Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/3jtG4YnysBN41wz5ELpphjJJsbY.roa
File: 3jtG4YnysBN41wz5ELpphjJJsbY.roa (raw, json)
Hash identifier: wXdIua/dTI6dZNPscWPOYnEn1NpP4Xw3fKkjCo/3TlY=
Subject key identifier: DE:3B:46:E1:89:F2:B0:13:78:D7:0C:F9:10:BA:69:86:32:49:B1:B6
Certificate issuer: /CN=93c8ae210ea49b4eada48b1da222023c734d3211
Certificate serial: 01856F38FAC8D78F62318169F1ECA24A8CFA
Authority key identifier: 93:C8:AE:21:0E:A4:9B:4E:AD:A4:8B:1D:A2:22:02:3C:73:4D:32:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8iuIQ6km06tpIsdoiICPHNNMhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/3jtG4YnysBN41wz5ELpphjJJsbY.roa
Signing time: Sun 01 Jan 2023 21:24:43 +0000
ROA not before: Sun 01 Jan 2023 21:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24904
IP address blocks: 45.87.180.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:38:fa:c8:d7:8f:62:31:81:69:f1:ec:a2:4a:8c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c8ae210ea49b4eada48b1da222023c734d3211
Validity
Not Before: Jan 1 21:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de3b46e189f2b01378d70cf910ba69863249b1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e8:5a:34:cb:29:f3:e8:63:a8:6a:35:38:2e:
fc:4f:43:03:38:4c:76:22:b0:13:fd:d4:51:f4:5f:
03:9f:ec:ad:7f:e6:26:2d:82:1e:a4:89:eb:a4:95:
0d:6e:37:db:7a:44:32:c0:1d:df:f4:fb:24:e8:e4:
e8:31:79:4c:2d:66:91:46:37:eb:24:7f:8d:68:51:
58:2d:50:21:76:93:3a:b0:a6:6e:a1:c9:ea:0d:21:
ee:3a:54:01:d9:73:19:36:d2:2f:9a:b8:ca:ba:33:
50:ef:77:15:b0:13:83:4d:64:2a:c6:25:08:87:55:
f9:e2:5c:98:08:e8:2f:05:e6:da:02:e5:c4:81:54:
02:40:6d:15:99:6a:a3:6b:0f:7b:9c:e5:98:d2:b7:
e8:89:c3:0b:f7:a1:b4:fe:ba:7a:f2:57:c1:d1:38:
2c:17:60:a6:0d:5a:31:51:66:52:db:e0:c2:f3:51:
0f:06:9d:64:e2:3c:3e:55:01:e5:c7:05:54:44:c4:
01:a0:40:9a:74:49:3c:21:ef:00:c5:12:b2:58:3a:
24:43:62:06:c3:1f:6c:dd:fc:68:83:91:4d:10:d2:
6e:d0:17:de:a7:30:71:16:cb:63:cb:94:26:50:47:
20:fc:8d:0f:70:c3:e2:d0:52:0e:a1:96:73:44:43:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3B:46:E1:89:F2:B0:13:78:D7:0C:F9:10:BA:69:86:32:49:B1:B6
X509v3 Authority Key Identifier:
keyid:93:C8:AE:21:0E:A4:9B:4E:AD:A4:8B:1D:A2:22:02:3C:73:4D:32:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8iuIQ6km06tpIsdoiICPHNNMhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/3jtG4YnysBN41wz5ELpphjJJsbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1a58d7-4b04-4a22-83b9-d04cc45864e2/1/k8iuIQ6km06tpIsdoiICPHNNMhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.180.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:d8:28:f5:b1:89:39:4c:f8:85:6c:82:44:59:85:1b:4e:58:
0b:0c:a5:49:d7:e8:c9:dc:dd:f3:a0:75:6c:b9:6b:26:7b:29:
2d:af:66:96:21:58:af:b7:64:59:20:9a:7c:0b:d1:78:69:42:
ff:3d:fe:ac:7a:68:30:15:2d:04:64:09:85:bc:61:84:cc:72:
6e:44:e8:87:ae:e8:2c:b9:f5:98:72:42:ba:65:e8:0f:e2:d2:
5c:e3:e4:82:fb:ba:d3:bd:d7:7b:99:98:44:97:8a:21:36:14:
88:43:5f:8f:25:93:54:08:3e:33:b8:0f:aa:62:77:c5:34:c1:
4f:28:f5:a2:b9:e1:61:f6:64:6f:da:dc:e0:47:b0:d2:2b:0e:
7e:9c:eb:ac:97:81:ed:42:20:2d:7d:ce:a7:ce:c5:14:36:f7:
5f:2f:63:fa:2d:0f:5c:b1:25:a3:5f:0e:7c:6f:79:d0:4a:bd:
ff:56:72:bd:c9:b3:16:42:6d:8e:12:e2:4d:41:1a:a9:f3:76:
89:3e:d5:06:91:8b:cf:c7:63:8c:fd:4a:b5:6e:f5:31:c2:3d:
7e:81:28:c6:4a:0b:c7:8a:82:66:1f:72:a6:8b:79:30:d9:57:
fe:c8:08:f8:19:16:38:90:c3:f3:5b:c6:e5:ef:b9:8d:7f:ad:
43:49:1d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:52 2024 by rpki-client on console.sobornost.net