Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Rq1p5ZWMWJ0_Rgz8Lynabog2d2s.roa
File: Rq1p5ZWMWJ0_Rgz8Lynabog2d2s.roa (raw, json)
Hash identifier: 4Uy+47dp2lNZv+bGco9U9z7kqJqwMbHqx++smeFeBlQ=
Subject key identifier: 46:AD:69:E5:95:8C:58:9D:3F:46:0C:FC:2F:29:DA:6E:88:36:77:6B
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CE2D3398517A06071C09A57477533
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Rq1p5ZWMWJ0_Rgz8Lynabog2d2s.roa
Signing time: Mon 02 Jan 2023 03:35:59 +0000
ROA not before: Mon 02 Jan 2023 03:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44467
IP address blocks: 83.239.44.0/22 maxlen: 22
83.239.46.0/23 maxlen: 23
83.239.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e2:d3:39:85:17:a0:60:71:c0:9a:57:47:75:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46ad69e5958c589d3f460cfc2f29da6e8836776b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:10:40:15:dd:53:7e:c4:54:f6:1a:9a:e7:5e:
27:e2:dd:2e:9a:06:66:c5:a8:ce:e7:34:21:21:e6:
fd:3d:94:d4:63:bf:88:62:23:3f:98:5b:2b:17:ef:
46:43:ac:3d:1b:61:29:56:f1:4e:19:a5:4c:b8:c7:
d0:fd:82:fc:dc:04:3d:bb:0f:f3:83:c7:15:a3:8c:
ff:2f:07:da:c2:c4:4e:bc:54:a7:4d:e3:85:16:09:
f2:bc:8f:79:e1:bd:6f:5c:34:c6:e3:3c:8a:d0:6b:
07:7d:c7:35:d9:3b:74:e7:1f:83:e7:1a:ab:97:dc:
4b:b5:80:9c:2e:82:a1:78:b8:be:45:2a:fd:b6:85:
65:ed:98:a3:73:a1:20:3d:46:d1:79:0b:de:72:6a:
96:d6:50:74:9c:d1:96:01:be:8f:4b:c1:6e:2d:5a:
7d:61:56:8f:ee:74:8f:70:1f:7f:a8:41:a7:3e:fe:
b1:93:e2:0d:f1:c7:56:32:d1:35:f5:f3:f9:c5:e0:
55:85:70:d4:ee:74:14:5b:91:0e:da:45:a6:c4:4e:
05:38:20:4b:67:9a:50:bb:de:8b:cb:40:41:9c:15:
32:f9:3a:6a:06:ba:17:ca:17:72:72:9c:68:e5:d1:
d6:41:7c:29:a1:b6:3a:2e:32:0d:60:16:e4:65:86:
2e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AD:69:E5:95:8C:58:9D:3F:46:0C:FC:2F:29:DA:6E:88:36:77:6B
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Rq1p5ZWMWJ0_Rgz8Lynabog2d2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.239.44.0/22
Signature Algorithm: sha256WithRSAEncryption
61:a0:c7:2a:d7:70:6a:90:3c:1c:cf:3e:48:3e:73:73:72:fa:
4f:25:10:12:75:fe:55:b7:af:6c:4b:40:50:be:33:73:37:ee:
51:af:b9:0d:83:78:56:7f:d0:d0:a7:b8:59:fb:77:d2:c0:f3:
1b:0a:ce:b1:69:d9:7e:6b:b6:a0:35:0c:6d:2c:9e:b1:24:ea:
17:d6:1c:2f:5b:76:d3:a9:5e:ce:19:b3:5f:e3:24:18:b3:54:
1d:00:94:6f:a6:24:e1:c6:14:3a:cd:51:36:c6:04:29:ba:d1:
bd:83:fe:5e:aa:1e:07:e1:22:2d:a8:f3:ea:d3:d6:05:c2:dd:
c1:6b:b1:2b:14:60:3a:26:47:93:0d:4a:66:8d:ea:bb:1d:b5:
9a:06:5e:f2:f3:ba:98:b5:c5:7a:79:66:bd:22:af:22:da:0f:
f9:ec:e7:01:f6:6e:27:d0:0e:bf:f6:85:c4:7b:6f:b3:2a:c0:
9f:9c:1d:c5:46:58:95:ad:db:2c:58:a5:71:47:db:2e:26:b8:
e4:37:7d:52:c8:ae:45:f5:2a:1b:60:e4:4b:33:92:8a:07:8e:
be:9c:7a:30:5e:e4:3e:ed:4f:fe:0d:75:5f:98:be:19:63:1f:
16:c0:ef:5c:02:9c:47:ec:8e:4c:82:db:86:50:6c:a8:74:d9:
38:f7:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 05:01:08 2024 by rpki-client on console.sobornost.net