Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/UnDGkunZz7qQ2BFfQckudrHRE1E.roa
File: UnDGkunZz7qQ2BFfQckudrHRE1E.roa (raw, json)
Hash identifier: rfjzreZIf8gMLFRaWuIxVZtDIQPcRQtbvlNSJ41hPhg=
Subject key identifier: 52:70:C6:92:E9:D9:CF:BA:90:D8:11:5F:41:C9:2E:76:B1:D1:13:51
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 0186C0B5BA7F644A90176B47BCD90FD3DC7B
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/UnDGkunZz7qQ2BFfQckudrHRE1E.roa
Signing time: Wed 08 Mar 2023 10:13:00 +0000
ROA not before: Wed 08 Mar 2023 10:13:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 46.244.111.0/24 maxlen: 24
46.244.110.0/24 maxlen: 24
46.244.109.0/24 maxlen: 24
46.244.108.0/24 maxlen: 24
46.244.108.0/22 maxlen: 24
46.244.115.0/24 maxlen: 24
46.244.114.0/24 maxlen: 24
46.244.114.0/23 maxlen: 24
46.244.97.0/24 maxlen: 24
46.244.19.0/24 maxlen: 24
46.244.18.0/23 maxlen: 24
46.244.18.0/24 maxlen: 24
92.240.144.0/22 maxlen: 24
92.240.151.0/24 maxlen: 24
92.240.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c0:b5:ba:7f:64:4a:90:17:6b:47:bc:d9:0f:d3:dc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Mar 8 10:13:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5270c692e9d9cfba90d8115f41c92e76b1d11351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:bd:61:52:db:3c:ff:32:ca:b5:66:a4:45:
84:5b:55:29:00:89:46:9f:46:52:9f:0d:29:15:b7:
4e:5a:55:e9:f0:10:cf:06:5a:cd:35:b9:8e:b0:7f:
c4:1a:55:cc:cb:d2:30:5a:fa:6e:ac:ee:15:1e:16:
26:c7:85:03:f4:46:14:18:3d:a3:8d:07:79:c8:d3:
3b:3d:7e:cd:d5:c0:a8:aa:6c:2a:c3:0e:38:dd:4d:
f9:c9:b0:10:10:0d:c7:bf:10:25:60:19:2d:8c:26:
81:c0:f3:e0:f1:cc:79:ed:fb:9f:e8:98:0c:f7:70:
53:db:78:2c:f4:f3:fb:5c:06:55:99:26:0e:c4:30:
3f:e6:91:35:10:3f:36:98:2a:6e:3c:13:94:dc:45:
b0:65:b5:bc:ac:0f:77:4b:36:3c:66:8e:7c:40:85:
24:5e:eb:a6:3c:6e:59:41:85:16:08:d9:66:24:35:
ea:31:dc:72:cd:f1:49:1b:70:69:47:42:97:41:fc:
e9:7f:6d:4b:e2:92:97:50:db:08:14:0c:84:f3:45:
17:4c:c1:5d:eb:06:ee:fa:d2:17:38:b2:6f:07:b6:
8c:44:cc:87:dd:5a:63:8f:b6:b4:ee:b8:72:26:f9:
20:c2:d2:ca:f5:7b:49:93:19:92:51:30:7b:d7:27:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:70:C6:92:E9:D9:CF:BA:90:D8:11:5F:41:C9:2E:76:B1:D1:13:51
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/UnDGkunZz7qQ2BFfQckudrHRE1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.244.18.0/23
46.244.97.0/24
46.244.108.0/22
46.244.114.0/23
92.240.144.0/22
92.240.149.0/24
92.240.151.0/24
Signature Algorithm: sha256WithRSAEncryption
41:85:72:00:d5:00:34:9c:c4:17:cd:6f:1f:4e:cf:91:18:49:
5b:1d:6c:04:d4:a8:69:03:c2:45:40:b4:80:04:7b:9d:54:a3:
82:41:e3:6a:6c:10:12:dd:ff:f7:6a:25:d5:b7:69:63:85:c3:
12:c6:ff:e8:27:d3:88:7a:b5:a7:11:9a:14:9e:6d:d3:f8:98:
3d:a2:b4:46:15:c5:67:4c:aa:4f:82:a1:c8:b9:79:1e:e0:c0:
88:ad:27:e5:64:14:c0:29:66:82:c0:eb:2b:bc:6c:b7:d5:72:
f4:dd:53:a7:84:92:22:36:26:a7:f3:73:58:22:c8:42:c4:1e:
0b:38:96:de:59:2c:44:53:7b:df:50:ab:98:74:e4:43:12:4f:
5d:00:3e:61:00:2f:42:91:b5:3e:d5:db:f4:d7:ab:cb:01:37:
35:66:f1:5a:56:a2:82:9b:0d:75:11:8c:07:e6:e1:88:de:3b:
a1:ec:83:d0:18:00:1c:b1:70:ac:98:cb:35:7d:00:f0:5b:17:
0a:f1:1f:71:d7:49:aa:30:51:a6:12:e0:4d:90:e9:35:28:0f:
32:e8:89:8f:30:f4:30:fc:7b:d2:d0:71:64:43:20:e6:14:36:
96:2d:bf:a9:19:5d:81:ed:4d:fd:e3:34:4f:6d:e7:44:01:52:
3a:6c:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:01 2024 by rpki-client on console.sobornost.net