Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/QLZy18D8g1c_zyZ9fyr9iCkf1JM.roa
File: QLZy18D8g1c_zyZ9fyr9iCkf1JM.roa (raw, json)
Hash identifier: RVTq0lJhi33ZOFx8ml0ql8ZPeCoy6b0KubaaOdMKQzI=
Subject key identifier: 40:B6:72:D7:C0:FC:83:57:3F:CF:26:7D:7F:2A:FD:88:29:1F:D4:93
Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial: 0185728C7B71122B7A40F15FD137E6D06775
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/QLZy18D8g1c_zyZ9fyr9iCkf1JM.roa
Signing time: Mon 02 Jan 2023 12:54:47 +0000
ROA not before: Mon 02 Jan 2023 12:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212523
IP address blocks: 46.22.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:7b:71:12:2b:7a:40:f1:5f:d1:37:e6:d0:67:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Validity
Not Before: Jan 2 12:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40b672d7c0fc83573fcf267d7f2afd88291fd493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a3:af:88:51:01:07:5e:c4:58:72:70:3c:b3:
1a:be:10:4e:89:78:cf:e3:d0:ed:7d:aa:39:9d:66:
bc:99:39:a7:6d:e7:8b:b7:34:8c:45:ab:4c:de:e0:
75:c7:dd:8d:d8:70:44:1d:c6:85:68:55:2a:6c:ed:
30:c0:27:bb:07:b4:93:e3:3e:60:d7:15:2d:a9:6b:
e9:99:3e:cb:f3:2f:3e:a8:db:91:99:85:7d:05:41:
2c:34:98:ad:05:3f:13:34:9b:29:f3:2d:0f:79:d5:
13:b6:13:bd:21:d0:5b:49:31:b1:95:4a:54:48:c6:
26:84:1c:09:1b:fa:69:ba:1e:bb:b0:68:ee:19:2b:
fb:c6:4f:ee:82:5e:23:f3:16:41:6f:77:3b:71:59:
38:10:19:04:ab:67:43:71:47:71:dd:8c:37:ce:e8:
41:32:14:99:27:f0:d4:75:fb:68:64:db:15:70:b2:
7b:3e:01:de:98:f9:69:0e:c3:04:46:81:4e:6b:a6:
a5:07:2f:8c:d5:63:3f:01:bc:b7:15:0c:93:6c:93:
bf:0d:fe:25:d3:9f:c2:38:b5:de:4e:4a:02:7a:8b:
de:cb:f9:a0:1e:53:07:5a:5c:4a:47:2a:e0:91:ee:
62:72:a4:82:97:a4:26:97:4c:1f:44:f8:12:f1:87:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B6:72:D7:C0:FC:83:57:3F:CF:26:7D:7F:2A:FD:88:29:1F:D4:93
X509v3 Authority Key Identifier:
keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/QLZy18D8g1c_zyZ9fyr9iCkf1JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.162.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ff:cf:8d:e9:74:82:cb:16:89:9d:ac:ef:5d:70:f1:e1:07:
54:83:09:b4:47:3b:6c:c7:71:74:7c:61:52:e8:3f:1b:53:d7:
ee:38:52:89:ed:56:e0:25:6c:86:ad:c3:c2:62:98:06:16:cc:
54:26:6d:e5:aa:f0:3a:9f:3f:a8:0a:f1:5d:bd:7b:76:ba:1e:
79:24:6a:1e:b1:65:95:5a:d6:74:16:46:97:31:b2:eb:42:51:
c6:d9:2d:65:02:af:8e:c9:ac:26:5a:af:01:aa:2d:1c:89:12:
30:ee:36:a7:e8:7c:85:4b:11:10:27:a3:7b:da:3a:72:d6:1f:
a8:d3:b9:55:83:af:db:e7:9c:a3:94:f0:91:dd:72:32:92:9c:
2e:21:c3:d4:e3:b9:7e:02:06:67:2a:8f:65:bf:00:ec:80:db:
ca:63:d2:ed:00:4d:da:1a:97:61:1c:f9:4e:0b:68:83:f0:e7:
f4:f2:85:d9:7a:de:9c:df:a6:62:c1:71:f1:4c:87:aa:9f:7c:
43:74:21:e9:ca:bd:a0:39:3f:82:03:b0:11:bf:3e:58:28:9b:
73:5c:50:f2:26:3b:3b:56:34:eb:7d:4a:01:29:3e:06:9d:b9:
18:c8:7b:b6:50:f9:b5:7d:9b:58:43:65:76:d8:d1:04:e5:eb:
df:f8:8a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:27 2024 by rpki-client on console.sobornost.net