Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/7UUxYr7gLfL_vKqqKAqHRoYJMbc.roa
File: 7UUxYr7gLfL_vKqqKAqHRoYJMbc.roa (raw, json)
Hash identifier: dvhjrH4r9vKNDeSfS3eijiE+0U/MTPWDazH1FrPC2WI=
Subject key identifier: ED:45:31:62:BE:E0:2D:F2:FF:BC:AA:AA:28:0A:87:46:86:09:31:B7
Certificate issuer: /CN=cab936b35f92cdec5e90df33bdc508661c27b455
Certificate serial: 01856FF04E8870D44A836E3EE2B418BF4202
Authority key identifier: CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/7UUxYr7gLfL_vKqqKAqHRoYJMbc.roa
Signing time: Mon 02 Jan 2023 00:44:57 +0000
ROA not before: Mon 02 Jan 2023 00:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29119
IP address blocks: 193.178.44.0/22 maxlen: 22
45.94.100.0/22 maxlen: 22
2a12:b840::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:4e:88:70:d4:4a:83:6e:3e:e2:b4:18:bf:42:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cab936b35f92cdec5e90df33bdc508661c27b455
Validity
Not Before: Jan 2 00:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed453162bee02df2ffbcaaaa280a8746860931b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:94:7d:ec:e6:5e:6c:57:53:5f:ff:8a:8d:ba:
6f:e9:9e:bc:ed:04:12:2e:65:f6:e5:94:fb:d3:21:
27:9f:b2:a6:a6:14:71:6a:eb:b6:81:c8:cc:1e:f1:
3c:21:9f:eb:e2:13:47:ff:cd:4e:bd:54:0c:64:06:
a1:65:09:f2:12:f5:af:16:41:18:0d:0f:4e:d8:0a:
71:f7:81:94:63:93:c6:a1:fd:21:b9:05:66:a0:b4:
4a:7a:3a:fa:43:35:29:66:fd:3a:3d:2b:2e:a4:60:
b3:b2:50:19:5c:1a:25:6c:70:54:a1:25:ca:48:a2:
b7:2f:78:21:da:fd:e4:df:e3:f1:6b:09:64:45:c1:
86:d8:23:25:63:c8:7d:00:07:42:df:77:de:44:06:
63:06:6f:54:2e:3d:7e:de:0c:2f:06:bb:7e:f7:b7:
08:29:76:85:1b:dd:fb:61:68:45:a8:52:86:17:79:
b8:0f:88:a4:79:99:de:5d:46:5f:af:cb:63:a7:f3:
9c:0f:99:2a:91:14:aa:2a:3d:1e:7d:a6:48:8b:58:
55:9c:94:f6:17:13:71:b6:28:d3:65:83:76:13:4b:
80:65:02:9a:c7:3b:13:95:ab:bf:d1:37:41:0a:60:
99:7e:d1:3b:2c:34:1c:5e:fc:64:91:45:e8:16:50:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:45:31:62:BE:E0:2D:F2:FF:BC:AA:AA:28:0A:87:46:86:09:31:B7
X509v3 Authority Key Identifier:
keyid:CA:B9:36:B3:5F:92:CD:EC:5E:90:DF:33:BD:C5:08:66:1C:27:B4:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yrk2s1-SzexekN8zvcUIZhwntFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/7UUxYr7gLfL_vKqqKAqHRoYJMbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2f977a-c0db-437e-9f60-5592360e3e8e/1/yrk2s1-SzexekN8zvcUIZhwntFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.100.0/22
193.178.44.0/22
IPv6:
2a12:b840::/32
Signature Algorithm: sha256WithRSAEncryption
95:62:90:e8:74:30:f5:a5:d9:39:f1:78:04:7c:f4:8b:7b:59:
0a:00:66:87:3e:28:48:d5:09:00:f5:51:7f:2e:16:6d:0a:a5:
64:e1:51:9e:82:98:a7:65:09:5b:8a:e1:30:93:ba:b3:64:e2:
23:8d:e0:77:39:0e:11:0f:39:ed:b9:86:f4:a7:9c:dd:5f:b5:
d8:d3:a2:03:07:d9:d9:a5:b1:59:13:cb:9c:a8:59:bc:0e:a5:
26:75:fe:d4:94:01:0b:bd:af:1a:3a:4c:46:db:0e:4d:c4:44:
9a:ef:aa:bd:47:e2:f2:95:b8:d5:b4:10:51:8f:cb:f4:3f:e8:
ed:63:bf:56:97:f1:11:c1:e4:63:5a:9e:58:ad:9d:fe:27:61:
da:48:58:d3:a3:21:e8:a6:f3:7d:6d:96:4e:30:6b:b7:7d:a7:
ec:72:a5:c1:79:cf:20:89:ac:61:c0:d8:1c:39:66:ff:c5:10:
01:36:af:9e:cf:2a:f2:d5:24:6c:06:18:6f:38:32:2e:5b:1b:
9a:d1:d5:44:ec:50:a6:e0:1b:42:51:17:02:2d:ab:38:40:f9:
c7:a5:22:3c:65:43:ba:d6:fb:7d:87:d2:e3:87:13:51:8a:b3:
68:c3:5f:e3:12:a0:57:19:20:51:6b:29:eb:d7:d3:d8:09:59:
a7:15:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:10 2024 by rpki-client on console.sobornost.net