Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SudeGAPeaxi77sg26wn7TK-2F8Q.roa
File: SudeGAPeaxi77sg26wn7TK-2F8Q.roa (raw, json)
Hash identifier: OnWU1VTyCVH9Uqff3duu+WvtiVqxXHGeLaL/S6ZQpII=
Subject key identifier: 4A:E7:5E:18:03:DE:6B:18:BB:EE:C8:36:EB:09:FB:4C:AF:B6:17:C4
Certificate issuer: /CN=48f47a31172fb549c696132880c6824fb0777b55
Certificate serial: 01856E14496CDC546CD3A89045E97E97E444
Authority key identifier: 48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SudeGAPeaxi77sg26wn7TK-2F8Q.roa
Signing time: Sun 01 Jan 2023 16:05:01 +0000
ROA not before: Sun 01 Jan 2023 16:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51514
IP address blocks: 46.31.48.0/21 maxlen: 24
185.79.82.0/23 maxlen: 24
2a02:23e8::/32 maxlen: 48
2a02:23ea::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:49:6c:dc:54:6c:d3:a8:90:45:e9:7e:97:e4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48f47a31172fb549c696132880c6824fb0777b55
Validity
Not Before: Jan 1 16:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ae75e1803de6b18bbeec836eb09fb4cafb617c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cf:27:e9:7e:61:25:c8:88:c3:54:39:5f:1b:
7b:3d:5b:b2:48:c2:c4:75:2e:e8:d1:e6:07:ec:24:
ec:ea:18:f5:9d:2c:34:47:b2:b3:91:88:35:b8:25:
ac:a4:38:04:18:73:07:10:2b:8e:c6:40:7c:5b:c6:
c1:0d:8d:a6:7c:f5:07:b8:5c:c8:02:e0:44:d8:d0:
07:1c:29:d4:1f:35:70:a0:98:4c:56:d6:08:42:ef:
97:40:78:46:6d:86:0f:f1:00:67:2a:72:44:14:7a:
25:ed:d5:8a:a3:3b:47:a5:e8:9b:b5:03:bc:b8:30:
b9:a2:c1:ed:0c:fb:e1:b1:fa:f7:ab:d3:67:93:6c:
e7:89:cc:98:34:ca:16:28:96:c4:39:59:74:51:35:
00:4a:f8:39:02:93:d3:d1:7b:32:db:51:73:d8:90:
d9:8d:b2:79:aa:8c:cb:4f:41:d8:d8:72:0b:29:36:
26:e1:af:b4:8a:82:5b:03:0c:2c:30:da:34:a3:78:
73:74:31:81:ac:7d:21:6b:ba:cb:d6:a3:cb:ba:62:
17:ad:d7:82:fc:75:dc:43:a8:6b:2c:11:20:7e:3b:
66:86:90:e2:7e:34:2f:8c:b5:3c:66:e2:db:89:a3:
49:86:cb:81:88:f8:f2:f8:80:86:8b:54:d4:d8:56:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E7:5E:18:03:DE:6B:18:BB:EE:C8:36:EB:09:FB:4C:AF:B6:17:C4
X509v3 Authority Key Identifier:
keyid:48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SudeGAPeaxi77sg26wn7TK-2F8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.48.0/21
185.79.82.0/23
IPv6:
2a02:23e8::/32
2a02:23ea::/32
Signature Algorithm: sha256WithRSAEncryption
8a:23:63:1c:50:7f:b7:4f:8a:98:ad:08:b8:9b:8c:8b:0f:8a:
af:63:b6:ac:f2:16:4c:31:15:ee:ec:9f:d5:77:06:16:af:b3:
5d:29:4c:fc:cb:1b:b7:66:b0:c1:fb:7d:01:b8:73:9d:10:30:
30:7c:84:d8:c4:5e:60:26:04:d0:f8:dd:27:f6:d9:94:5d:a7:
3d:bb:d8:f1:3d:57:d8:93:96:a2:62:51:34:2f:d4:ab:3b:1e:
7c:f6:3d:58:24:4c:f9:87:3d:da:c7:ac:12:61:d0:10:58:b8:
14:ac:f8:b3:2b:7e:db:9c:9f:b1:03:ba:40:62:1e:8b:0c:ac:
16:a1:d7:4f:c1:c6:15:bf:26:af:ca:3a:7f:24:5d:9b:eb:57:
7d:2a:90:b6:4b:7e:a5:d8:87:fb:0e:9b:07:96:7e:c1:63:88:
04:44:5f:4e:3f:33:66:fc:7a:a6:3d:13:8e:89:4f:54:cb:79:
1f:d4:df:26:1b:e2:80:52:f7:da:db:fc:bd:9e:f1:2b:7d:b8:
78:87:3a:5d:f0:9c:2b:32:43:d1:c1:84:ff:91:24:9e:f1:c7:
11:0e:dd:63:0b:8e:8a:d2:ed:7c:79:ae:ff:87:90:38:bc:a4:
91:c0:86:0f:23:e5:c4:1a:c1:37:bf:4f:6f:1c:54:96:66:76:
64:53:94:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:16:02 2024 by rpki-client on console.sobornost.net