Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/jUTiWvx-EavHOvxcKjohvOIFR_I.roa
File: jUTiWvx-EavHOvxcKjohvOIFR_I.roa (raw, json)
Hash identifier: PSNpCwCH9ID0WabCHOtH4whz019YBsPVfYz8J6kV0Uk=
Subject key identifier: 8D:44:E2:5A:FC:7E:11:AB:C7:3A:FC:5C:2A:3A:21:BC:E2:05:47:F2
Certificate issuer: /CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Certificate serial: 018C624A1A74D1129F24902D923DE8831122
Authority key identifier: B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/jUTiWvx-EavHOvxcKjohvOIFR_I.roa
Signing time: Wed 13 Dec 2023 08:27:52 +0000
ROA not before: Wed 13 Dec 2023 08:27:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199524
IP address blocks: 45.135.231.0/24 maxlen: 24
45.135.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:4a:1a:74:d1:12:9f:24:90:2d:92:3d:e8:83:11:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Validity
Not Before: Dec 13 08:27:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d44e25afc7e11abc73afc5c2a3a21bce20547f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:bb:42:bb:fe:cf:c5:a8:9f:4d:f5:25:09:
c3:69:e4:dc:6b:a6:30:26:5b:13:df:c8:18:6d:f1:
a5:13:d6:44:b3:cb:d7:81:77:f0:75:aa:2b:21:7c:
80:a9:7f:2f:13:4c:48:51:37:3f:ae:4e:b5:11:79:
94:57:fc:16:df:cc:b8:0b:01:fe:eb:f6:08:50:d6:
f0:a6:2f:18:4d:c3:eb:9b:7f:a1:fd:25:1b:7b:63:
67:f7:d2:d5:98:5e:fe:e8:35:d5:ca:89:0c:76:72:
34:00:eb:ce:1d:a8:8d:40:65:04:70:56:a8:fc:48:
dd:8c:f6:cf:35:70:c7:09:4a:55:ca:e7:d9:b3:3e:
8f:94:bd:9f:be:bd:73:fb:cd:c6:2f:62:cd:bb:f6:
7c:67:67:7f:51:98:4c:ab:cb:c3:e1:5e:b0:d5:61:
bf:94:c3:16:b9:3e:76:c1:42:83:43:b2:e7:fb:03:
95:80:4b:1f:d2:cd:e1:68:3e:83:60:f3:3e:14:9b:
f3:96:c7:ac:aa:ba:7b:b7:81:43:af:86:43:45:38:
11:b1:02:ce:33:9b:87:7f:39:4d:36:08:cb:19:75:
1f:a9:44:7b:96:42:8b:ea:77:d5:31:7a:a3:5c:01:
b6:f7:45:41:9b:a9:50:8c:fd:b2:3e:65:09:5c:bb:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:44:E2:5A:FC:7E:11:AB:C7:3A:FC:5C:2A:3A:21:BC:E2:05:47:F2
X509v3 Authority Key Identifier:
keyid:B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/jUTiWvx-EavHOvxcKjohvOIFR_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.228.0/24
45.135.231.0/24
Signature Algorithm: sha256WithRSAEncryption
10:7b:2f:67:e0:44:8f:ca:04:13:b7:a2:ae:8a:3c:97:3d:85:
f2:13:b6:61:68:55:a3:6b:8b:a0:f0:df:92:ee:d6:b3:d0:29:
79:dc:ef:d4:24:63:9b:a9:db:b8:5c:43:a0:25:aa:de:60:4b:
d3:c0:6c:76:0c:3c:70:fc:f0:a5:cc:4b:76:ab:46:20:d6:09:
a5:26:e8:94:95:9f:08:0b:a4:e1:9e:38:c1:20:dc:3a:aa:3d:
0f:ac:52:aa:70:04:9c:19:5f:5a:87:72:9f:8b:5e:ff:6a:57:
ed:ae:53:96:96:06:a5:4c:5f:6b:2e:8d:25:27:e4:0d:f6:f0:
4e:19:a2:38:4f:55:98:55:59:e6:2f:d2:8b:88:07:f1:a9:f9:
d4:54:22:a2:98:70:83:49:81:db:ec:c0:93:28:5c:04:8e:25:
b4:a8:e8:1d:34:0a:58:34:92:18:df:00:88:5a:73:4f:ec:63:
50:56:7e:28:35:de:8f:6a:30:66:01:6d:61:d4:a7:06:a2:50:
69:c3:4c:05:21:bc:4a:61:f8:a5:b6:e1:80:c1:37:60:28:fe:
3a:2a:e7:01:1e:d0:bb:de:a5:3a:ef:3c:c1:b9:9a:a1:27:e6:
1e:00:91:36:62:6a:8d:a8:5a:a3:0f:70:cc:ab:fa:9b:86:42:
b5:d7:81:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:51 2024 by rpki-client on console.sobornost.net