Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/VO4rpvB-sD0StKJXs1c0bbs26p4.roa
File: VO4rpvB-sD0StKJXs1c0bbs26p4.roa (raw, json)
Hash identifier: wPLorEddGAXmUiEQjHu/chSKTPjtiG8ZL+UGGcOfrtU=
Subject key identifier: 54:EE:2B:A6:F0:7E:B0:3D:12:B4:A2:57:B3:57:34:6D:BB:36:EA:9E
Certificate issuer: /CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Certificate serial: 01856DD428807D9A161F6FB94FB70E67ABA3
Authority key identifier: 61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/VO4rpvB-sD0StKJXs1c0bbs26p4.roa
Signing time: Sun 01 Jan 2023 14:54:58 +0000
ROA not before: Sun 01 Jan 2023 14:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43542
IP address blocks: 78.156.128.0/19 maxlen: 19
185.85.92.0/22 maxlen: 22
2a00:d940::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d4:28:80:7d:9a:16:1f:6f:b9:4f:b7:0e:67:ab:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6150ca1baf9f9f6fe13d89e2664470493fe65e65
Validity
Not Before: Jan 1 14:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54ee2ba6f07eb03d12b4a257b357346dbb36ea9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d9:59:49:13:ef:b7:69:b7:d3:3c:57:fb:96:
41:aa:48:57:22:fd:03:69:f0:7c:c4:fb:21:33:b8:
8a:f4:dc:f6:e5:4f:cb:74:65:7c:72:63:67:01:7d:
09:2f:a4:a8:65:c8:29:33:90:55:82:46:00:f8:2f:
78:a8:41:b4:58:26:b0:24:80:e9:d7:32:c1:e9:59:
24:ef:9d:2b:05:20:dc:8b:44:2c:48:54:20:9b:5f:
de:14:6e:d9:7f:f3:d8:69:b6:56:a8:52:bb:96:18:
74:98:4b:62:97:e3:f3:67:6c:b4:32:36:21:2e:d5:
27:d3:14:a5:85:a4:c6:8f:6a:c5:af:f7:05:a7:9c:
af:23:a8:e3:78:45:05:62:77:c2:a5:72:9a:8d:0d:
93:ef:32:32:4e:ec:f2:c9:25:d4:53:87:cf:ef:84:
7e:42:69:ed:ef:a9:9d:f3:e5:c1:3e:fb:92:f4:cb:
a2:6b:80:93:b7:ef:0a:ad:a5:b3:a3:31:6f:26:99:
b5:9e:17:84:0d:91:56:3a:ff:e6:6c:26:de:4c:fd:
f8:50:c0:83:98:3c:78:6f:2b:79:d7:bb:83:d7:77:
24:27:cb:15:a4:2b:eb:58:91:cb:af:b8:b5:4a:c3:
a2:0b:40:dd:0d:27:94:6e:7f:66:77:3c:e6:4e:7c:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EE:2B:A6:F0:7E:B0:3D:12:B4:A2:57:B3:57:34:6D:BB:36:EA:9E
X509v3 Authority Key Identifier:
keyid:61:50:CA:1B:AF:9F:9F:6F:E1:3D:89:E2:66:44:70:49:3F:E6:5E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVDKG6-fn2_hPYniZkRwST_mXmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/VO4rpvB-sD0StKJXs1c0bbs26p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/551437-987f-48d4-aa0e-947ead9f14ed/1/YVDKG6-fn2_hPYniZkRwST_mXmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.156.128.0/19
185.85.92.0/22
IPv6:
2a00:d940::/32
Signature Algorithm: sha256WithRSAEncryption
45:39:5f:14:b0:b5:94:65:4f:d8:f1:1b:b2:d7:43:b6:1c:24:
83:60:24:fa:34:da:b3:cc:94:7b:37:c6:0d:21:17:ee:af:e4:
cb:f1:a8:f0:5b:d5:50:43:6c:2b:8c:78:6d:30:95:f3:a3:25:
a5:42:09:b3:af:5e:67:1e:ce:9f:de:05:92:93:da:f8:38:49:
ae:df:d9:27:ce:a3:45:50:32:f0:80:28:a1:8c:dc:22:30:86:
46:04:62:cf:e3:49:f8:e8:72:95:19:36:eb:64:ac:08:28:79:
d9:f1:d8:99:6e:72:59:92:bc:55:c2:85:6d:0c:28:4d:cb:29:
09:86:ce:6c:f5:df:91:41:57:5d:ab:e6:7a:fc:13:44:2a:e4:
26:4b:2f:d8:50:c1:87:e2:3f:e3:f5:94:51:10:52:61:e8:48:
f2:70:34:48:bd:9f:29:7a:b8:ef:7b:55:20:83:ca:a0:ae:19:
1f:ee:d9:02:80:4e:3b:ee:c2:b9:59:cd:17:5e:91:37:05:05:
71:e1:f9:03:2a:05:c5:d6:e2:37:d0:6d:89:ab:db:03:30:90:
d8:ea:36:85:ba:da:af:53:0c:57:b8:51:f9:8d:24:92:5e:8a:
09:5c:1f:66:38:b9:13:70:cd:23:99:f7:55:b1:16:d1:78:b8:
8b:2b:bf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:17 2024 by rpki-client on console.sobornost.net