Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/pzvy5BJ6fZ6Aio-XRA_hoiv3z_M.roa
File: pzvy5BJ6fZ6Aio-XRA_hoiv3z_M.roa (raw, json)
Hash identifier: k7BjRSRAGChWu2U8yX7VO1c0P0ayACXBU1Nce9siMtA=
Subject key identifier: A7:3B:F2:E4:12:7A:7D:9E:80:8A:8F:97:44:0F:E1:A2:2B:F7:CF:F3
Certificate issuer: /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial: 0185703047256FDBCF1B0AC44BB8B6B4D61D
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/pzvy5BJ6fZ6Aio-XRA_hoiv3z_M.roa
Signing time: Mon 02 Jan 2023 01:54:50 +0000
ROA not before: Mon 02 Jan 2023 01:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204856
IP address blocks: 45.129.93.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:47:25:6f:db:cf:1b:0a:c4:4b:b8:b6:b4:d6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
Validity
Not Before: Jan 2 01:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a73bf2e4127a7d9e808a8f97440fe1a22bf7cff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:67:83:2c:db:ff:da:79:0e:68:37:9d:eb:
94:8e:92:99:77:3e:f6:0f:d5:91:89:00:59:cc:a6:
48:6b:f1:04:76:2b:86:39:05:2f:8e:b7:d7:ca:d4:
b8:6e:60:6f:27:b6:33:8f:85:8b:e4:11:c7:24:ec:
2b:ce:dc:93:27:40:43:aa:42:dc:c4:fd:d3:90:a0:
10:76:b8:e8:84:8a:d1:3a:38:42:59:7b:53:3e:71:
6d:02:44:41:a2:80:d5:ca:0e:11:a4:46:7b:c0:0a:
57:83:fb:1a:dc:4c:1a:6b:dc:a8:a0:83:5b:82:13:
08:2f:c9:69:8a:6e:87:bf:b4:0b:5f:16:6d:dd:bc:
27:00:9f:13:20:15:45:57:a2:89:38:74:83:9a:89:
9a:11:dc:7f:85:de:f3:d6:0e:20:36:75:b8:fe:e4:
f6:d4:37:0a:c0:14:1c:11:e9:fb:9a:5b:f9:56:57:
ea:2f:ea:60:32:25:80:16:b7:f6:45:02:73:ab:52:
b7:b7:13:3e:4a:d3:b9:81:da:fd:f8:cd:27:e4:5c:
55:7a:e8:3f:de:c0:35:b1:50:e4:92:2f:7c:ef:aa:
0f:a6:9f:52:a3:27:f8:07:ef:c4:51:3f:1d:89:6e:
aa:46:d0:c8:58:a9:2e:10:5b:18:08:a2:23:ff:bd:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3B:F2:E4:12:7A:7D:9E:80:8A:8F:97:44:0F:E1:A2:2B:F7:CF:F3
X509v3 Authority Key Identifier:
keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/pzvy5BJ6fZ6Aio-XRA_hoiv3z_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.93.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1e:b3:56:34:c4:8e:b5:4c:b8:25:f4:ff:13:fd:b2:17:b3:
87:46:22:44:de:e1:bb:7e:20:db:69:b9:8d:e9:11:e6:0a:da:
d3:2f:f0:96:cb:3e:07:8d:27:5e:1e:37:2e:ab:7a:f0:b8:82:
98:06:b5:c9:03:26:dc:6d:be:a1:35:7a:99:0c:96:e8:a4:a9:
27:d2:9e:52:bd:c8:d5:69:01:c0:bf:a2:4e:f8:ac:39:c0:4f:
62:f3:81:48:26:b3:82:53:7d:1a:55:61:a6:d4:25:49:27:0c:
fb:63:d4:93:da:83:4f:ce:96:53:56:22:04:79:11:dc:76:9c:
dd:6e:a3:b3:54:1a:b2:98:09:03:ee:d5:29:e4:3f:64:ca:9e:
08:4a:5b:c7:46:4f:47:3d:20:f2:f7:34:e7:26:c1:9c:28:8e:
35:60:dc:ef:cd:89:1d:a4:cf:76:48:87:02:60:db:30:c0:c4:
a1:c1:86:e9:85:e6:de:ef:7e:2d:20:e2:8f:df:61:12:72:25:
da:1f:2f:64:99:4c:0e:cd:fb:b2:f1:d3:d8:b9:82:07:25:44:
da:c7:8e:79:f9:a2:93:e2:81:d9:94:9a:a3:e4:93:b2:d2:95:
ef:c7:74:33:6c:c7:38:7b:0e:6b:1b:fe:94:52:82:37:56:fd:
5b:84:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:08 2024 by rpki-client on console.sobornost.net