Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/uaI2fop43ZFrJ4gUosRLthStDRk.roa
File: uaI2fop43ZFrJ4gUosRLthStDRk.roa (raw, json)
Hash identifier: MuIRYwOJ4SK2AIV32dRk2sLq5vxkSRmPBNYn0kXXzlY=
Subject key identifier: B9:A2:36:7E:8A:78:DD:91:6B:27:88:14:A2:C4:4B:B6:14:AD:0D:19
Certificate issuer: /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial: 018C8FA5D19B5D6EEC538D3AA59DBF532340
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/uaI2fop43ZFrJ4gUosRLthStDRk.roa
Signing time: Fri 22 Dec 2023 03:50:58 +0000
ROA not before: Fri 22 Dec 2023 03:50:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58026
IP address blocks: 65.111.0.0/19 maxlen: 19
104.207.32.0/19 maxlen: 19
45.78.80.0/20 maxlen: 20
45.3.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:a5:d1:9b:5d:6e:ec:53:8d:3a:a5:9d:bf:53:23:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Validity
Not Before: Dec 22 03:50:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9a2367e8a78dd916b278814a2c44bb614ad0d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:3b:5d:b1:2a:ac:11:78:5a:df:ff:a0:67:
04:ff:f3:0d:6a:7d:75:cd:bf:4f:41:88:d3:9a:20:
7b:33:82:3a:44:e7:31:9a:ea:d9:c0:ae:47:ff:73:
9c:de:a3:5a:61:ca:67:b4:bf:8c:30:b2:c3:45:09:
b4:4f:9c:e0:32:22:f7:0b:7a:4d:43:dc:d1:a6:d3:
06:53:73:69:26:7a:79:9e:9f:73:9d:cf:2f:a2:0c:
4e:75:e5:0a:73:62:f9:ce:29:76:0f:d8:db:7e:5a:
88:a6:c0:d3:4f:07:9f:92:cf:54:b6:34:5c:5f:c5:
f5:72:52:ca:54:73:54:62:19:96:ba:45:4e:bc:60:
89:7c:94:20:af:84:a1:42:48:ba:80:0b:ae:6e:95:
7e:79:b2:80:64:49:4b:97:9d:d5:de:55:32:03:a8:
da:74:81:d1:c3:a9:55:c8:ee:5e:04:ab:a4:33:12:
b2:b4:fa:1a:ea:30:a7:bb:04:63:db:f6:4a:57:10:
09:40:d0:01:c0:52:64:d1:68:90:d7:09:88:31:c3:
fc:08:b7:ac:55:84:31:a8:98:ca:c9:9a:68:1a:12:
43:0b:fd:e6:4d:27:1b:8c:c4:dc:dd:df:80:63:a9:
65:1b:df:81:11:fa:d4:4c:fd:ec:76:57:f5:88:22:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A2:36:7E:8A:78:DD:91:6B:27:88:14:A2:C4:4B:B6:14:AD:0D:19
X509v3 Authority Key Identifier:
keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/uaI2fop43ZFrJ4gUosRLthStDRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0/19
45.78.80.0/20
65.111.0.0/19
104.207.32.0/19
Signature Algorithm: sha256WithRSAEncryption
65:81:2f:bc:ea:f2:1e:e7:cf:f8:33:2e:b4:af:f8:b6:a3:06:
03:eb:02:bd:47:df:5e:90:94:30:e2:02:db:b7:e8:f7:03:62:
ff:b9:0f:ce:dd:b9:26:22:92:8c:4f:ec:01:03:88:ea:07:f0:
e1:bc:9a:8a:26:09:23:fb:41:95:b6:a9:e1:fe:a6:23:20:68:
c3:5e:d2:68:d8:88:a2:a1:3b:44:51:a7:f8:e3:08:46:bc:aa:
a2:bd:a2:39:4c:4f:8b:ce:ed:5b:1e:67:be:c7:f8:25:ad:8a:
a6:2b:f3:1a:94:2e:3a:ad:95:7f:0c:d4:b1:4c:8e:45:43:c7:
4e:ff:6f:51:fc:5a:19:fb:b9:fd:d5:69:5f:32:82:cd:d9:d1:
44:0c:af:50:77:45:3c:49:45:ea:83:9f:f6:82:09:96:4f:a3:
64:37:47:bb:39:a8:46:9a:d1:70:7d:7f:99:5d:ba:73:de:4b:
63:74:65:30:59:aa:86:4e:01:86:f9:9d:0d:3f:ab:59:08:d7:
c8:1e:4a:54:59:6d:31:94:8d:8c:33:95:40:2b:a7:33:dc:53:
85:93:59:09:28:68:65:20:f8:90:42:1b:29:fb:95:3d:c6:54:
c1:a9:94:5d:ce:d4:05:62:5c:89:a8:dd:5b:78:7e:5d:44:3d:
8f:88:05:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:35 2024 by rpki-client on console.sobornost.net