Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/tpy1UEjWUdgQSglQOst40h-Efyo.roa
File: tpy1UEjWUdgQSglQOst40h-Efyo.roa (raw, json)
Hash identifier: aaVa7NpGTxHpgyLJSh7RPa/3PqpRCGUeSte6hfYDE20=
Subject key identifier: B6:9C:B5:50:48:D6:51:D8:10:4A:09:50:3A:CB:78:D2:1F:84:7F:2A
Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65
Certificate serial: 0188B3811D25391505F215BF78DDC75D71EC
Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/tpy1UEjWUdgQSglQOst40h-Efyo.roa
Signing time: Tue 13 Jun 2023 06:46:03 +0000
ROA not before: Tue 13 Jun 2023 06:46:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.20.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:81:1d:25:39:15:05:f2:15:bf:78:dd:c7:5d:71:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67499595a65aab0b53768def08091e31061e9e65
Validity
Not Before: Jun 13 06:46:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b69cb55048d651d8104a09503acb78d21f847f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:5f:9e:cd:65:2b:44:fc:2a:5a:83:2d:85:
e1:c8:09:d9:54:12:c8:93:f3:d0:39:a3:17:ac:b4:
e1:75:ba:35:44:83:b1:8c:52:3d:e4:f9:60:c1:16:
9c:b1:ae:2f:4c:d0:4b:33:f4:2e:a8:a8:42:95:b3:
03:f3:29:e0:b5:f0:39:2d:0f:1d:38:d1:64:38:5e:
8a:c2:f6:00:12:0e:05:b9:30:27:73:ab:b6:cd:69:
81:a3:2c:20:37:f3:4d:14:2e:44:29:e5:43:7b:3a:
b5:e3:87:88:11:fd:fb:81:fd:d7:92:12:5e:be:c1:
12:33:d4:09:be:92:c3:ef:63:72:06:8b:d2:28:28:
be:f7:e8:bf:df:a6:80:fb:3e:c4:ed:a5:13:93:7d:
5b:5f:a7:38:bd:14:1b:f9:26:46:b3:c4:54:fd:4e:
66:01:af:f1:98:5b:9c:24:d6:3b:22:a3:5a:b7:18:
a9:ba:c3:3e:94:00:41:51:dd:e6:48:6f:1f:05:a2:
bc:da:15:9c:64:06:bf:d9:23:75:ca:0c:7c:b8:cf:
a1:af:9c:e5:3d:3a:6b:cd:c5:c4:50:4f:fb:77:3a:
42:88:e9:99:4c:2c:c0:66:2a:91:b9:94:48:a1:a4:
f4:c7:19:5a:8d:fe:40:06:a7:ac:8d:4b:2d:51:7c:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9C:B5:50:48:D6:51:D8:10:4A:09:50:3A:CB:78:D2:1F:84:7F:2A
X509v3 Authority Key Identifier:
keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/tpy1UEjWUdgQSglQOst40h-Efyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.20.96.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f7:26:ad:cf:01:5d:c9:bc:5c:48:af:af:b0:ca:fa:6c:00:
b8:6a:9d:04:8e:fa:b9:c3:09:6a:65:e5:be:4b:61:6d:9e:fe:
49:09:d8:44:c9:34:75:c3:9c:14:03:96:cb:8d:5a:aa:b8:8e:
5c:b7:b6:3a:af:56:d6:27:31:f8:4f:56:fb:5e:7d:0d:ce:51:
42:ab:bd:b7:fd:46:b0:5e:d1:7b:0f:71:d0:a5:58:86:51:9a:
f9:f5:9e:98:b5:bc:6e:bb:8d:3f:11:54:ce:a4:95:25:85:9b:
2b:7f:52:12:be:43:c6:98:8d:b1:1f:23:4c:45:44:32:a2:9c:
fc:b6:0d:4d:57:5e:93:b7:f8:7d:9d:2b:f9:3f:d7:97:07:4f:
fb:02:95:ec:65:7a:37:12:bf:35:7d:51:e8:ab:d7:87:e7:21:
fd:bc:4a:21:3e:96:73:33:8b:ff:35:65:12:42:f7:1d:13:31:
fd:8f:27:d0:85:f9:3f:75:bb:a2:20:8b:26:cd:ab:3b:c2:ac:
f1:6d:1e:b3:5e:bc:cc:0a:8c:14:54:0a:5e:69:da:c2:b9:44:
8a:8d:2c:2c:1e:f0:30:aa:4b:d0:00:73:ae:63:97:7e:3f:7c:
77:07:ae:03:f1:52:fb:34:a5:34:32:c3:7a:0b:9a:da:53:0d:
3a:89:ba:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:26 2023 by rpki-client on console.sobornost.net