Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/CvuWxuEi55cPsnJ_xjejxW6bwTw.roa
File: CvuWxuEi55cPsnJ_xjejxW6bwTw.roa (raw, json)
Hash identifier: J13YuRuYT4hMMJ9IQOvogpPOFnuyRHkWXNywIl2R33U=
Subject key identifier: 0A:FB:96:C6:E1:22:E7:97:0F:B2:72:7F:C6:37:A3:C5:6E:9B:C1:3C
Certificate issuer: /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial: 01875CF96C0758E91A2EE4A45729DA0C8B45
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/CvuWxuEi55cPsnJ_xjejxW6bwTw.roa
Signing time: Fri 07 Apr 2023 18:27:42 +0000
ROA not before: Fri 07 Apr 2023 18:27:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211680
IP address blocks: 45.156.129.0/24 maxlen: 24
45.156.128.0/24 maxlen: 24
185.180.140.0/24 maxlen: 24
185.180.143.0/24 maxlen: 24
2a10:3c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5c:f9:6c:07:58:e9:1a:2e:e4:a4:57:29:da:0c:8b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Validity
Not Before: Apr 7 18:27:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0afb96c6e122e7970fb2727fc637a3c56e9bc13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:43:02:4f:c6:32:2f:7b:bc:65:ab:2a:b3:
af:74:02:0c:56:32:db:a5:b4:ea:e9:f3:8b:71:eb:
59:62:23:ee:f8:01:ef:2d:ca:20:d9:5d:7a:79:7f:
29:bc:a9:d1:20:35:e6:30:f1:d0:9f:e8:13:f2:ea:
94:fe:79:8a:cf:98:73:0a:af:1d:76:ed:98:8d:1f:
4c:ee:9c:0b:e6:18:a2:c3:93:f7:90:1a:4b:a9:2f:
13:95:09:fc:5f:80:8a:28:43:72:06:9b:71:07:8a:
68:ec:02:bb:6c:b0:b6:5f:73:4a:ec:4b:38:7c:4e:
24:2f:07:28:5f:8a:3d:5b:85:97:63:e7:a9:be:eb:
96:91:03:34:ec:37:b7:7a:0d:13:5d:4e:b3:55:b1:
44:2b:ae:7d:23:d8:5e:a2:b5:20:7a:0d:a4:f5:9a:
77:8d:54:4c:5b:2d:7f:b3:4d:c9:33:c7:74:fe:6f:
1d:0b:b0:23:ac:e4:c0:e9:33:1c:34:99:3f:25:41:
f9:ee:6f:28:d7:c9:29:05:d0:0e:71:0d:bb:49:a3:
79:53:cd:fd:0c:a7:da:e6:eb:14:7b:d2:fa:e2:12:
b5:1d:44:ae:8e:9f:88:e2:cd:27:d8:c0:a5:40:a0:
7a:82:b5:bc:6c:2c:d7:10:f0:14:a0:70:38:81:d0:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FB:96:C6:E1:22:E7:97:0F:B2:72:7F:C6:37:A3:C5:6E:9B:C1:3C
X509v3 Authority Key Identifier:
keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/CvuWxuEi55cPsnJ_xjejxW6bwTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.128.0/23
185.180.140.0/24
185.180.143.0/24
IPv6:
2a10:3c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
97:ff:fc:06:b9:cd:18:69:d6:fe:12:c5:61:09:f8:fe:56:02:
07:f5:f4:a3:34:2a:32:13:c1:cd:c3:15:dc:82:6f:db:0e:7a:
31:27:5a:0f:23:a6:7d:88:6b:a3:c8:75:ff:62:f6:71:75:a1:
02:b5:7d:9c:7f:6f:15:5e:52:38:61:f5:80:fe:36:0a:fb:a2:
2a:ac:62:11:b5:c0:90:85:72:76:96:db:25:8b:81:ce:f6:ac:
1c:7b:49:c6:24:c6:70:f8:9c:b5:d4:cb:e8:f1:14:17:f1:87:
0c:e1:10:f0:d6:77:28:29:29:47:c1:4d:95:65:fc:e6:7d:1f:
0a:b0:96:b5:a1:7b:06:be:19:11:ec:b7:db:8c:89:68:94:a4:
38:79:e9:16:4f:a7:d4:25:0c:98:1c:e0:fb:71:04:f9:64:b9:
89:25:df:a8:78:23:9f:24:26:f6:00:7a:8e:6c:9c:87:8b:f0:
bf:7e:fb:d7:ec:1d:e2:de:3e:bf:ad:4f:73:55:f2:3c:5d:e4:
2d:e2:5a:af:55:42:56:60:a7:4c:2e:d7:0b:f6:2d:43:af:7c:
6d:38:16:24:4e:d8:ce:24:c6:ed:55:07:0b:16:21:ad:bd:56:
ac:68:6e:6a:7c:e2:7a:7e:6c:33:af:4d:04:9d:d0:28:1d:41:
b3:ff:35:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:11:10 2024 by rpki-client on console.sobornost.net