Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/3-KezPN_1yTPB7xW1C7S3DAiRv8.roa
File: 3-KezPN_1yTPB7xW1C7S3DAiRv8.roa (raw, json)
Hash identifier: m3NW0Fq2TQtOE/uYWQa1V15wxVcC7eLf56aytwzmtFs=
Subject key identifier: DF:E2:9E:CC:F3:7F:D7:24:CF:07:BC:56:D4:2E:D2:DC:30:22:46:FF
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 01856B8A120E7CFA8CE0FF881BC726DA04DB
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/3-KezPN_1yTPB7xW1C7S3DAiRv8.roa
Signing time: Sun 01 Jan 2023 04:14:48 +0000
ROA not before: Sun 01 Jan 2023 04:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204294
IP address blocks: 46.229.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:12:0e:7c:fa:8c:e0:ff:88:1b:c7:26:da:04:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 04:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfe29eccf37fd724cf07bc56d42ed2dc302246ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:8a:0f:19:d2:ed:65:4a:62:f0:f1:fb:42:
54:75:cc:b0:f5:d7:2c:3a:6d:44:6a:ee:08:fc:f8:
ae:64:3a:34:4e:fe:00:ec:29:86:2a:54:07:96:72:
09:70:bd:1e:ee:df:ae:89:1a:44:ed:fb:cd:00:44:
73:c9:8e:be:2c:24:e9:9c:41:2e:24:74:6a:9f:51:
d6:82:32:cf:0c:a0:7f:93:d2:a5:16:d9:7a:a1:45:
9f:89:f5:34:2f:15:23:c7:af:4d:87:eb:e7:b8:dc:
15:9c:c6:0f:06:57:b4:16:ba:9d:bf:32:a4:a2:bc:
b7:2c:be:14:24:70:03:14:0e:68:a0:a6:1c:9f:ff:
28:bd:54:d9:04:ac:1c:25:a5:6a:46:45:1a:9f:61:
22:84:ad:c1:42:17:a5:ad:41:4a:0d:1a:42:5b:7a:
4e:c5:66:69:9a:d7:6e:04:6f:30:04:8b:9c:1b:91:
c2:56:0b:bf:8f:8d:02:07:0a:72:ff:27:c3:53:f4:
ad:e4:cb:79:71:b1:56:78:54:cc:7c:44:62:cc:16:
e3:a6:52:3d:6e:3d:95:f8:29:a1:ce:e5:a6:81:f4:
ee:ee:b7:1d:bf:f1:41:25:5c:97:1d:81:db:dd:9f:
74:3f:69:f1:1d:d5:88:3c:d9:11:f0:05:70:cf:a0:
6c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E2:9E:CC:F3:7F:D7:24:CF:07:BC:56:D4:2E:D2:DC:30:22:46:FF
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/3-KezPN_1yTPB7xW1C7S3DAiRv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.57.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:49:73:e2:d8:6e:fa:a2:d8:45:e4:33:6e:44:16:f6:50:ee:
5b:44:6b:0c:2e:52:0a:77:a4:7f:05:a1:49:2f:61:e9:ff:6a:
e5:ad:c4:51:b0:de:56:4c:f8:f5:8c:44:28:38:ce:f6:24:03:
95:fa:e2:83:66:5f:0d:c9:ca:50:7b:42:1c:23:c6:23:a0:54:
d5:e0:78:28:08:d9:11:2c:b1:24:c8:c6:59:07:9b:1d:23:0f:
0d:cf:56:4f:52:e8:bc:bd:29:6b:0c:39:e0:51:ae:79:b4:9a:
81:09:3a:c5:00:31:30:4a:c9:a1:80:bc:9c:82:2d:0c:01:cf:
9e:15:e9:c7:f4:1d:8e:3b:46:be:40:13:12:42:15:25:67:09:
5f:01:13:b6:30:c6:db:c5:c0:7c:11:41:41:eb:18:46:23:57:
8a:6f:c3:21:c0:4b:43:4d:b5:ec:c3:4f:4b:11:ce:89:77:86:
2f:29:c2:59:e7:83:a5:32:9d:c6:07:3d:ae:22:63:21:09:29:
f1:2d:cd:56:b9:e2:49:64:d1:b6:40:10:4a:e3:85:23:1e:71:
e3:c4:d5:ac:49:f5:3c:e9:b8:89:17:04:cd:59:c8:36:ea:72:
23:75:4a:e7:fe:7c:6c:66:85:ad:37:e8:29:5b:69:d7:65:bf:
a1:30:fa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:11 2024 by rpki-client on console.sobornost.net