Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/A4tgNYwiMDoXhCzqK30LJ4xX2jw.roa
File: A4tgNYwiMDoXhCzqK30LJ4xX2jw.roa (raw, json)
Hash identifier: bjHVSxopussSvqY/naQL21MYI8ZUfvA2hH4TbIsr6Hc=
Subject key identifier: 03:8B:60:35:8C:22:30:3A:17:84:2C:EA:2B:7D:0B:27:8C:57:DA:3C
Certificate issuer: /CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Certificate serial: 018570F08FB02EE28C33C3DED0DC29D51FC0
Authority key identifier: DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/A4tgNYwiMDoXhCzqK30LJ4xX2jw.roa
Signing time: Mon 02 Jan 2023 05:24:51 +0000
ROA not before: Mon 02 Jan 2023 05:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208566
IP address blocks: 195.191.235.0/24 maxlen: 24
45.128.217.0/24 maxlen: 24
45.128.216.0/24 maxlen: 24
2a0e:41c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:8f:b0:2e:e2:8c:33:c3:de:d0:dc:29:d5:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcbcab4859536cf996596ef19d2a64611d036fe4
Validity
Not Before: Jan 2 05:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=038b60358c22303a17842cea2b7d0b278c57da3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a7:fb:13:71:b3:fc:6e:ae:11:fd:e7:73:c3:
a9:bf:2c:7a:91:aa:26:7e:6f:c8:fc:85:7d:9a:30:
8c:77:99:9c:02:ca:a3:f8:20:a1:d3:9c:cb:a6:d2:
63:c7:5f:08:f6:74:80:00:85:44:2c:44:dd:0f:ad:
e4:58:68:18:2c:51:f1:76:b8:0f:d4:38:45:6e:f7:
e5:44:bf:01:e4:b9:07:0e:39:1d:44:8c:d1:90:ec:
b5:9e:5c:06:24:54:02:48:27:4d:1c:d7:43:1a:b2:
7f:b2:c0:e9:09:df:68:b8:b2:07:bd:0e:bf:66:4d:
f0:aa:4f:f2:b6:54:d7:07:13:96:77:09:88:b9:18:
58:9c:18:03:85:26:c3:04:1d:06:f1:95:51:d4:f0:
6f:0e:40:15:e0:d8:64:af:34:48:00:ff:74:54:d8:
6f:9c:05:f8:eb:42:e9:b6:d1:b0:bb:13:71:ef:e0:
90:95:10:8d:7e:5b:de:30:69:2b:0d:79:4f:92:ab:
ce:a7:1b:8e:34:aa:3e:d7:3f:ee:e4:d7:d7:af:14:
78:68:c7:30:27:4e:af:c5:b6:d4:37:46:8c:38:38:
39:84:a8:36:92:d2:e4:54:ae:30:66:90:0e:96:4b:
27:9b:58:62:4a:fb:70:09:ca:fe:79:e4:f2:f5:2c:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8B:60:35:8C:22:30:3A:17:84:2C:EA:2B:7D:0B:27:8C:57:DA:3C
X509v3 Authority Key Identifier:
keyid:DC:BC:AB:48:59:53:6C:F9:96:59:6E:F1:9D:2A:64:61:1D:03:6F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/A4tgNYwiMDoXhCzqK30LJ4xX2jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ca9274-3a94-4f1a-bee2-266fe2737b8f/1/3LyrSFlTbPmWWW7xnSpkYR0Db-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.216.0/23
195.191.235.0/24
IPv6:
2a0e:41c0::/29
Signature Algorithm: sha256WithRSAEncryption
34:af:78:7a:01:30:78:5e:4a:2d:c2:b8:af:17:62:a3:bd:19:
1d:9f:4d:ca:d7:87:e9:2c:be:3e:08:eb:a3:c7:05:ef:e7:e8:
95:43:14:49:2e:f0:49:06:0c:3e:bc:5f:12:83:7d:6d:ba:8b:
10:ee:cd:5e:29:1a:ba:33:4e:7f:02:bf:92:d8:8e:4e:55:77:
56:25:d9:70:08:50:b4:1d:50:cd:c1:ca:e6:b4:f2:43:cc:e8:
3d:8d:24:3c:e7:01:89:9f:41:6b:de:3e:30:b7:8c:99:80:e3:
46:22:b9:9c:5f:6f:ac:70:bb:8b:06:91:10:d7:47:b2:49:c8:
55:51:73:9f:f1:62:e3:05:2e:b6:75:87:bb:4f:8b:fb:94:4d:
7e:09:91:1b:5e:35:61:c3:c8:31:e9:11:77:ed:12:9a:d0:61:
7b:90:d1:6a:86:d8:b6:72:cf:db:63:95:70:94:9d:44:e6:ed:
f1:a3:e1:c9:ce:f7:c0:b5:c5:ca:69:d7:a6:12:f3:e2:44:9c:
44:ca:4f:1e:41:1c:1f:72:ea:ba:40:7f:15:e6:db:80:bd:57:
e3:a1:28:bc:7c:ec:23:51:40:11:0e:2d:bd:c9:0e:e4:17:c2:
a2:16:31:7f:c6:6b:88:86:1a:ea:b5:11:86:79:f3:e8:5a:4f:
9f:ba:ab:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:14:55 2024 by rpki-client on console.sobornost.net