Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/EhEUhsHEXLCrwRjCbwmqnY7K2Xc.roa
File: EhEUhsHEXLCrwRjCbwmqnY7K2Xc.roa (raw, json)
Hash identifier: Ih028P9uCFIMYO2hG2ru+RbmkScjLVmbCtQjfHz8pms=
Subject key identifier: 12:11:14:86:C1:C4:5C:B0:AB:C1:18:C2:6F:09:AA:9D:8E:CA:D9:77
Certificate issuer: /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial: 018714C62D3DB536E5E1E2E9ECB2A746BA08
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/EhEUhsHEXLCrwRjCbwmqnY7K2Xc.roa
Signing time: Fri 24 Mar 2023 17:59:04 +0000
ROA not before: Fri 24 Mar 2023 17:59:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206485
IP address blocks: 45.129.136.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:14:c6:2d:3d:b5:36:e5:e1:e2:e9:ec:b2:a7:46:ba:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Validity
Not Before: Mar 24 17:59:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12111486c1c45cb0abc118c26f09aa9d8ecad977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:16:45:30:23:3c:e1:56:33:73:13:3f:d1:
9c:c2:a7:50:57:28:61:42:c1:f6:d7:ae:11:3c:c5:
8a:d5:03:50:55:fa:0a:8e:db:5e:7d:37:a2:ca:3f:
a3:ea:be:4d:fd:a1:ff:cd:64:c0:f6:65:95:e5:01:
c7:83:a3:ec:36:91:1c:cd:30:79:c7:97:e0:1b:cb:
00:97:56:4b:41:27:97:6b:04:74:21:3c:62:22:b4:
f4:19:91:a0:16:9e:37:8f:dd:75:6e:8b:f0:3e:c8:
1d:f6:6f:96:19:81:7d:9b:09:4b:ad:f3:68:12:32:
d0:8e:b5:f9:56:4a:55:22:ff:cb:4c:a6:82:2e:ec:
6d:58:3b:ce:fd:0e:e9:85:02:96:bf:f9:4e:fc:5b:
c3:3e:09:b2:9c:48:f5:09:ed:d0:37:9c:4b:69:e3:
e9:68:26:2d:ed:d5:10:f6:ec:20:d6:e7:12:7f:c5:
cd:1c:fb:d3:a3:4b:bc:88:65:df:64:d7:85:b2:23:
2f:1c:50:e6:dd:53:08:85:a0:a2:96:be:8e:48:55:
fb:60:65:7c:69:85:80:42:ca:48:0b:b9:7c:f8:95:
59:45:bf:e7:3a:fd:2e:6a:b6:47:5f:ec:74:d0:a6:
ad:0f:cd:f2:7f:cc:74:0c:b2:92:0c:13:d2:a4:78:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:11:14:86:C1:C4:5C:B0:AB:C1:18:C2:6F:09:AA:9D:8E:CA:D9:77
X509v3 Authority Key Identifier:
keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/EhEUhsHEXLCrwRjCbwmqnY7K2Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.136.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:7d:fe:ea:ad:c5:24:50:ea:1d:c1:44:33:7a:3c:f0:22:21:
d3:24:87:64:01:d4:55:0f:2f:97:cd:3c:15:9f:e8:8e:3f:11:
68:77:c7:10:e0:5c:ad:55:78:3e:04:2b:0d:2f:f4:56:2a:8c:
b7:71:b1:de:62:6b:04:89:5e:d5:64:0a:54:0e:8e:29:a5:eb:
80:b4:64:68:ec:e4:1d:32:bd:8d:4b:11:5f:0a:1c:1a:0e:a6:
69:34:e2:97:15:a3:33:9c:4b:c9:11:97:78:4d:0e:de:20:99:
71:b3:0f:c8:d0:ce:e0:e6:2e:b9:c5:a4:3b:a5:b3:53:c2:f2:
e5:9d:7f:98:1d:ff:a2:67:46:ff:27:a9:e5:50:e8:32:68:1c:
28:ce:94:82:69:4a:4d:48:55:0f:69:9e:03:85:14:0c:5a:9e:
0b:1e:a1:d7:fe:43:42:3e:52:fa:cf:91:21:35:21:8e:6e:3e:
53:94:c7:ae:18:98:b9:7b:b0:e1:48:9c:29:17:9a:4f:57:38:
64:36:7d:0d:05:c6:f5:28:42:b4:78:c5:25:6d:0a:f9:0d:a3:
31:ba:5b:45:df:66:06:1d:0d:02:82:83:36:0a:62:3a:d1:eb:
04:be:56:98:39:fd:21:83:0a:ad:99:6b:a0:ce:9d:a3:c0:8c:
12:ae:bb:51
-----BEGIN CERTIFICATE-----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Generated at Mon Jan 1 09:18:21 2024 by rpki-client on console.sobornost.net