Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/TZSErTXm4bvM-WhZFYChTHUCReg.roa
File: TZSErTXm4bvM-WhZFYChTHUCReg.roa (raw, json)
Hash identifier: +Ex3nALLU+UoK70/zV5msKIHfzS7uiR4K8rEjwl3TN8=
Subject key identifier: 4D:94:84:AD:35:E6:E1:BB:CC:F9:68:59:15:80:A1:4C:75:02:45:E8
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018CCE971B3D63738320E5B0F60920B9DABA
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/TZSErTXm4bvM-WhZFYChTHUCReg.roa
Signing time: Wed 03 Jan 2024 09:10:58 +0000
ROA not before: Wed 03 Jan 2024 09:10:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48449
IP address blocks: 185.160.195.0/24 maxlen: 24
185.160.194.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.169.221.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jan 2024 23:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ce:97:1b:3d:63:73:83:20:e5:b0:f6:09:20:b9:da:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jan 3 09:10:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d9484ad35e6e1bbccf968591580a14c750245e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:40:06:92:9c:26:cf:cb:50:c9:e4:d2:4e:
49:0c:d3:25:bb:ac:ee:e3:45:86:20:ea:59:3c:44:
d3:97:79:83:13:00:15:7e:a9:66:93:f4:0c:d5:b4:
f1:b0:6b:0b:20:be:58:aa:7c:6b:66:2d:a2:58:90:
38:2c:27:14:60:1a:3a:6c:b0:8e:a8:1f:a8:b2:b2:
32:c1:14:c7:77:53:1b:a7:a2:17:2d:e7:ac:d3:3f:
97:49:8a:fa:58:f5:c8:5c:c7:77:c3:e9:32:dc:c4:
43:28:77:e1:6b:29:6a:f4:06:71:ff:fe:3c:79:6a:
a3:f0:46:19:58:20:50:77:ee:35:db:38:f8:1e:e0:
e0:81:ea:af:6c:60:0f:b7:fd:d5:f1:86:d3:14:1b:
42:f5:d3:76:8d:20:f6:90:ce:28:4a:83:bc:7d:8e:
f6:f8:06:37:92:44:57:fc:64:ef:84:09:35:39:17:
b3:df:48:9a:02:3e:d9:a9:fe:f9:a6:3e:a2:aa:85:
cd:70:73:93:40:5f:07:b9:83:76:21:38:71:32:2e:
7d:7b:ee:0d:90:f4:b0:fb:63:5b:21:af:4e:f3:74:
8c:ed:fc:f7:08:0d:24:ef:7c:7d:75:46:71:5e:6e:
de:93:a3:3e:fe:a6:c7:dd:69:a0:21:fc:41:79:e8:
61:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:94:84:AD:35:E6:E1:BB:CC:F9:68:59:15:80:A1:4C:75:02:45:E8
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/TZSErTXm4bvM-WhZFYChTHUCReg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.104.0/24
185.100.171.0/24
185.160.194.0/23
185.169.221.0-185.169.223.255
Signature Algorithm: sha256WithRSAEncryption
2e:bb:57:e2:d0:bc:d3:b7:e9:1f:54:d0:7a:b4:2d:d3:0a:14:
b8:fd:00:6a:cf:95:25:fa:a7:bf:ee:ae:9b:78:eb:97:60:88:
23:1f:af:77:ab:d5:92:4d:9e:1b:07:cd:0b:62:dd:b8:1e:c9:
2f:74:d8:3c:45:b3:74:c1:e3:8e:6e:f1:5b:3a:32:6f:6a:af:
77:b7:75:7b:18:de:bf:95:de:67:16:c4:e3:23:89:10:29:73:
82:42:c4:81:04:cd:84:51:9a:40:d0:6c:3e:6b:86:34:79:43:
55:ef:2a:59:a4:5a:1c:06:89:24:31:ae:25:68:2d:be:db:bf:
21:10:df:45:2d:2b:54:26:c1:76:7c:86:af:6c:bc:fa:fc:66:
7a:d1:56:06:02:ae:92:8c:6c:a5:06:80:38:79:a9:aa:fa:eb:
25:60:17:24:8a:dc:1d:38:fd:b6:c2:d1:ff:93:65:35:10:e9:
e0:d3:58:7a:2d:98:b4:5c:13:11:e8:90:81:d6:5c:ad:35:fd:
94:c9:20:c1:2b:d7:99:b2:3b:b0:a9:a6:79:f0:f1:c9:4d:1d:
12:b2:e7:d8:38:5c:99:01:59:d9:f9:a8:8c:74:1f:20:9f:2a:
d7:33:60:2e:55:b1:08:29:d3:df:38:31:dc:c2:48:4f:b3:2f:
cf:13:e2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:59:24 2024 by rpki-client on console.sobornost.net