d0:9e:96:f4:78:d3:70:
07:57:39:8b:5e:85:56:46:54:e7:2e:aa:c1:14:7f:93:3e:84:
6e:d2:65:40:b5:9e:e5:59:c1:28:58:7f:87:5c:37:50:06:3a:
a9:42:0f:b3:65:f0:96:ea:71:19:ea:38:3e:85:87:00:b9:e5:
ea:ef:13:dc:8b:7c:eb:87:36:4c:92:9b:4d:9c:7a:b7:67:f8:
04:6d:c7:ea:ce:79:cf:89:a6:de:c1:81:86:0e:ea:52:88:82:
0a:04:1e:fe:b2:f3:b3:e4:99:e8:50:9f:72:f8:54:ce:70:d1:
ac:eb:5a:f1:0b:cd:ed:0c:ef:b7:ff:33:c9:57:84:8f:04:03:
3c:7a:c8:76:da:ef:85:e1:22:85:d1:80:a8:82:79:88:10:d7:
9a:0d:d6:ab:9c:e4:d1:84:38:ae:df:f9:35:40:41:7b:7d:94:
f6:cf:52:35:9e:3e:96:f4:ae:e2:45:b0:fd:a4:07:81:46:e7:
2d:55:30:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:52 2023 by rpki-client on console.sobornost.net