Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/qFSBECp3c-2BYjod_BPO77vLa34.roa
File: qFSBECp3c-2BYjod_BPO77vLa34.roa (raw, json)
Hash identifier: aHDIOwU4nnQeX5JJ1UxZhqK0tN/+VzBahdIouaio2Iw=
Subject key identifier: A8:54:81:10:2A:77:73:ED:81:62:3A:1D:FC:13:CE:EF:BB:CB:6B:7E
Certificate issuer: /CN=9b96da2b2bba56a019b804b7cd00e514370977a5
Certificate serial: 01880669E22C529B2D7D4E074BEE747BE2E8
Authority key identifier: 9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/qFSBECp3c-2BYjod_BPO77vLa34.roa
Signing time: Wed 10 May 2023 16:06:22 +0000
ROA not before: Wed 10 May 2023 16:06:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59829
IP address blocks: 45.133.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:06:69:e2:2c:52:9b:2d:7d:4e:07:4b:ee:74:7b:e2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b96da2b2bba56a019b804b7cd00e514370977a5
Validity
Not Before: May 10 16:06:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a85481102a7773ed81623a1dfc13ceefbbcb6b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:0b:d5:96:74:74:5f:f3:50:7c:5b:ff:ed:
25:8d:e5:c9:02:8d:9d:61:36:71:12:fb:ea:ae:4e:
99:6c:b7:ec:4f:46:1d:5e:b7:f7:9b:2e:34:56:dc:
e9:d0:ca:8e:36:bd:6a:62:ac:e9:a6:08:23:4b:15:
44:51:7a:0b:9c:58:01:85:12:de:5f:ab:30:60:44:
ab:03:3d:4c:16:77:7f:d3:13:76:4c:7a:29:d0:33:
b4:2f:ca:df:2a:f7:71:18:71:49:0d:a5:4e:ac:b7:
c3:c2:a2:2d:09:00:8e:c3:02:4a:62:47:3b:98:cf:
e3:28:4b:f6:47:44:65:db:99:3b:5c:33:22:af:f5:
92:a7:78:ee:b0:e0:df:84:dd:c3:36:57:69:fb:c1:
8e:5d:97:a6:5c:14:fc:21:09:c9:ec:07:be:8e:93:
db:3b:a9:de:d3:7e:b7:3f:40:60:77:59:27:fa:d7:
a9:9b:ad:c7:e4:cf:c2:8d:62:3a:01:3f:bf:fb:4c:
56:dd:86:d2:60:fa:7b:ab:6d:e4:fb:ac:17:6c:1e:
b0:93:63:75:a0:38:b8:70:75:2d:00:43:aa:fa:21:
58:e6:c5:5e:95:4a:98:4f:0d:c9:c7:7b:82:58:9c:
29:05:60:21:08:98:03:55:6f:d1:e4:15:0f:1a:5e:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:54:81:10:2A:77:73:ED:81:62:3A:1D:FC:13:CE:EF:BB:CB:6B:7E
X509v3 Authority Key Identifier:
keyid:9B:96:DA:2B:2B:BA:56:A0:19:B8:04:B7:CD:00:E5:14:37:09:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5baKyu6VqAZuAS3zQDlFDcJd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/qFSBECp3c-2BYjod_BPO77vLa34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/287998-c47b-4971-98f1-51e995137677/1/m5baKyu6VqAZuAS3zQDlFDcJd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:05:ac:b6:69:e2:02:6d:21:bc:fd:8b:cc:c6:26:3a:cf:1f:
aa:b3:d6:65:af:bc:c1:46:03:aa:9b:cc:69:f1:88:0b:1b:33:
af:6e:1f:dc:d1:af:77:09:9e:9c:99:46:d0:72:a0:75:13:6e:
5c:c5:ee:fe:50:4d:6f:ca:92:32:8e:7f:21:3f:d1:d4:64:0d:
75:15:24:cc:dc:e6:b6:3e:d8:a4:f8:f5:31:45:27:92:f8:81:
0a:fa:ef:80:86:cb:31:be:5f:8b:0f:7b:b6:d4:70:1f:72:bb:
29:da:42:c5:d6:1b:cc:c0:1a:5e:96:78:31:bc:c4:37:ad:da:
56:4f:fc:01:a8:f5:2d:78:ee:f8:72:d3:6a:a4:6d:6e:e3:e7:
63:e5:e0:01:fa:7b:99:1f:83:06:cd:89:34:0b:dd:52:4d:48:
f1:8d:7c:58:b5:68:55:4a:1a:ae:e9:92:60:fc:56:23:e7:17:
dc:bf:c8:08:80:01:06:66:5f:a4:c8:c6:77:7e:41:49:68:67:
4d:48:5b:40:df:4f:5e:f8:8b:be:01:dc:f3:cd:f6:b0:11:fb:
0a:58:db:ff:91:c9:ee:d9:ca:aa:2e:01:b9:9c:4a:df:5e:80:
d3:70:69:44:1a:b2:46:31:1f:af:5d:b6:9c:18:3f:04:84:1c:
42:f2:12:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:44 2024 by rpki-client on console.sobornost.net