Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/9BwKSkSVRjoM-7tmGYKzUwdlzL8.roa
File: 9BwKSkSVRjoM-7tmGYKzUwdlzL8.roa (raw, json)
Hash identifier: k6QKHYyOB9WCHrWbe5PURfbVDp8UTlpA6IOyRVauLt0=
Subject key identifier: F4:1C:0A:4A:44:95:46:3A:0C:FB:BB:66:19:82:B3:53:07:65:CC:BF
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 018A6A3EB0A0EBBDAB7DD3AAABB426F6A26B
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/9BwKSkSVRjoM-7tmGYKzUwdlzL8.roa
Signing time: Wed 06 Sep 2023 11:26:47 +0000
ROA not before: Wed 06 Sep 2023 11:26:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202513
IP address blocks: 45.141.240.0/23 maxlen: 23
45.141.252.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:3e:b0:a0:eb:bd:ab:7d:d3:aa:ab:b4:26:f6:a2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Sep 6 11:26:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f41c0a4a4495463a0cfbbb661982b3530765ccbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:80:11:50:07:1b:f2:f9:c5:45:39:9c:59:ca:
7f:1e:14:49:b3:d6:95:f5:78:72:24:4c:9a:ff:74:
43:6a:bb:36:4c:43:8a:47:0e:0b:76:e7:77:3d:a3:
06:6a:dd:91:21:cc:87:c1:2b:c4:e8:31:b3:85:ea:
bf:fb:cf:dc:df:49:81:fc:45:65:c7:b7:fd:e3:2e:
f2:ab:75:aa:86:d7:97:a9:71:3b:f3:3a:34:b5:d0:
3f:f9:52:5c:f5:3c:7a:4c:0d:36:3b:6e:9c:8c:c5:
c4:5a:a0:4a:bb:50:a1:91:25:67:91:7c:62:7a:bd:
ae:f7:e3:8c:55:a3:e4:ec:e3:d0:c6:5d:f3:03:4f:
b2:7a:b0:5b:d8:8d:96:53:ed:88:f4:c5:ad:b3:db:
5a:58:8a:55:2a:b5:db:62:60:d0:4d:e9:78:25:f4:
8f:ba:97:eb:0f:e3:6b:8a:90:0f:79:d0:c4:00:06:
27:db:08:b6:67:8d:5a:fd:22:2f:9d:32:69:d1:f1:
4b:b3:a4:c1:39:aa:09:50:8f:6b:97:29:52:4e:d4:
bd:51:72:6e:2d:12:ae:43:21:dd:2b:ce:40:72:45:
87:9b:9f:32:c0:0a:50:9e:20:14:60:8c:e2:1c:73:
1f:7c:be:12:21:27:e2:28:bf:36:79:3c:95:83:6e:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1C:0A:4A:44:95:46:3A:0C:FB:BB:66:19:82:B3:53:07:65:CC:BF
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/9BwKSkSVRjoM-7tmGYKzUwdlzL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.240.0/23
45.141.252.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:76:8a:ba:d5:64:b2:b0:9b:7f:20:e8:80:ee:06:65:55:26:
ff:91:5f:93:2b:6d:b4:8f:da:d6:26:07:fd:e1:dc:cf:04:df:
37:a4:f8:1b:41:84:d7:e6:bd:f6:da:ee:26:ae:16:5c:12:38:
b9:2d:1b:34:f1:eb:9e:0d:5b:aa:64:26:e4:fe:28:58:76:5b:
6d:67:1a:d7:17:82:f4:12:d9:28:ed:08:22:44:65:b1:32:36:
85:23:38:ef:53:7b:09:27:01:9f:6b:d7:39:0d:86:9e:7c:52:
ee:b6:4c:c4:04:0b:e8:b1:a2:2d:30:33:58:85:e2:7c:9c:76:
01:2d:fc:1e:ad:46:24:d0:75:c7:db:08:61:f7:27:b8:16:be:
b3:98:a1:fd:ce:31:2b:76:b5:f9:e3:51:8d:a4:53:06:3f:7c:
58:c8:21:d3:8c:65:1a:0a:d1:07:90:f5:03:02:08:fa:97:83:
8c:bc:03:6b:97:75:08:1f:5c:70:1f:ae:3d:d7:fe:7e:e8:c4:
9b:a1:ce:bc:d8:0e:17:7c:d4:83:45:01:a7:5f:96:f7:c2:ed:
34:c6:69:1a:10:91:5a:7c:d4:6f:e7:ab:13:82:f4:d3:5f:9a:
d1:3c:52:a8:2f:b9:7e:55:fa:cf:ac:5c:be:d3:58:b3:e0:a8:
d7:cb:b5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:26 2024 by rpki-client on console.sobornost.net