Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/HhFUNOe-npbWbzsmuoXUP2tGNQQ.roa
File: HhFUNOe-npbWbzsmuoXUP2tGNQQ.roa (raw, json)
Hash identifier: /aFGUivkJSKK3vE07A/4JvPSFG9MoDmE1vVYacsyTc4=
Subject key identifier: 1E:11:54:34:E7:BE:9E:96:D6:6F:3B:26:BA:85:D4:3F:6B:46:35:04
Certificate issuer: /CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Certificate serial: 01856C53A46E61937D99353D03191C6955E5
Authority key identifier: A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/HhFUNOe-npbWbzsmuoXUP2tGNQQ.roa
Signing time: Sun 01 Jan 2023 07:54:58 +0000
ROA not before: Sun 01 Jan 2023 07:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208414
IP address blocks: 45.138.104.0/24 maxlen: 29
45.138.105.0/24 maxlen: 24
45.138.107.0/24 maxlen: 24
45.138.106.0/24 maxlen: 24
2a0e:acc0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:a4:6e:61:93:7d:99:35:3d:03:19:1c:69:55:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b9df7e98f6f39fe2ba4022da277d2819828021
Validity
Not Before: Jan 1 07:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e115434e7be9e96d66f3b26ba85d43f6b463504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:77:97:76:4c:c1:13:07:22:31:f4:0d:0e:
e8:3d:bb:73:fc:fb:13:2e:51:ad:cf:0f:e7:02:2a:
b4:22:5f:42:65:22:a8:01:0e:7f:68:9d:6f:3d:c6:
7b:24:0c:4f:af:bf:59:ab:42:4f:8d:db:6f:57:15:
43:67:b5:2f:36:60:8f:e7:06:43:08:db:ff:3e:1f:
6a:b1:74:66:77:e9:f2:18:40:91:43:ba:ae:0b:b7:
44:c2:0f:4b:3e:9f:a4:45:66:34:a4:2c:61:74:a5:
66:4f:54:ad:49:5a:e7:dd:e9:08:4e:37:f6:41:ea:
d9:fa:81:b9:26:3a:92:a9:a1:e2:c2:ca:95:21:7c:
45:b2:5e:4c:80:3d:ce:db:36:4c:14:42:c4:56:68:
b0:26:4f:e0:f3:45:91:d8:22:1b:50:8a:b3:15:db:
73:65:21:64:4a:5c:bc:39:8d:1d:f5:4e:bb:2f:b7:
87:d1:3e:1d:4c:b9:33:4b:2d:55:f2:6b:0c:00:58:
d0:5d:71:9d:f7:03:e7:2f:3e:3d:55:92:ca:79:1b:
7b:9d:26:fc:fa:25:79:1c:f7:08:9d:3e:26:15:81:
cd:81:3b:6b:30:dc:e7:d0:57:09:e1:49:b2:b7:59:
f8:22:f6:b3:d3:ad:e8:9a:3a:f2:4a:50:2a:e5:52:
96:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:11:54:34:E7:BE:9E:96:D6:6F:3B:26:BA:85:D4:3F:6B:46:35:04
X509v3 Authority Key Identifier:
keyid:A5:B9:DF:7E:98:F6:F3:9F:E2:BA:40:22:DA:27:7D:28:19:82:80:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbnffpj285_iukAi2id9KBmCgCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/HhFUNOe-npbWbzsmuoXUP2tGNQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/973047-8914-41c6-a1e0-0ac7b7ede42b/1/pbnffpj285_iukAi2id9KBmCgCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.104.0/22
IPv6:
2a0e:acc0::/29
Signature Algorithm: sha256WithRSAEncryption
94:b1:5c:bc:f4:13:a5:b6:41:e8:db:b3:02:90:70:90:ac:79:
70:73:7a:65:a4:c7:db:7e:2b:2c:e0:3c:b0:ba:56:32:fa:6b:
ee:fd:dd:51:ea:56:20:49:e2:88:ff:e6:68:f3:1a:54:25:9d:
a2:9a:e4:b0:99:8a:e5:f2:ca:07:8d:e5:e6:7a:91:f2:32:e0:
d5:59:5d:7d:98:cc:c4:ec:ad:fd:02:9a:94:73:2a:d8:da:0d:
4d:da:51:ae:8a:82:98:f1:64:7f:4b:e8:c8:02:f3:9f:7c:a1:
dd:82:32:ec:fd:10:2f:5d:ca:22:fe:f3:b8:67:61:72:6d:78:
af:81:0c:7b:e4:a2:a6:48:e0:9c:78:05:ed:30:1a:5c:65:b8:
82:3f:39:38:8b:d7:7b:58:b7:44:9f:7a:15:ee:a5:ee:29:c3:
67:86:03:16:04:59:31:2b:3c:66:ae:84:92:5a:a1:40:0b:6a:
43:d7:d7:dd:0b:58:84:47:56:d7:91:a5:d2:5d:f0:a2:08:f3:
3e:6c:b2:2c:ec:f2:89:61:2c:76:b2:2d:ec:2b:f8:7e:f2:76:
8f:ca:18:87:ea:35:36:a7:4b:de:04:f4:76:aa:27:46:bd:3c:
65:74:28:53:5f:a3:18:79:95:69:92:70:6f:5a:a9:54:6b:21:
f6:d6:90:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:36 2023 by rpki-client on console.sobornost.net