Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/nkW5jI6y9ECmZT3p4y4AAW_bC5g.roa
File: nkW5jI6y9ECmZT3p4y4AAW_bC5g.roa (raw, json)
Hash identifier: OPHYy6b/tXV5xaisXADEpJBdeqdG7KS2pNMExPPqvqM=
Subject key identifier: 9E:45:B9:8C:8E:B2:F4:40:A6:65:3D:E9:E3:2E:00:01:6F:DB:0B:98
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 0187993FB441779BDB85A749880EC1B074BF
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/nkW5jI6y9ECmZT3p4y4AAW_bC5g.roa
Signing time: Wed 19 Apr 2023 11:21:41 +0000
ROA not before: Wed 19 Apr 2023 11:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139659
IP address blocks: 45.145.228.0/24 maxlen: 24
45.152.64.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:3f:b4:41:77:9b:db:85:a7:49:88:0e:c1:b0:74:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Apr 19 11:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e45b98c8eb2f440a6653de9e32e00016fdb0b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1f:57:11:09:dc:3c:7f:56:51:ad:4c:7d:7f:
c3:da:4e:84:da:28:cb:85:43:b9:47:25:8d:ce:f2:
22:74:da:bf:74:d8:41:37:e6:e1:14:63:8c:dc:39:
7e:93:8e:03:2a:1c:c2:35:cf:09:fe:5d:b4:35:86:
97:01:53:4c:1d:63:c9:6e:c8:64:ad:64:bd:95:4f:
46:54:2e:74:95:88:46:88:e4:a8:af:ef:21:54:ed:
dc:7d:4f:5a:26:c1:b2:b5:0d:58:05:5e:4c:45:63:
eb:13:5e:e9:51:46:8a:69:3d:63:3a:f8:b3:e6:72:
06:12:c8:c3:d5:1b:4a:e7:3b:f2:f0:07:3d:48:56:
80:8b:bf:c9:a5:7f:42:d5:51:51:2a:d9:8a:56:8c:
45:af:d5:91:66:24:be:58:a9:03:d5:26:50:7c:3b:
44:da:8b:61:15:d8:32:c5:b4:3a:46:5d:a7:53:95:
09:72:8e:67:b1:4c:6f:13:21:97:29:4a:1d:9d:87:
ae:f7:c1:68:6f:30:41:89:6f:b0:ed:6c:78:c1:ef:
b9:22:d4:8d:dd:5e:1d:4a:08:2d:3d:26:63:5f:2f:
93:67:b1:8b:13:28:f4:3e:76:e0:e0:07:92:fd:5a:
ed:d2:61:87:86:1e:cc:24:1a:20:fa:4d:e3:69:22:
53:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:45:B9:8C:8E:B2:F4:40:A6:65:3D:E9:E3:2E:00:01:6F:DB:0B:98
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/nkW5jI6y9ECmZT3p4y4AAW_bC5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.228.0/24
45.152.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:7c:c9:d1:d4:e9:25:9b:3d:61:22:21:40:cb:54:52:eb:f0:
0c:85:e0:85:a2:31:b3:db:6c:f9:ae:48:ff:5e:ae:d3:c7:13:
31:74:80:c2:4d:4b:77:0e:48:fb:ec:ca:6d:fc:28:96:30:6e:
48:55:42:cc:a9:bd:8a:ab:f1:70:6f:db:9b:b8:68:c9:b2:0d:
dd:f6:0b:c2:f3:c8:6d:99:ab:ce:85:93:84:81:8a:0c:eb:f5:
2a:f6:68:09:d4:ab:a4:9a:f6:8c:3e:58:b1:02:72:e2:36:cf:
f0:fc:47:f1:9a:18:bd:d2:49:8d:18:5a:66:ba:f9:e2:7c:c7:
46:06:04:6d:13:19:88:6e:5a:a7:90:99:4d:4d:ab:d3:27:93:
35:89:ff:e3:86:90:f1:2d:82:c0:f7:62:c7:50:1a:e0:72:a1:
34:1c:95:61:a0:8c:54:4d:d4:a8:f8:46:76:48:93:df:eb:a1:
3a:b9:19:c4:df:60:87:e5:b8:cc:8c:86:6e:40:ec:0d:ec:32:
33:89:36:fa:e2:49:e7:15:ea:01:14:6b:00:e5:45:44:0d:87:
c8:30:10:11:f1:63:86:15:fc:56:b4:af:5a:67:29:04:12:ef:
7d:c4:bd:90:03:1a:32:8f:d4:10:9a:d4:8c:6d:26:67:c2:58:
d1:ea:35:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:41 2023 by rpki-client on console.sobornost.net