Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/DklkVaUSzycx1mswgKAkdCY1pGM.roa
File: DklkVaUSzycx1mswgKAkdCY1pGM.roa (raw, json)
Hash identifier: kIYw+u2abTaRGnuSKdCvGdYNLddk9D0i/h1SxQPDVWE=
Subject key identifier: 0E:49:64:55:A5:12:CF:27:31:D6:6B:30:80:A0:24:74:26:35:A4:63
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 01857230E65F95A28D0EE0822A4441DCC473
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/DklkVaUSzycx1mswgKAkdCY1pGM.roa
Signing time: Mon 02 Jan 2023 11:14:45 +0000
ROA not before: Mon 02 Jan 2023 11:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12301
IP address blocks: 77.243.208.0/20 maxlen: 20
46.31.176.0/22 maxlen: 22
46.31.182.0/24 maxlen: 24
46.31.180.0/23 maxlen: 23
185.91.143.0/24 maxlen: 24
185.91.142.0/24 maxlen: 24
185.91.141.0/24 maxlen: 24
185.91.140.0/24 maxlen: 24
2a00:df80:1::/48 maxlen: 48
2a00:df80::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:e6:5f:95:a2:8d:0e:e0:82:2a:44:41:dc:c4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Jan 2 11:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e496455a512cf2731d66b3080a024742635a463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:37:45:29:d6:80:b5:03:17:9a:d5:41:3c:bf:
15:07:fe:bb:a1:f1:01:b2:96:89:6c:b6:0f:a7:0e:
00:10:e4:d4:9b:9e:06:8b:5e:52:24:e3:f3:55:74:
25:e9:86:22:ba:93:a6:19:4e:90:eb:ae:72:9d:82:
39:5e:e4:e8:b6:da:28:de:94:32:a5:c5:a7:83:fc:
f9:03:3b:40:c1:2f:3c:b6:71:3a:49:b7:52:b9:15:
c9:ff:ce:34:3a:42:63:ad:30:e7:0b:2a:80:1a:8e:
da:67:b5:38:6a:3a:0b:30:6c:dc:97:7c:41:99:a0:
f3:d1:6c:c8:df:5b:5e:82:20:88:da:bf:76:a0:b1:
16:68:8a:10:06:52:19:b4:c3:ea:02:cf:b0:67:65:
d6:5c:dd:75:c8:f1:44:0c:e8:f3:8f:14:d3:e2:af:
82:35:e9:9d:8c:fd:cb:09:de:02:b7:2c:5a:45:24:
6a:20:99:df:12:d4:c2:be:2d:ba:2f:ff:8d:cb:1f:
04:db:39:eb:25:c0:f4:42:0a:7d:d6:cc:24:9d:a4:
37:a6:e5:63:06:02:9c:ec:9f:67:03:79:73:fc:e1:
63:6f:95:8c:11:30:04:88:de:99:51:8b:e1:2d:8c:
99:59:bd:88:78:61:18:74:ee:65:3d:f4:84:05:a9:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:49:64:55:A5:12:CF:27:31:D6:6B:30:80:A0:24:74:26:35:A4:63
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/DklkVaUSzycx1mswgKAkdCY1pGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.176.0-46.31.182.255
77.243.208.0/20
185.91.140.0/22
IPv6:
2a00:df80::/47
Signature Algorithm: sha256WithRSAEncryption
73:04:8f:0e:ef:17:0c:32:12:c5:07:ae:1b:c1:2d:21:7f:9b:
38:53:ee:4a:db:bd:22:15:71:1f:00:81:6a:b9:d0:6a:5b:dd:
e9:65:b3:cb:6b:10:67:49:74:14:2f:fc:2b:b8:b1:28:2c:0e:
5e:df:34:3f:0f:2d:b0:69:d3:39:e1:0a:a3:8f:47:04:0b:c9:
cc:dd:c0:07:96:7f:b5:98:04:90:76:93:44:35:5a:a2:53:66:
13:10:f0:7a:01:68:f9:17:b9:65:3d:31:e1:c2:2a:1e:67:2a:
08:94:53:60:f8:82:c0:a7:6a:de:aa:b2:75:59:f2:2b:8a:3b:
25:ad:57:16:d0:ac:41:e7:e6:e9:c4:ac:5b:ed:d0:b2:91:bc:
bd:37:be:6e:86:21:f3:ab:86:73:fb:70:19:64:98:45:b5:95:
73:b8:2e:df:25:39:67:66:7b:25:7b:9b:78:01:a2:da:b8:8c:
e2:8a:cd:88:78:d3:a0:ad:d5:e1:d5:a1:3a:a2:81:f1:24:31:
75:5b:e4:fa:40:ca:70:9a:a5:29:82:44:c6:d6:77:3a:fe:7f:
77:8e:a7:1a:da:d7:cd:f6:be:7b:13:60:cf:cf:9f:b9:8f:ce:
d2:82:d8:07:eb:3f:18:a6:fb:63:6b:00:30:60:8a:e2:23:1c:
5f:96:b0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 13:54:07 2023 by rpki-client on console.sobornost.net