Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/vvmfuNPzAsoqoeE8nfCdm69ZoTw.roa
File: vvmfuNPzAsoqoeE8nfCdm69ZoTw.roa (raw, json)
Hash identifier: WUNGYWWzhBXjf5xpOyvHdukZifk+dUecng4LbdzeTzQ=
Subject key identifier: BE:F9:9F:B8:D3:F3:02:CA:2A:A1:E1:3C:9D:F0:9D:9B:AF:59:A1:3C
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 018C6C56F0F2FD02E13396308E7F8D8267C2
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/vvmfuNPzAsoqoeE8nfCdm69ZoTw.roa
Signing time: Fri 15 Dec 2023 07:18:06 +0000
ROA not before: Fri 15 Dec 2023 07:18:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200245
IP address blocks: 45.85.44.0/22 maxlen: 22
45.85.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:56:f0:f2:fd:02:e1:33:96:30:8e:7f:8d:82:67:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Dec 15 07:18:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bef99fb8d3f302ca2aa1e13c9df09d9baf59a13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:f9:51:51:2f:92:92:73:90:f6:21:a3:dd:
8d:0a:8f:ff:48:85:b1:f0:39:54:ec:4b:f6:ab:f0:
b0:46:61:ff:7d:ed:53:aa:07:b9:3e:7e:d9:5e:e0:
46:0c:e0:d5:95:65:44:4f:d6:ba:e7:f4:2a:ea:a9:
9e:68:90:20:0f:1d:01:e3:6a:f2:d7:fa:e9:8b:cf:
9e:3b:4c:fe:d9:64:8c:2c:ef:b1:f8:7f:05:fe:46:
75:60:84:3d:f5:b7:da:a6:fa:aa:d9:19:8c:e5:f3:
7c:98:35:e0:dc:42:31:2c:33:b3:7b:8a:17:ae:5c:
c8:cd:5e:13:90:31:fc:0a:a3:e2:48:ff:da:35:06:
1c:14:4a:c7:52:ed:e5:dd:10:e1:79:b3:ff:33:61:
6a:39:c3:13:9f:f5:30:d1:39:3a:fa:0b:6c:b8:de:
a1:26:ff:fd:be:b1:58:0b:87:dc:94:20:bd:2b:95:
f7:27:f6:4d:73:53:4c:25:d2:6a:77:46:54:ec:b8:
d7:7c:b2:36:bd:86:9a:dc:91:88:77:fd:32:fd:d1:
ef:b2:d2:4f:d4:83:16:bb:de:1b:b4:99:82:cc:15:
34:e3:92:db:81:c8:c2:19:2f:86:9f:39:78:61:9c:
ae:cd:c1:a4:bc:1b:1a:51:6e:b0:61:cf:2b:e1:cf:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F9:9F:B8:D3:F3:02:CA:2A:A1:E1:3C:9D:F0:9D:9B:AF:59:A1:3C
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/vvmfuNPzAsoqoeE8nfCdm69ZoTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.44.0/22
Signature Algorithm: sha256WithRSAEncryption
95:f7:35:c4:2b:4e:0d:4f:8a:da:df:b2:1b:f4:15:07:2f:c1:
bc:8e:d0:87:dd:c5:b5:13:fb:14:f0:98:b9:62:d9:3c:f2:93:
17:a4:a8:c4:d1:81:28:e5:17:3b:c4:b5:9e:32:db:8c:f4:a9:
5e:8b:e9:88:a1:2c:2a:ff:55:97:32:40:d1:dd:4d:f8:88:a2:
ee:1f:5d:47:6e:58:86:1c:2b:5e:80:08:04:7e:0d:44:b6:28:
a9:73:e2:88:d4:44:9c:12:74:2a:44:bc:81:a5:5e:12:92:42:
1a:ed:0c:02:31:e9:8e:7f:34:d6:62:54:d8:99:da:85:2e:19:
04:c8:02:de:51:25:33:7e:37:21:e6:1b:fe:d6:43:d8:46:fc:
b6:f1:07:48:5f:ec:65:53:96:39:51:73:e8:a3:01:e0:e6:88:
6c:6f:5a:6c:68:48:72:98:b0:a6:a7:c8:8b:93:dd:17:e0:e0:
e2:53:cc:bd:f9:13:70:d2:15:f3:a4:91:d5:64:b7:92:36:6f:
0d:05:08:d2:c6:21:57:e0:94:d5:19:f7:17:6f:57:29:6e:12:
85:91:db:f2:98:0d:8d:0b:33:85:61:23:34:36:99:46:8e:a8:
71:cb:61:c0:1a:78:df:45:2c:60:08:20:a4:04:ef:e1:f7:42:
36:fa:0f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:18 2024 by rpki-client on console.sobornost.net