Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/43c76a-85b6-486f-9be8-2d53e00ac794/1/dYUWpIeWzaTa0b-DLjFWzfeU4Ic.roa
File: dYUWpIeWzaTa0b-DLjFWzfeU4Ic.roa (raw, json)
Hash identifier: V8dbBXgJmEuU0ir5ttyJI6coE8MCO3rVv2/zWw364Uw=
Subject key identifier: 75:85:16:A4:87:96:CD:A4:DA:D1:BF:83:2E:31:56:CD:F7:94:E0:87
Certificate issuer: /CN=6472183e4364817f1656ef62400259b5b945e763
Certificate serial: 018736B91E9ECE8639A47EDDBFB46538DD5D
Authority key identifier: 64:72:18:3E:43:64:81:7F:16:56:EF:62:40:02:59:B5:B9:45:E7:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHIYPkNkgX8WVu9iQAJZtblF52M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/43c76a-85b6-486f-9be8-2d53e00ac794/1/dYUWpIeWzaTa0b-DLjFWzfeU4Ic.roa
Signing time: Fri 31 Mar 2023 08:11:54 +0000
ROA not before: Fri 31 Mar 2023 08:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205498
IP address blocks: 185.215.140.0/22 maxlen: 22
45.85.16.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:b9:1e:9e:ce:86:39:a4:7e:dd:bf:b4:65:38:dd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6472183e4364817f1656ef62400259b5b945e763
Validity
Not Before: Mar 31 08:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=758516a48796cda4dad1bf832e3156cdf794e087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:61:f7:29:65:e1:a6:c5:0b:79:93:41:56:
91:67:d7:2f:06:3b:ea:ff:dd:ae:6c:a3:a4:50:d1:
7b:90:88:5e:69:5e:23:c8:a9:03:59:0c:40:62:24:
c2:fc:af:62:e4:8f:da:96:bb:e4:c7:3f:04:02:17:
f6:d0:dc:1a:81:8a:8f:d4:4c:a0:b1:34:38:ef:f8:
65:5c:71:b7:7c:8d:35:16:0c:cb:f3:b8:21:4b:45:
81:7e:40:73:e9:78:57:a1:8e:e5:6f:93:fe:96:89:
39:26:2e:0e:59:9b:f3:59:62:2e:26:01:33:ed:3e:
34:55:23:39:03:89:5d:a5:14:81:f7:dd:cb:b1:82:
2a:88:f3:32:58:06:04:4b:4d:a7:2a:c2:ff:0b:2b:
8f:06:f4:43:78:01:cd:47:aa:b7:3b:74:0a:d2:bb:
a6:5a:ce:8f:e2:0f:7f:f0:76:e2:2a:a4:eb:75:19:
6f:be:43:77:e6:19:e7:73:be:b8:84:3c:4f:5c:c1:
76:e2:77:19:4d:4c:b9:2d:ea:c9:e9:66:a5:b8:8a:
ca:99:82:6a:92:12:0b:2a:df:1a:cc:2a:e7:ae:e5:
5e:2e:e7:62:de:a5:ab:9c:46:92:00:c3:64:d1:eb:
fa:c9:d7:bf:10:d2:25:7a:88:89:98:8d:31:fc:f7:
0b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:85:16:A4:87:96:CD:A4:DA:D1:BF:83:2E:31:56:CD:F7:94:E0:87
X509v3 Authority Key Identifier:
keyid:64:72:18:3E:43:64:81:7F:16:56:EF:62:40:02:59:B5:B9:45:E7:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHIYPkNkgX8WVu9iQAJZtblF52M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43c76a-85b6-486f-9be8-2d53e00ac794/1/dYUWpIeWzaTa0b-DLjFWzfeU4Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/43c76a-85b6-486f-9be8-2d53e00ac794/1/ZHIYPkNkgX8WVu9iQAJZtblF52M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.16.0/22
185.215.140.0/22
Signature Algorithm: sha256WithRSAEncryption
76:ed:08:1d:f2:0e:82:a7:9e:bd:d8:23:12:5a:a9:a9:32:b8:
a8:0f:84:fb:a2:95:21:59:76:f3:05:5a:c0:11:76:44:8a:e5:
74:ae:b9:e9:b7:00:8f:bf:e4:29:ee:a6:5b:85:e2:96:63:b0:
61:ec:bf:d2:56:75:29:5a:99:86:76:7c:d3:2b:60:61:2b:3d:
67:4f:b9:fb:b2:7a:7b:f0:a4:a4:e7:b6:2e:40:7a:c6:b5:94:
02:33:2b:95:b2:60:20:49:66:43:a3:0d:61:78:cc:9f:07:74:
18:af:c1:25:ee:08:ad:b4:e3:6c:e6:ba:df:75:13:c9:17:eb:
99:36:c3:8a:8c:51:0e:93:9d:5e:75:27:cf:61:e8:72:95:1b:
24:f3:19:cd:fc:41:8d:d9:82:7b:06:b9:95:50:4d:59:18:49:
94:7e:6f:dc:12:ac:9c:a4:ef:27:27:d0:f2:42:2d:ad:2e:bb:
1d:a5:4f:90:4e:be:c2:6b:ac:8a:ae:5a:84:9c:7b:4b:d4:2e:
88:9a:68:8f:35:b7:97:22:85:db:05:e1:16:34:76:d6:9f:a9:
2e:2c:7e:c8:53:a0:02:06:6c:a2:22:0c:15:0b:40:e4:ea:49:
45:03:8d:8e:29:57:68:02:eb:cb:00:24:97:ed:b5:66:01:a3:
54:0f:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:37 2024 by rpki-client on console.sobornost.net