Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/zU_jrqOfOOBUsSB1_iDqqUIwS5w.roa
File: zU_jrqOfOOBUsSB1_iDqqUIwS5w.roa (raw, json)
Hash identifier: vvXgbl7NNIjehFwj+QCj16B+6OKzx54PiJnqGSeYKWI=
Subject key identifier: CD:4F:E3:AE:A3:9F:38:E0:54:B1:20:75:FE:20:EA:A9:42:30:4B:9C
Certificate issuer: /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial: 01894997C99EDAC433FC6D52F47631A50EF2
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/zU_jrqOfOOBUsSB1_iDqqUIwS5w.roa
Signing time: Wed 12 Jul 2023 10:13:51 +0000
ROA not before: Wed 12 Jul 2023 10:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39421
IP address blocks: 45.90.163.0/24 maxlen: 24
45.90.162.0/24 maxlen: 24
45.90.160.0/22 maxlen: 22
45.90.161.0/24 maxlen: 24
45.90.160.0/24 maxlen: 24
2a0c:8880::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:97:c9:9e:da:c4:33:fc:6d:52:f4:76:31:a5:0e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Validity
Not Before: Jul 12 10:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd4fe3aea39f38e054b12075fe20eaa942304b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:09:14:29:ab:8a:5d:46:31:5c:bc:8b:43:fd:
f7:3b:e9:35:76:4a:1b:d4:0d:ff:86:4e:1e:a6:1e:
ee:91:69:db:a7:da:29:87:33:3b:23:ff:ee:ca:91:
b6:6a:fb:4b:4c:a8:14:87:a0:d8:99:86:86:a1:4b:
bd:6a:0e:9e:52:c1:d0:e4:7c:74:3c:a9:da:45:e2:
75:45:c9:f0:47:88:68:49:12:b5:db:64:8b:d7:82:
3e:c0:d4:ce:ac:d7:2b:71:33:28:66:6d:e5:55:88:
0c:e7:e4:44:ab:bc:74:cf:83:07:b2:00:36:69:a1:
57:55:fa:39:1c:6e:2b:5d:ec:ef:e5:21:77:52:80:
b2:41:a4:40:0c:2b:60:06:fa:43:20:4d:18:49:10:
be:a5:31:47:82:1b:54:28:f0:b5:a9:33:27:63:2a:
8b:a3:62:d6:a2:6e:57:9b:ae:55:cc:02:46:db:14:
7d:0f:2f:b0:3b:d9:16:f4:6f:ed:12:01:1f:41:7e:
c6:d5:b0:82:51:8a:db:59:35:a4:22:5c:2f:04:50:
00:25:46:cc:db:35:b6:a6:da:7a:44:86:e3:d8:b3:
b9:53:a0:72:e0:e0:1a:4d:3d:0a:97:a4:63:43:3a:
35:f8:e7:44:a6:3f:0b:19:6f:42:3e:54:16:6a:79:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4F:E3:AE:A3:9F:38:E0:54:B1:20:75:FE:20:EA:A9:42:30:4B:9C
X509v3 Authority Key Identifier:
keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/zU_jrqOfOOBUsSB1_iDqqUIwS5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.160.0/22
IPv6:
2a0c:8880::/29
Signature Algorithm: sha256WithRSAEncryption
9e:cf:3f:a7:7c:63:20:62:42:cb:da:f3:9e:0d:7d:3e:d6:88:
6e:9c:d0:ed:4b:b2:3a:64:a5:e5:41:fe:7c:22:01:2f:9d:66:
dc:e4:9e:6e:fd:3f:13:9a:f9:4c:e1:d8:99:ba:12:40:ca:3f:
ce:7e:14:4a:0a:af:45:0e:d1:ad:c9:a3:16:38:ff:aa:c4:b6:
af:b8:c2:73:f0:8d:25:ba:30:00:3e:f0:0b:8d:c8:05:0d:73:
1a:75:65:c2:80:52:37:26:c3:63:8d:c3:70:a9:73:bc:ca:83:
ac:e9:a6:1d:9d:d4:fa:84:c0:80:81:11:00:44:0a:3e:29:1f:
19:31:ac:bb:9f:65:aa:c5:0c:4b:11:4b:bc:ab:08:67:37:03:
67:8f:21:28:bf:c1:94:8a:0b:ce:4f:c0:a9:8e:eb:66:e0:0a:
a9:30:0f:55:63:64:10:fb:a8:ad:49:50:6d:24:5f:c1:20:aa:
e4:b8:46:10:47:ea:1d:36:84:f2:ff:df:6f:a9:12:b1:af:92:
4f:0f:3a:05:8e:61:c2:0a:6b:49:82:06:4b:f6:82:19:d3:d2:
6a:b3:7c:d9:69:2f:37:65:3c:8c:da:54:07:25:56:c5:92:06:
e4:be:75:40:a2:db:97:36:d2:54:4c:9f:13:c5:7a:5a:9b:db:
a3:f1:0a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:01 2024 by rpki-client on console.sobornost.net