Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/tWvJw86IMQEqCDfZd18dvrhDV5g.roa
File: tWvJw86IMQEqCDfZd18dvrhDV5g.roa (raw, json)
Hash identifier: 817FyX4KYFg34dFXbqlnAvSOx02WNqrfEYNmBxIKGnI=
Subject key identifier: B5:6B:C9:C3:CE:88:31:01:2A:08:37:D9:77:5F:1D:BE:B8:43:57:98
Certificate issuer: /CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Certificate serial: 01856FA707CB265712DE6723F75C241DCF22
Authority key identifier: 34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/tWvJw86IMQEqCDfZd18dvrhDV5g.roa
Signing time: Sun 01 Jan 2023 23:24:55 +0000
ROA not before: Sun 01 Jan 2023 23:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205341
IP address blocks: 45.140.160.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:07:cb:26:57:12:de:67:23:f7:5c:24:1d:cf:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34803a2cf290b0bdc69addc003d564a234aa4f76
Validity
Not Before: Jan 1 23:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b56bc9c3ce8831012a0837d9775f1dbeb8435798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:f3:f0:17:54:ae:2b:ca:d5:25:76:6f:9e:
68:cb:63:66:62:80:a8:68:6a:cc:ed:14:6f:35:1d:
1e:0b:f7:8a:91:bc:32:15:87:ff:01:06:37:ed:bf:
60:02:e7:f7:cd:e6:35:ff:b0:12:64:82:76:84:31:
0c:fc:25:23:d8:16:8b:c4:46:68:9c:a0:e2:b7:8a:
a1:22:56:4f:45:ac:0a:b5:9d:36:54:4e:cb:98:e1:
59:b0:2c:4a:fd:f0:37:18:d8:d4:32:3f:60:fc:65:
64:69:2f:ba:e6:0c:06:f8:8b:f3:90:6b:a5:60:2d:
03:36:e2:42:3b:69:c0:76:26:bb:68:e7:31:e2:aa:
33:6d:4f:c3:92:79:72:01:4c:a4:03:90:7a:7e:1a:
b0:17:f3:b1:e0:f5:a2:48:3a:c1:2f:4e:da:2a:54:
1c:83:b0:77:27:64:ed:62:66:6b:2a:a5:af:64:38:
e6:9e:64:84:d7:ea:48:53:af:4f:05:90:f0:29:a9:
ae:54:83:6a:47:5c:06:aa:2e:cb:67:53:d3:53:d0:
94:66:dc:46:f0:eb:c4:b5:1d:e7:07:a5:d5:99:3a:
61:c5:59:0b:f8:db:90:aa:ac:37:e5:d8:a3:b8:45:
2c:4a:df:28:8e:73:3d:80:3b:52:0e:23:fa:71:cd:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6B:C9:C3:CE:88:31:01:2A:08:37:D9:77:5F:1D:BE:B8:43:57:98
X509v3 Authority Key Identifier:
keyid:34:80:3A:2C:F2:90:B0:BD:C6:9A:DD:C0:03:D5:64:A2:34:AA:4F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/tWvJw86IMQEqCDfZd18dvrhDV5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/fe6234-6437-4967-ba63-85c3fa79ebc1/1/NIA6LPKQsL3Gmt3AA9VkojSqT3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.160.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:2b:56:af:08:21:20:05:c2:c6:67:83:9f:57:8c:06:39:80:
a6:5b:57:9d:b6:e2:44:94:4d:4e:79:25:d2:f5:6d:ee:72:b2:
64:a2:51:97:ac:d1:ae:ab:07:06:9f:0a:37:8f:7b:d6:c3:fb:
67:ce:d7:9b:9a:ea:ba:09:ed:35:23:33:6b:ef:77:5e:a8:17:
1d:88:fd:0c:35:24:3c:31:bb:68:af:43:6a:36:b2:61:1b:27:
2c:21:f5:6c:65:75:d2:0d:d4:23:80:2a:2e:58:d2:6a:32:58:
3a:9d:ee:62:fe:e9:9f:63:c2:7e:e0:d4:37:7f:57:c7:07:97:
7d:a5:ea:17:4d:29:da:aa:1a:04:6c:2c:f3:a4:21:c2:40:39:
67:b1:c0:d4:87:cc:07:07:0d:0b:54:48:e2:6c:8d:2f:e0:31:
dd:d3:73:6a:d2:33:c6:59:d5:5f:41:91:6a:e9:b2:be:22:c8:
97:59:d3:3c:57:d8:a4:37:5f:53:e4:60:cd:91:95:30:e8:f7:
27:46:6c:90:01:5a:ca:87:35:e5:8e:9d:59:ed:f8:b9:35:16:
c9:b9:79:39:ae:92:00:48:ea:58:84:4c:ae:73:d3:34:fb:65:
65:63:96:ba:5e:49:c1:f5:bd:a6:cb:42:db:9a:5d:3a:ff:0d:
d3:b9:d8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:03 2024 by rpki-client on console.sobornost.net