Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/8F2PdcjRsrkyHIdchRjbU62W2aY.roa
File: 8F2PdcjRsrkyHIdchRjbU62W2aY.roa (raw, json)
Hash identifier: fxQULamx41deGw/E3vFqr8+aZ6oBz6iBOAtshiTbzaI=
Subject key identifier: F0:5D:8F:75:C8:D1:B2:B9:32:1C:87:5C:85:18:DB:53:AD:96:D9:A6
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 0187C17E22C7D30601DF20FFB4661AD1205B
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/8F2PdcjRsrkyHIdchRjbU62W2aY.roa
Signing time: Thu 27 Apr 2023 06:54:41 +0000
ROA not before: Thu 27 Apr 2023 06:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137443
IP address blocks: 45.145.230.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:7e:22:c7:d3:06:01:df:20:ff:b4:66:1a:d1:20:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Apr 27 06:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f05d8f75c8d1b2b9321c875c8518db53ad96d9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bc:0f:47:47:27:5f:d9:60:17:24:e3:36:8c:
e1:3e:82:5e:40:01:69:ce:ab:a9:f9:0f:c9:6f:96:
dc:e4:f3:45:01:60:0a:a6:43:31:51:c0:d5:ef:4b:
20:ff:19:ba:2c:0f:2e:30:67:e9:3a:93:49:9c:f2:
8b:2f:06:45:c0:3d:f4:f1:08:d5:86:86:d3:98:c7:
33:d5:4a:a4:ef:71:ed:5a:f6:67:ac:a9:d7:b3:90:
85:6d:fe:94:53:93:d1:6a:3e:0f:fe:a0:fa:24:4e:
0f:3e:c5:54:3d:02:c1:5e:f6:43:f3:6e:a6:9c:09:
75:e3:af:a3:a1:e7:da:37:c7:58:4d:18:9e:74:8b:
26:1d:45:c7:d1:3e:1c:8f:2e:09:37:5c:cd:e1:f2:
fe:b4:79:2f:3d:89:fd:ff:0f:5f:f4:3e:bd:1e:51:
2a:64:ae:ac:99:1b:40:b1:a1:1b:02:25:11:1a:a0:
ae:94:c1:36:47:9c:c8:98:7f:e4:60:f6:db:e5:73:
b8:a5:da:2d:50:dc:74:b0:84:e4:72:f1:45:c4:4f:
6e:b3:52:d6:67:30:42:4b:a8:f7:98:6c:01:8d:4b:
3c:b2:11:66:0d:28:81:e2:d5:38:17:26:31:ee:3c:
9e:7e:1e:40:3e:23:79:e0:08:5b:bb:d6:7e:c2:ea:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5D:8F:75:C8:D1:B2:B9:32:1C:87:5C:85:18:DB:53:AD:96:D9:A6
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/8F2PdcjRsrkyHIdchRjbU62W2aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.230.0/23
Signature Algorithm: sha256WithRSAEncryption
45:6c:44:60:b3:e6:46:e7:ad:3c:e3:51:1e:58:24:09:8f:dd:
e9:c5:7a:d4:bf:46:40:83:7d:9f:46:c6:2a:3f:0f:6e:94:0f:
f9:f0:b6:be:53:b2:9b:28:14:86:6d:73:90:21:f8:6b:3a:0a:
37:04:75:bf:d8:2a:8a:a8:64:fb:10:00:9d:04:09:4c:62:03:
b3:a7:d6:d0:a0:5d:10:6d:d1:f3:1c:ab:a1:ec:0a:0b:a2:de:
da:b0:4b:56:97:37:91:c4:a9:54:03:9f:31:75:29:f6:e2:7e:
eb:d4:04:c5:75:6f:ca:f4:0b:38:ec:d8:0b:6b:a7:a3:69:d4:
0a:ad:e5:fc:e4:bb:0b:0f:9d:23:03:05:0c:7b:fc:c7:14:e4:
b4:83:57:eb:5c:f0:c8:bd:b6:23:94:65:c9:88:7c:7a:9a:b4:
ea:e3:89:07:da:f4:46:e9:3e:89:2c:57:13:6e:5a:47:e4:26:
48:97:81:07:21:c9:02:95:43:16:f9:69:77:74:f0:c9:19:c8:
ad:7e:67:5a:b7:36:7a:71:a4:55:97:6b:8f:cc:cd:b9:df:a8:
43:91:84:e4:ee:9a:b0:2a:e8:a8:82:b7:07:fa:29:55:b5:73:
10:3d:68:4b:ad:a2:d6:e6:58:19:c7:5a:58:56:16:69:80:7e:
d7:a9:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net