Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/hFy4-8t0_N805iI3766AcgJdI7E.roa
File: hFy4-8t0_N805iI3766AcgJdI7E.roa (raw, json)
Hash identifier: vYDMZhu1xIiLBOcl+jOvK2RE6UZMt/nstnUthOyJ2h4=
Subject key identifier: 84:5C:B8:FB:CB:74:FC:DF:34:E6:22:37:EF:AE:80:72:02:5D:23:B1
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 01856EB90830E74B50E732705B807ADE6360
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/hFy4-8t0_N805iI3766AcgJdI7E.roa
Signing time: Sun 01 Jan 2023 19:04:58 +0000
ROA not before: Sun 01 Jan 2023 19:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 153.109.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:08:30:e7:4b:50:e7:32:70:5b:80:7a:de:63:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Jan 1 19:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=845cb8fbcb74fcdf34e62237efae8072025d23b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d6:ad:b0:4b:c1:63:57:55:e3:d7:40:ac:ad:
a6:50:15:bc:d9:ca:73:1f:a3:e4:93:6f:bf:1a:38:
4f:84:f5:86:60:76:82:cc:b7:96:da:4b:f2:29:97:
b7:fa:25:8b:bc:5b:15:b7:6c:22:5a:c9:c7:7c:05:
4f:e3:b3:8f:4a:6e:8e:0d:ac:39:aa:52:27:3e:d2:
2f:c8:a1:7b:f9:b9:9e:f5:a3:c6:df:b5:16:76:42:
ad:ae:be:84:e5:ea:af:44:5d:6b:86:dc:4a:ea:de:
f8:06:51:e6:1b:f4:ac:32:3f:f6:23:2b:0e:04:d6:
e5:7a:f2:de:b7:8b:6f:32:88:4e:43:16:af:80:a1:
41:58:3e:aa:7c:2d:47:d5:d7:7f:d1:e0:c4:01:38:
ce:c9:91:1d:f9:ce:6a:5f:3c:60:8a:31:ac:bb:3a:
e1:79:a3:38:fd:7d:16:17:fc:8e:4b:6a:5f:12:aa:
ee:62:e9:5e:0b:fd:b0:cf:a1:5e:09:59:5f:b6:de:
47:3f:cc:ec:be:8a:3a:c4:84:ab:de:57:62:b7:ca:
bc:f7:2b:7b:7e:53:d7:6c:04:94:43:ba:81:ab:7b:
b2:70:d9:3d:40:36:d2:ee:ee:93:26:25:5f:d1:8a:
3f:dd:01:5b:84:85:b1:75:65:39:42:c9:8c:00:4f:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5C:B8:FB:CB:74:FC:DF:34:E6:22:37:EF:AE:80:72:02:5D:23:B1
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/hFy4-8t0_N805iI3766AcgJdI7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.109.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:a7:39:41:15:f9:5c:c1:b6:30:14:55:b1:70:56:e7:af:08:
d0:4d:fd:fb:de:a9:e4:44:8d:b4:e4:16:81:f8:21:ff:9c:bf:
f0:62:5c:17:70:ab:d8:54:1b:f0:0f:93:5c:33:80:11:c7:64:
1f:b8:86:6d:dc:c0:4e:08:7d:c2:84:24:bb:db:a7:92:ff:ea:
48:86:42:dd:38:04:57:92:25:b5:d4:ab:04:dc:12:af:86:0c:
c8:86:11:c5:f7:95:b3:83:fd:bc:64:8c:0b:15:0b:d6:72:98:
26:7d:0d:ce:c6:4a:5e:05:da:38:1e:17:23:2f:98:28:01:c0:
ee:58:48:de:86:60:59:4d:0b:a6:a9:83:b7:22:4a:da:02:db:
5c:08:5c:ca:b5:d9:51:07:08:51:cd:d2:9b:f2:9c:af:4b:83:
82:ca:a9:36:3e:4b:10:30:dd:6a:22:03:4b:36:f6:86:1e:7f:
17:0e:b8:4f:f9:64:d1:d4:a8:f3:2e:c9:21:0d:fa:3a:83:41:
93:68:05:8d:bf:e9:dc:b9:c4:7a:e1:eb:9c:14:af:45:67:8f:
e2:a6:ef:18:7a:28:c8:86:28:07:d6:51:03:e9:41:35:4d:44:
3c:4b:ac:2f:f6:c5:23:ac:68:a7:48:de:d7:9f:3e:a6:db:01:
fd:7c:2c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:01 2024 by rpki-client on console.sobornost.net