Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/U3IPcf_9m_Qw7qbzaFf7wbSLfxc.roa
File: U3IPcf_9m_Qw7qbzaFf7wbSLfxc.roa (raw, json)
Hash identifier: 2xKwon6t8f3z+BBT7mxhFVTQWM1NaLRI54k0Rhbwi24=
Subject key identifier: 53:72:0F:71:FF:FD:9B:F4:30:EE:A6:F3:68:57:FB:C1:B4:8B:7F:17
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 018B95EA59428A352AB4CA74684B3E2E3BFB
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/U3IPcf_9m_Qw7qbzaFf7wbSLfxc.roa
Signing time: Fri 03 Nov 2023 16:00:45 +0000
ROA not before: Fri 03 Nov 2023 16:00:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34458
IP address blocks: 46.20.106.0/24 maxlen: 24
185.100.170.0/24 maxlen: 24
185.100.171.0/24 maxlen: 24
185.100.168.0/24 maxlen: 24
185.100.169.0/24 maxlen: 24
46.20.104.0/24 maxlen: 24
185.169.222.0/24 maxlen: 24
185.169.223.0/24 maxlen: 24
46.20.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:ea:59:42:8a:35:2a:b4:ca:74:68:4b:3e:2e:3b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Nov 3 16:00:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53720f71fffd9bf430eea6f36857fbc1b48b7f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:e0:a3:38:95:4a:a5:ff:02:09:9f:14:bb:
f2:dc:d7:86:15:d5:d0:e0:56:5f:44:fa:5c:3d:60:
08:12:56:5b:b9:4d:04:51:a5:0f:42:90:ac:ca:db:
28:4c:e6:88:da:a0:74:02:2e:d8:56:87:d1:56:67:
32:cf:e2:ea:1f:a3:5e:ee:a5:34:5c:66:84:7e:c3:
33:74:ee:56:f7:0e:50:36:f8:82:54:cc:d8:5f:49:
96:85:86:a7:14:63:05:16:61:64:b0:a6:05:38:88:
52:f1:55:33:38:7b:9a:0e:31:9a:00:e9:8f:ec:d5:
3b:7e:88:7d:71:d6:81:3d:0b:c9:6b:bb:94:10:d9:
ca:9b:95:a8:59:b6:a9:85:e6:53:75:32:7d:62:be:
72:35:9b:cc:90:35:63:82:a7:15:a9:e0:c9:b3:2b:
9e:1f:7a:9c:08:41:3a:82:e4:22:f1:82:1f:25:b7:
b7:bb:9a:e6:cb:39:85:79:ff:73:81:1d:ac:6d:06:
1a:44:38:52:66:b7:19:06:c2:09:c7:3c:07:67:35:
a0:b8:aa:7d:ed:05:68:4a:9f:49:f2:b0:ce:5f:0e:
8f:5f:11:7a:9e:f7:6c:90:16:ad:d7:47:96:e7:8f:
7f:24:64:68:f3:53:d2:94:6a:0b:4b:33:57:50:4e:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:72:0F:71:FF:FD:9B:F4:30:EE:A6:F3:68:57:FB:C1:B4:8B:7F:17
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/U3IPcf_9m_Qw7qbzaFf7wbSLfxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.101.0/24
46.20.104.0/24
46.20.106.0/24
185.100.168.0/22
185.169.222.0/23
Signature Algorithm: sha256WithRSAEncryption
25:07:a9:36:9a:76:5a:a5:3b:d0:b8:c8:29:1c:15:d8:e4:41:
52:ef:72:0d:2b:91:97:d5:8e:8f:ec:71:9a:34:ee:db:a6:30:
37:45:92:2c:3c:20:3f:8c:c4:b9:84:5f:7c:02:3c:a7:c8:5a:
92:d1:62:f3:f0:e7:2d:16:b3:54:86:a3:f6:a2:50:52:8c:14:
ba:24:26:2b:91:d6:7c:70:b1:db:58:fe:7e:48:45:83:2e:44:
1d:b1:c0:21:5a:8d:df:cd:0b:0f:b0:bb:75:75:f5:af:5d:a7:
a8:5e:87:36:38:4e:c2:a0:2d:bd:06:c4:6b:cd:ca:3e:05:1c:
ea:c0:ef:21:f8:5b:29:5b:b6:e2:e1:8b:64:64:4d:78:22:47:
04:c9:e9:e7:01:3f:4b:28:29:80:94:11:76:33:19:63:04:0a:
55:41:32:09:9e:2d:f4:93:5d:c9:da:88:7e:fb:0c:17:d2:9f:
4e:75:20:23:80:e2:83:47:c2:39:02:e4:c4:f6:b3:44:b0:74:
69:47:34:f7:3c:14:15:49:87:4e:89:e4:83:e5:99:64:bd:ae:
b7:37:f7:63:5a:b9:25:2e:08:8b:65:d3:c3:c6:94:2d:5e:62:
88:d8:d2:a9:c0:60:01:0a:ff:7d:82:5b:27:b9:0d:89:96:7e:
66:62:29:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:26 2023 by rpki-client on console.sobornost.net