Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/mNqYSpcPh5lQDGtOv12vy-fz6zc.roa
File: mNqYSpcPh5lQDGtOv12vy-fz6zc.roa (raw, json)
Hash identifier: ellwZLx3praZ/Gt17x5Lqt9PkXtFYs6hmQ+bGPvR6xI=
Subject key identifier: 98:DA:98:4A:97:0F:87:99:50:0C:6B:4E:BF:5D:AF:CB:E7:F3:EB:37
Certificate issuer: /CN=92253353ba649debee927998ba02c8614399f961
Certificate serial: 018DF42F2A8A53BBD61845887E92550348BD
Authority key identifier: 92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/mNqYSpcPh5lQDGtOv12vy-fz6zc.roa
Signing time: Thu 29 Feb 2024 09:25:48 +0000
ROA not before: Thu 29 Feb 2024 09:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 46.102.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 11:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:2f:2a:8a:53:bb:d6:18:45:88:7e:92:55:03:48:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92253353ba649debee927998ba02c8614399f961
Validity
Not Before: Feb 29 09:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98da984a970f8799500c6b4ebf5dafcbe7f3eb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:11:8d:8e:80:d6:71:10:51:85:45:77:2c:
74:24:83:e4:27:4e:43:02:8d:9b:aa:fc:3b:6e:23:
da:7f:57:32:01:5d:82:27:ed:80:e9:d8:a1:25:7d:
e1:e4:40:ec:69:4d:72:00:7e:14:03:24:d1:69:43:
17:c2:ab:41:5f:52:6f:99:fc:34:45:84:05:cf:d7:
d1:7e:fe:06:6d:eb:25:88:76:97:e6:9e:f4:fd:aa:
0d:ec:54:99:ef:2f:cf:96:77:9d:df:4c:21:b6:bf:
f1:58:fe:5a:a5:fe:4a:a8:ce:8f:60:58:30:b1:7e:
3d:0d:93:de:9a:4a:04:8f:ba:64:7e:69:35:26:2b:
1f:a3:1a:18:11:e9:95:ae:c7:5c:fd:65:0d:c7:0d:
85:13:66:72:46:c2:25:c5:40:b2:cf:99:e6:61:08:
29:ee:ef:9e:b3:04:58:c7:29:8c:e3:ea:74:ea:ac:
3c:6a:17:1b:c6:bd:7f:23:ca:b5:32:cc:ee:8c:1c:
0c:46:38:2b:08:b8:b3:31:10:eb:5d:56:75:c9:36:
87:97:92:2b:b9:52:60:34:dc:3d:ac:b6:b9:7f:8a:
7c:89:e1:26:80:9d:96:57:6d:26:08:4b:9e:52:7b:
f1:e2:36:e4:e3:4a:26:7a:84:0e:2d:a1:b4:d5:e0:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DA:98:4A:97:0F:87:99:50:0C:6B:4E:BF:5D:AF:CB:E7:F3:EB:37
X509v3 Authority Key Identifier:
keyid:92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/mNqYSpcPh5lQDGtOv12vy-fz6zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.174.0/24
Signature Algorithm: sha256WithRSAEncryption
21:17:52:c8:68:b0:07:b7:75:40:f6:9c:c0:9e:dc:cf:bb:5b:
69:76:3c:10:ee:0d:d0:86:49:af:f2:0f:90:98:32:95:93:3b:
9e:8e:f3:eb:8e:84:67:53:9f:db:a8:4e:5d:bd:e2:43:a4:1b:
dd:41:10:ee:9d:1a:b3:1b:4b:d3:7a:92:4a:69:3a:4c:2c:64:
85:67:6c:dd:08:6d:0c:23:a7:ce:6c:09:2d:eb:07:1a:fa:10:
80:d7:de:ee:f2:b1:0e:ae:1f:4c:58:58:b6:a8:26:d7:58:ea:
d6:04:b0:0e:b9:d4:15:76:d3:de:36:22:97:79:77:2c:ef:e9:
e7:38:d5:be:3b:55:fa:98:0e:43:c4:2e:97:79:7d:6a:05:f6:
99:cb:0b:38:4d:c2:5e:ed:d6:74:6f:77:28:a1:b1:23:be:29:
c0:67:52:ba:d5:a9:a4:ae:a5:4f:3c:26:28:4b:f4:cb:1d:4d:
34:e8:35:42:88:c6:f6:0f:57:4d:d4:34:55:92:29:0a:a9:27:
03:c1:3f:f3:06:0d:fc:0d:e7:72:6f:79:19:11:de:07:55:a8:
df:41:8d:7d:e3:5b:63:64:ea:46:b7:13:a9:62:07:5d:a9:7b:
da:23:a3:ff:ff:0f:28:9c:1e:dc:99:58:ca:ef:36:18:c1:e6:
7e:b1:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 17:38:20 2024 by rpki-client on console.sobornost.net