Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/gE_ZdsjKJ7Lp6ccnVrA-o0-ciIo.roa
File: gE_ZdsjKJ7Lp6ccnVrA-o0-ciIo.roa (raw, json)
Hash identifier: w8zpQXJsIrXBUmgeQRWncgGlM7nJVr4n658Eqdu/qg0=
Subject key identifier: 80:4F:D9:76:C8:CA:27:B2:E9:E9:C7:27:56:B0:3E:A3:4F:9C:88:8A
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 018A31D110ED2C19E403D6CE76AD707DCD2F
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/gE_ZdsjKJ7Lp6ccnVrA-o0-ciIo.roa
Signing time: Sat 26 Aug 2023 12:28:19 +0000
ROA not before: Sat 26 Aug 2023 12:28:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208896
IP address blocks: 45.156.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:d1:10:ed:2c:19:e4:03:d6:ce:76:ad:70:7d:cd:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Aug 26 12:28:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=804fd976c8ca27b2e9e9c72756b03ea34f9c888a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:5b:f1:5b:2b:11:e8:b7:48:4c:5c:ee:8e:
83:fe:c1:ce:39:00:dd:d7:5f:cb:92:1d:ab:f3:aa:
a5:3f:fb:52:cf:42:93:76:fc:0d:08:84:96:08:da:
8a:30:0e:c9:00:cb:b0:71:c5:5f:4f:0f:c4:1a:6a:
de:1c:cf:7e:69:f0:61:83:56:f2:05:36:72:88:3d:
cd:bb:f9:54:c2:b9:2e:ce:43:68:ef:29:05:bd:3d:
69:2f:69:f2:59:87:a3:38:89:cd:41:10:89:08:fd:
df:b1:b9:91:3a:ab:99:c6:13:3b:a6:2a:a5:90:fe:
ca:cf:08:19:39:e6:78:9e:88:3c:c8:e2:8b:28:cd:
e1:a2:1a:94:33:d7:a6:07:b0:77:d5:80:66:32:2a:
01:14:da:74:71:1c:f9:f4:20:e5:df:1c:2f:14:f5:
ce:e9:48:9b:cd:48:c4:82:ff:7d:67:c0:78:3f:ab:
81:18:68:d4:59:e7:54:6a:d5:0e:51:c3:65:ec:c7:
ee:50:e7:f4:ca:68:f7:1a:5a:ae:e5:98:f2:7f:7f:
31:40:3c:8f:c4:86:97:cf:15:34:c4:7e:5e:82:e5:
ec:ca:42:d6:e1:47:f8:80:96:a9:1b:09:7a:0f:f3:
1f:9f:86:7c:ae:cf:90:97:24:45:9d:0d:18:85:5d:
05:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4F:D9:76:C8:CA:27:B2:E9:E9:C7:27:56:B0:3E:A3:4F:9C:88:8A
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/gE_ZdsjKJ7Lp6ccnVrA-o0-ciIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.198.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b8:43:45:27:5d:51:58:4f:83:8b:aa:9e:fb:a2:18:9f:3d:
c0:d0:16:67:39:3b:a0:2a:2e:1e:60:85:a1:34:b0:4c:69:70:
2f:d0:7d:79:e9:9e:f8:db:24:77:90:a7:4b:d7:43:93:f3:7c:
a9:1c:db:69:cd:50:cd:28:7a:29:d9:d5:04:2c:ea:7c:b6:93:
0c:58:7c:18:3d:d9:02:de:7b:f0:5f:c1:e9:84:27:7f:fc:6d:
fa:66:f2:60:2a:1e:e4:4e:c2:b1:b4:80:aa:af:31:6d:ba:d7:
c0:e4:47:e8:51:cc:d0:ef:89:23:02:7e:59:19:e4:c7:e4:23:
ad:58:8f:a8:bb:8c:5a:d0:58:70:1d:90:4e:89:5a:11:83:65:
ed:64:0d:63:e3:70:f2:f9:78:eb:b2:3f:35:53:0e:34:fe:97:
5c:d7:82:60:ed:28:0b:9c:04:13:78:62:4a:e6:25:25:e3:83:
d0:47:46:00:9d:86:b4:6d:dc:44:b3:5a:36:87:a1:15:5a:bb:
c7:88:a2:61:db:9d:d0:79:cb:49:9d:93:f3:79:97:81:1b:36:
53:6e:96:51:97:7e:09:85:27:59:e1:a2:22:75:c3:08:f7:8e:
b8:77:6d:67:d7:14:37:a9:c9:7d:38:ca:c7:33:50:76:f5:14:
80:32:ce:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:35 2023 by rpki-client on console.sobornost.net