Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/NFxG13rqex1HAIoyUbXenPKXpEY.roa
File: NFxG13rqex1HAIoyUbXenPKXpEY.roa (raw, json)
Hash identifier: 78Gx3Onzps6bKMnyhvkp6VmrAV7vfyDOz2MGa218o98=
Subject key identifier: 34:5C:46:D7:7A:EA:7B:1D:47:00:8A:32:51:B5:DE:9C:F2:97:A4:46
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 018804931B6EBB5302E5C3C24F1CB7791C98
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/NFxG13rqex1HAIoyUbXenPKXpEY.roa
Signing time: Wed 10 May 2023 07:32:09 +0000
ROA not before: Wed 10 May 2023 07:32:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62236
IP address blocks: 45.141.243.0/24 maxlen: 24
45.141.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:93:1b:6e:bb:53:02:e5:c3:c2:4f:1c:b7:79:1c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: May 10 07:32:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=345c46d77aea7b1d47008a3251b5de9cf297a446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:ae:89:d3:28:0b:d4:f9:a5:04:be:31:59:
8a:0b:8a:dd:72:ad:4f:5a:d6:b8:ef:5f:d3:1d:ad:
b9:ea:12:18:51:d3:e1:0d:1d:df:a0:c7:d0:e9:4c:
47:35:0a:48:dd:a0:fd:7a:c2:cf:da:55:fb:3a:d2:
31:76:52:cd:74:7e:32:96:1d:64:3b:1b:9b:c6:e9:
92:85:f2:ed:6a:c5:34:74:4b:a3:44:5c:0b:22:a2:
c1:6b:8c:5a:a2:28:76:53:9d:bb:02:3d:a0:bf:8e:
22:de:eb:5f:da:d8:5c:ae:49:5e:2a:49:47:5c:01:
90:02:2b:7c:b2:20:19:2e:0b:eb:f2:66:68:58:c8:
03:12:f1:49:63:cd:7c:5a:5c:11:72:1f:5a:0c:9b:
ff:57:f2:48:4f:67:fb:9a:ae:d2:d9:c9:fb:a4:ad:
cb:c8:9a:60:ce:86:81:91:7c:8a:4d:7f:e3:2b:4e:
be:a4:03:96:41:6b:6c:3f:64:5e:f2:5b:6f:2d:ad:
67:83:ce:a3:94:70:36:33:cb:8b:79:db:21:41:a7:
66:8f:07:d6:c4:92:76:41:fb:d6:bc:d5:03:fe:08:
1d:c7:d2:45:ea:69:0a:73:d3:04:90:e8:3d:a8:03:
3b:39:2d:ad:1f:51:37:73:c9:13:71:2d:bf:50:5c:
9f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5C:46:D7:7A:EA:7B:1D:47:00:8A:32:51:B5:DE:9C:F2:97:A4:46
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/NFxG13rqex1HAIoyUbXenPKXpEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.243.0/24
45.141.254.0/24
Signature Algorithm: sha256WithRSAEncryption
55:5e:87:13:41:15:3b:4e:7f:63:6b:2a:7a:d4:fc:ae:9a:6e:
89:21:43:00:1a:0f:e5:b5:1d:98:50:3a:9a:4e:38:68:60:d2:
0d:c1:c0:a3:e2:78:65:3b:74:f8:9e:5f:b3:86:b0:a3:a2:14:
02:e0:11:22:e9:5b:0b:20:84:a2:b0:e3:83:cb:e9:d9:9e:b1:
ae:4f:6a:61:82:0f:be:db:e0:8b:09:64:84:0f:8e:ca:d1:cb:
53:34:57:29:e5:88:58:28:81:1d:9e:78:35:5b:f8:b1:69:a5:
d1:41:f9:4a:e2:83:71:bb:69:5e:e2:33:aa:01:15:d8:3f:17:
a6:ba:de:b2:19:00:5f:8f:ee:be:d1:d7:9b:83:c6:78:5b:51:
1e:81:1d:b5:39:30:de:4b:6d:af:26:18:af:73:74:75:76:9d:
41:5a:6f:b1:a9:c5:9d:28:9b:ca:18:e0:8e:81:b7:19:29:b2:
17:f4:82:fb:e0:b6:29:43:5e:52:39:e7:08:e2:dd:41:ba:32:
1d:60:94:ca:54:76:3a:5e:27:4c:1f:f8:43:d6:33:a4:c4:81:
7b:cc:74:e9:53:f3:ed:d4:b7:06:cc:a8:86:c0:8f:c5:c5:b8:
31:93:4e:4c:65:14:01:1b:2d:b7:c6:d9:85:65:fd:1d:45:ed:
c5:b0:1b:5a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYgEkxtuu1MC5cPCTxy3eRyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyYzc4ZWVlZjdhY2I0NTFmYzM3NTc1ZmViOTExNGRmY2Nj
MWNkZmIwHhcNMjMwNTEwMDczMjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDVjNDZkNzdhZWE3YjFkNDcwMDhhMzI1MWI1ZGU5Y2YyOTdhNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN2uidMoC9T5pQS+MVmKC4rdcq1P
Wta471/THa256hIYUdPhDR3foMfQ6UxHNQpI3aD9esLP2lX7OtIxdlLNdH4ylh1k
OxubxumShfLtasU0dEujRFwLIqLBa4xaoih2U527Aj2gv44i3utf2thcrkleKklH
XAGQAit8siAZLgvr8mZoWMgDEvFJY818WlwRch9aDJv/V/JIT2f7mq7S2cn7pK3L
yJpgzoaBkXyKTX/jK06+pAOWQWtsP2Re8ltvLa1ng86jlHA2M8uLedshQadmjwfW
xJJ2QfvWvNUD/ggdx9JF6mkKc9MEkOg9qAM7OS2tH1E3c8kTcS2/UFyfbQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDRcRtd66nsdRwCKMlG13pzyl6RGMB8GA1UdIwQY
MBaAFDLHju73rLRR/DdXX+uRFN/Mwc37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYt
MmYxYzhlNDA4YjY0LzEvTkZ4RzEzcnFleDFIQUlveVViWGVuUEtYcEVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYtMmYxYzhlNDA4YjY0
LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY3zAwQA
LY3+MA0GCSqGSIb3DQEBCwUAA4IBAQBVXocTQRU7Tn9jayp61Pyumm6JIUMAGg/l
tR2YUDqaTjhoYNINwcCj4nhlO3T4nl+zhrCjohQC4BEi6VsLIISisOODy+nZnrGu
T2phgg++2+CLCWSED47K0ctTNFcp5YhYKIEdnng1W/ixaaXRQflK4oNxu2le4jOq
ARXYPxemut6yGQBfj+6+0debg8Z4W1EegR21OTDeS22vJhivc3R1dp1BWm+xqcWd
KJvKGOCOgbcZKbIX9IL74LYpQ15SOecI4t1BujIdYJTKVHY6XidMH/hD1jOkxIF7
zHTpU/Pt1LcGzKiGwI/Fxbgxk05MZRQBGy23xtmFZf0dRe3FsBta
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:26 2024 by rpki-client on console.sobornost.net