Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/4YqTSGVw8FqfAIiWRKPMlcZ5mFs.roa
File: 4YqTSGVw8FqfAIiWRKPMlcZ5mFs.roa (raw, json)
Hash identifier: nDHgbEVBqnS/9pKrnkrRo7GUZDskNYofmqxXKEZXJQA=
Subject key identifier: E1:8A:93:48:65:70:F0:5A:9F:00:88:96:44:A3:CC:95:C6:79:98:5B
Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial: 0185ECDFE234160ECD5057BEC5390076ABFE
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/4YqTSGVw8FqfAIiWRKPMlcZ5mFs.roa
Signing time: Thu 26 Jan 2023 06:59:33 +0000
ROA not before: Thu 26 Jan 2023 06:59:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36007
IP address blocks: 113.30.149.0/24 maxlen: 24
113.30.148.0/24 maxlen: 24
113.30.151.0/24 maxlen: 24
113.30.150.0/24 maxlen: 24
45.147.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ec:df:e2:34:16:0e:cd:50:57:be:c5:39:00:76:ab:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Validity
Not Before: Jan 26 06:59:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e18a93486570f05a9f00889644a3cc95c679985b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:17:8b:59:db:44:69:29:05:cf:a8:39:1b:
e7:b8:87:99:41:6e:a1:24:95:d9:41:15:43:eb:45:
8d:ed:39:05:50:d3:83:07:dc:93:5a:b0:b8:e4:43:
73:7c:6f:3c:79:38:a2:0f:05:db:4a:ee:f9:60:ed:
e0:d0:1b:cc:d7:29:d1:40:72:8f:87:13:1b:f2:65:
d5:d6:b7:79:48:f4:80:f4:8c:70:11:8d:b9:df:1d:
80:c8:3a:44:b5:17:9f:c6:ab:6d:95:db:de:c9:a9:
3f:37:a2:6a:7b:ae:32:01:9c:ee:22:3b:f0:ab:c5:
a6:b8:14:1c:1b:6a:88:fa:71:16:4a:d2:f2:90:44:
25:46:70:a5:2a:93:08:2e:fb:36:a9:20:df:7b:64:
58:34:81:e9:ce:13:35:a6:88:6d:0b:ca:21:4e:9b:
6b:1a:c2:6e:61:5e:36:26:09:ef:97:fa:af:5b:96:
9b:7c:1f:83:f3:76:61:a5:b8:64:92:f8:d1:72:76:
7f:49:c9:cf:f1:29:c4:a6:f6:76:93:f7:7a:5e:d2:
bc:89:ae:4d:da:82:f3:42:dc:eb:67:2a:4d:f0:78:
f5:f5:69:eb:40:af:ec:12:13:69:8a:74:15:2c:e3:
9b:0d:d4:d3:aa:5a:82:57:c0:ab:57:60:99:a2:9a:
ab:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8A:93:48:65:70:F0:5A:9F:00:88:96:44:A3:CC:95:C6:79:98:5B
X509v3 Authority Key Identifier:
keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/4YqTSGVw8FqfAIiWRKPMlcZ5mFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.251.0/24
113.30.148.0/22
Signature Algorithm: sha256WithRSAEncryption
e5:e2:a4:4d:cc:9f:42:62:6f:87:61:64:97:4f:b9:ba:96:3d:
b3:00:e7:8e:3d:74:93:ad:87:92:d0:ad:21:ba:3d:7d:d1:78:
9c:43:f3:8d:57:26:98:c0:27:d8:32:96:cc:c0:be:19:be:6b:
1d:7b:ea:6b:29:9d:9e:41:6a:29:be:26:3e:3b:7f:10:a3:20:
99:81:d0:c3:33:eb:05:ae:d8:d4:77:f7:b3:0c:cc:c7:04:83:
42:71:1b:64:36:76:1c:6a:98:de:d9:c6:92:e8:5e:03:40:44:
6e:2c:66:6f:58:f2:fc:d1:b2:99:98:28:32:54:d6:d2:88:b1:
1b:93:24:7b:fd:1d:79:59:79:10:48:46:35:ff:ba:96:67:d4:
96:68:fe:13:df:19:da:30:71:2b:ee:35:10:fa:cd:5a:a9:6a:
cd:41:cc:f4:74:ce:28:5c:cb:1d:10:77:e7:9f:6b:d7:8f:4c:
2d:b7:36:ea:f8:49:ec:1f:f5:f8:2a:17:38:c2:8e:54:ae:a3:
3b:f6:61:0c:8b:c2:e5:e7:41:30:89:2d:e1:51:b0:15:1a:09:
1d:41:0a:f5:ae:87:64:33:79:08:5f:ac:c7:d0:24:a6:ab:fc:
ae:58:70:25:3e:c2:65:d5:1f:0a:b2:1d:5b:9a:80:96:7d:cb:
47:0a:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:52 2023 by rpki-client on console.sobornost.net