Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/oGx0Skz8aDxb4medZTdtX6f18_0.roa
File: oGx0Skz8aDxb4medZTdtX6f18_0.roa (raw, json)
Hash identifier: 1ARYxq+Np8hAzLHeYsQeWMiTL+NylenQSEjmzLDu+U8=
Subject key identifier: A0:6C:74:4A:4C:FC:68:3C:5B:E2:67:9D:65:37:6D:5F:A7:F5:F3:FD
Certificate issuer: /CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Certificate serial: 0185973BD5DB617E5FA9280D020CCECF6EB2
Authority key identifier: B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/oGx0Skz8aDxb4medZTdtX6f18_0.roa
Signing time: Mon 09 Jan 2023 15:52:39 +0000
ROA not before: Mon 09 Jan 2023 15:52:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202422
IP address blocks: 45.135.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:3b:d5:db:61:7e:5f:a9:28:0d:02:0c:ce:cf:6e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b08ace0eb3e2df49fdbb77726716fb65e7777964
Validity
Not Before: Jan 9 15:52:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a06c744a4cfc683c5be2679d65376d5fa7f5f3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:ca:30:3a:df:5b:ef:f3:83:ae:f1:ea:70:
9d:c5:3d:1b:60:83:9f:6f:42:72:c7:5a:a2:07:3c:
3b:52:68:5a:6e:b9:99:11:e7:9c:22:81:a4:e1:72:
e6:09:da:c9:84:35:0a:d3:38:bc:ef:89:5c:24:7d:
b2:a8:54:79:dd:94:98:a3:67:ca:91:24:98:a4:3e:
2e:93:79:35:e2:7c:95:8e:3d:f3:a0:81:71:68:49:
f2:13:24:6b:a2:94:c7:e7:1a:c0:4d:0b:e9:e2:83:
75:6f:81:b1:ec:a9:eb:ea:5e:50:1b:50:ba:ac:05:
5f:aa:68:59:1a:67:68:ce:c6:3b:82:38:fd:23:f3:
8a:f3:2a:49:12:2c:bf:6b:fd:97:8b:af:db:d6:06:
ad:18:fe:43:57:45:a6:06:1f:2b:f4:c1:be:1d:d5:
83:d8:62:71:6d:0d:98:4a:89:91:e9:da:d6:cc:1d:
97:6a:f2:25:6b:6c:be:4c:4e:e0:ce:e6:7a:eb:74:
d3:c2:ba:1e:1f:d5:f2:4d:ad:56:ba:5a:2d:cc:65:
5d:a3:43:e9:65:88:c7:fd:0a:82:f3:c5:d5:e4:84:
18:a8:d9:dd:0f:7f:c2:2e:2a:a3:bd:5d:36:7b:d4:
fd:a9:6c:5e:55:24:9c:7c:bd:13:58:d5:81:4a:25:
fa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6C:74:4A:4C:FC:68:3C:5B:E2:67:9D:65:37:6D:5F:A7:F5:F3:FD
X509v3 Authority Key Identifier:
keyid:B0:8A:CE:0E:B3:E2:DF:49:FD:BB:77:72:67:16:FB:65:E7:77:79:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sIrODrPi30n9u3dyZxb7Zed3eWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/oGx0Skz8aDxb4medZTdtX6f18_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4537dd-78b6-467e-914d-865b4cfbd4cd/1/sIrODrPi30n9u3dyZxb7Zed3eWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f3:84:5a:b3:cb:1a:35:d2:18:3f:d1:ab:d2:65:37:a3:62:
98:77:93:ec:2f:54:9d:6c:6f:cd:99:be:d6:d1:12:b6:d0:53:
7f:b8:db:da:9b:85:d5:e1:6d:f2:c8:e8:ee:e8:7b:43:cf:61:
46:9e:ec:54:49:65:e4:f0:8e:a8:aa:92:19:00:d9:62:c7:c1:
53:14:cb:7c:14:2f:fb:99:0e:69:e0:b6:94:77:96:95:10:c1:
8a:b2:a5:9b:1c:18:5e:66:98:6e:77:88:59:c7:0d:24:3c:06:
7a:65:f7:e7:14:c5:67:7b:ae:67:a5:21:77:dd:e4:86:aa:19:
63:08:4f:72:a1:d7:4b:1d:7b:93:11:52:1e:ef:a4:54:93:39:
a7:42:bd:c5:10:1a:f0:f0:e5:0e:a6:a3:2c:8c:80:fc:b6:9c:
e4:5e:95:51:3c:f0:1f:dc:82:00:45:2c:eb:f9:6d:b6:49:3b:
0d:52:a5:de:3a:6f:75:ab:dc:20:23:98:27:e8:d9:c8:19:4f:
69:1b:e4:cc:f8:3f:4f:6c:47:61:39:b2:d4:9f:4d:a0:da:f7:
91:55:a4:d4:b3:18:e2:f9:a6:44:48:83:1f:b2:93:6a:d5:6d:
3d:0f:52:ea:68:89:6d:0e:b3:94:4d:62:33:09:f1:c1:52:93:
55:e7:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:34 2023 by rpki-client on console.sobornost.net