Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/bK7ZpvjIxWbKXN6s8uQjeJN3DIc.roa
File: bK7ZpvjIxWbKXN6s8uQjeJN3DIc.roa (raw, json)
Hash identifier: PR9om8QIF4159uZ2UX4roSgPE/ztcWZmFgFtcXgkCYE=
Subject key identifier: 6C:AE:D9:A6:F8:C8:C5:66:CA:5C:DE:AC:F2:E4:23:78:93:77:0C:87
Certificate issuer: /CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Certificate serial: 018CC50153004B962EAE24904E0BBD4E8712
Authority key identifier: B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/bK7ZpvjIxWbKXN6s8uQjeJN3DIc.roa
Signing time: Mon 01 Jan 2024 12:30:47 +0000
ROA not before: Mon 01 Jan 2024 12:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208948
IP address blocks: 45.134.135.0/24 maxlen: 30
45.134.133.0/24 maxlen: 29
45.134.132.0/24 maxlen: 29
2a0d:d9c3::/32 maxlen: 64
2a0d:d9c4::/32 maxlen: 64
2a0d:d9c0::/32 maxlen: 64
Validation: Failed, certificate revoked on Tue 23 Jan 2024 12:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:53:00:4b:96:2e:ae:24:90:4e:0b:bd:4e:87:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8e4f734fde71ac421957f27c8499496f4440d7c
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6caed9a6f8c8c566ca5cdeacf2e4237893770c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:0f:1f:d4:90:28:f8:2d:81:b9:39:6d:67:
f1:5b:08:74:2b:18:cc:37:4b:28:14:e6:b4:a4:da:
46:5e:e7:47:18:f2:58:6d:7c:ab:ad:80:ef:63:fd:
53:71:c7:11:8c:6e:37:d1:14:83:11:0e:98:bf:c8:
e3:d4:7b:68:cd:51:91:aa:10:91:ed:b6:82:56:14:
d2:bc:4e:f9:f6:94:be:3f:b8:c0:9e:ec:49:18:83:
f5:a2:b7:67:8a:65:04:ec:d5:28:97:0f:75:37:84:
01:45:05:50:23:0b:a9:fb:75:b0:ec:4a:af:3c:44:
84:a6:2a:36:ef:3f:0d:a0:a8:81:4b:65:89:66:80:
9a:eb:ae:d6:48:d2:10:6f:5e:f6:fb:68:6d:7b:85:
2f:9b:47:84:57:b9:2f:a9:a5:a2:7c:b3:94:7b:f5:
56:9e:fa:b3:f9:01:c9:41:61:60:2c:d4:df:14:e7:
45:fc:40:30:40:d0:a1:cb:21:5f:e2:93:12:00:ba:
01:66:38:d9:54:53:e4:20:42:78:a4:d8:bd:04:ba:
8f:c2:5b:1d:5f:2b:a6:87:c0:13:b4:07:71:7e:2a:
c6:1d:c8:6e:5f:18:26:6e:27:32:6c:b2:1b:4a:27:
b6:fd:80:e2:e3:b2:e5:19:8b:02:26:32:0c:a7:4d:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AE:D9:A6:F8:C8:C5:66:CA:5C:DE:AC:F2:E4:23:78:93:77:0C:87
X509v3 Authority Key Identifier:
keyid:B8:E4:F7:34:FD:E7:1A:C4:21:95:7F:27:C8:49:94:96:F4:44:0D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOT3NP3nGsQhlX8nyEmUlvREDXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/bK7ZpvjIxWbKXN6s8uQjeJN3DIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/28eeb6-eb48-4ff8-8741-bcfe3ad387ce/1/uOT3NP3nGsQhlX8nyEmUlvREDXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.132.0/23
45.134.135.0/24
IPv6:
2a0d:d9c0::/32
2a0d:d9c3::-2a0d:d9c4:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6b:52:43:93:40:0e:8e:93:9f:4b:71:24:dc:2e:7e:9f:4e:ce:
bf:aa:9e:d9:c5:71:e2:cd:93:20:b0:f5:57:8d:f0:66:ec:a2:
3d:6e:02:cb:79:ef:8a:64:f2:1d:48:1d:d8:28:0d:40:07:b6:
ed:5a:82:76:8d:20:12:79:e3:19:69:0e:9a:69:ef:0a:1b:ce:
a1:3a:ce:26:94:a6:42:f8:80:a3:11:b5:4d:3c:9c:b5:23:43:
32:d8:e6:55:c4:51:b4:ef:03:b4:e3:bc:f0:bf:23:01:29:08:
e3:24:e9:87:2d:19:58:88:7c:41:55:78:83:10:3f:d8:2b:0f:
71:e5:f3:9d:01:eb:53:21:49:cd:97:da:38:3b:b4:25:54:4a:
25:c5:e7:ca:2d:9f:ad:92:68:2b:9f:26:89:6a:e5:61:bd:fb:
58:2b:e2:f7:43:a5:30:3d:1e:ec:c5:83:f9:a4:ca:86:98:a5:
98:05:e0:ed:09:47:74:d1:05:72:82:a1:f6:a6:05:c9:df:f2:
15:60:10:ec:04:d1:65:2f:4d:2e:85:46:7f:25:f7:a3:39:71:
fb:63:da:5b:f7:c0:80:68:a8:5a:79:71:ba:43:5a:11:2e:b1:
8d:97:55:52:d1:73:82:28:5b:5b:dd:c7:e8:a5:e5:22:a9:d8:
af:0d:2a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:05 2024 by rpki-client on console.sobornost.net