Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/VXf-A5lWbJACDFUYngYCLhqRNko.roa
File: VXf-A5lWbJACDFUYngYCLhqRNko.roa (raw, json)
Hash identifier: 7nJ0b5MlVKdZwAa4CP7Il+8MsbtX3+FbKhlbzPKzjdg=
Subject key identifier: 55:77:FE:03:99:56:6C:90:02:0C:55:18:9E:06:02:2E:1A:91:36:4A
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 0189F84AF0A7D3EEA713CFF79860DFCCF90C
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/VXf-A5lWbJACDFUYngYCLhqRNko.roa
Signing time: Tue 15 Aug 2023 08:23:28 +0000
ROA not before: Tue 15 Aug 2023 08:23:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 176.46.137.0/24 maxlen: 24
176.46.140.0/24 maxlen: 24
176.46.143.0/24 maxlen: 24
176.46.144.0/20 maxlen: 24
31.170.55.0/24 maxlen: 24
176.46.128.0/24 maxlen: 24
176.46.131.0/24 maxlen: 24
176.46.132.0/24 maxlen: 24
94.74.187.0/24 maxlen: 24
109.203.164.0/24 maxlen: 24
109.203.166.0/24 maxlen: 24
37.49.144.0/24 maxlen: 24
94.74.140.0/24 maxlen: 24
94.74.147.0/24 maxlen: 24
94.74.158.0/24 maxlen: 24
94.74.159.0/24 maxlen: 24
94.74.164.0/24 maxlen: 24
94.74.168.0/24 maxlen: 24
94.74.169.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:4a:f0:a7:d3:ee:a7:13:cf:f7:98:60:df:cc:f9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Aug 15 08:23:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5577fe0399566c90020c55189e06022e1a91364a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3e:4a:29:25:27:7e:86:dc:dc:b4:0b:a7:e9:
11:6b:41:7e:13:e0:84:88:6b:41:b5:43:d9:ea:f9:
f1:d3:f4:f3:66:24:0b:06:d1:fb:aa:c4:98:e1:0a:
a8:75:ba:4e:93:02:94:4c:ac:ba:aa:4b:95:64:1a:
6b:db:d4:14:a7:88:89:4e:ff:89:43:ca:d6:1f:72:
17:52:04:7e:60:85:32:1e:5d:4b:ec:e2:c0:b7:87:
40:77:4e:44:cb:a6:bd:da:48:07:1e:39:48:bc:1b:
d4:a6:5c:7b:b1:4a:ed:b0:16:67:ea:6a:b8:cf:90:
e6:42:42:0e:86:e4:db:b4:2a:87:d8:e6:2a:f8:43:
47:0e:c6:c6:d3:15:2a:01:0d:fd:1c:be:95:62:38:
6c:4d:d2:35:de:b3:88:b6:68:0f:82:b2:a6:d3:e7:
ec:c5:03:65:be:ab:e8:6f:93:1f:8e:75:a4:bb:e4:
89:a1:5e:41:ca:e0:4a:7c:91:a4:94:62:2a:48:4d:
17:30:e2:d4:cb:14:3e:2a:42:3e:36:81:e5:d1:62:
af:b6:5b:5a:48:ab:ce:3a:b3:aa:98:e9:6e:16:59:
58:52:a3:9d:af:a5:01:b0:54:39:18:07:99:c5:62:
3e:c1:c0:17:a5:22:3e:f1:97:11:ec:11:f6:6c:a7:
a4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:77:FE:03:99:56:6C:90:02:0C:55:18:9E:06:02:2E:1A:91:36:4A
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/VXf-A5lWbJACDFUYngYCLhqRNko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.55.0/24
37.49.144.0/24
94.74.140.0/24
94.74.147.0/24
94.74.158.0/23
94.74.164.0/24
94.74.168.0/23
94.74.171.0/24
94.74.187.0/24
109.203.164.0/24
109.203.166.0/24
176.46.128.0/24
176.46.131.0-176.46.132.255
176.46.137.0/24
176.46.140.0/24
176.46.143.0-176.46.159.255
Signature Algorithm: sha256WithRSAEncryption
76:3b:37:ec:1d:12:64:20:fb:b0:aa:aa:57:41:a9:37:7e:b1:
64:f4:af:dc:65:74:7e:64:21:b7:c0:42:8e:43:ea:d5:f5:d8:
06:1f:4e:19:7c:ee:57:15:01:dc:84:0c:e2:66:54:06:16:03:
6e:cc:50:4b:f3:dc:c0:41:7b:d0:6f:a0:75:4c:15:ef:1b:19:
ec:e9:eb:1f:c5:a0:df:56:73:f5:f5:fd:56:5e:0d:4f:67:d5:
e2:50:27:d2:1e:29:28:21:ed:de:7e:ba:d9:3f:0c:51:50:56:
ef:6c:32:00:68:9d:38:b0:2f:d2:bf:5e:cc:38:59:d8:9c:74:
0c:33:a6:8f:88:4e:a9:10:ff:66:80:ec:ec:27:fb:63:a1:8c:
ed:f8:01:0a:2e:e2:8b:0a:20:2a:c1:80:ad:df:fa:f1:a5:2b:
d9:6e:35:d8:0d:94:aa:8b:33:b5:3f:0e:41:83:e3:9d:f3:e0:
f1:59:e8:b0:fe:45:42:8d:11:3e:03:19:04:0b:2c:24:c3:a4:
ea:82:bb:6d:1b:1a:81:d8:07:6b:5e:3f:95:34:80:c4:08:ae:
35:c6:ec:04:2a:1e:72:eb:cf:7d:3e:30:21:ea:09:15:a1:de:
56:4e:c8:f2:d1:a5:28:19:ae:6a:d1:ed:fc:b2:2a:8c:da:d6:
52:77:24:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:39 2023 by rpki-client on console.sobornost.net