Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pXx39W0jKKUZW6oohCwHOr6_fq0.roa
File: pXx39W0jKKUZW6oohCwHOr6_fq0.roa (raw, json)
Hash identifier: cylU5C5+qIoQ/DSABHCwhtwoMAvMeqBaZ/XP/U71HHw=
Subject key identifier: A5:7C:77:F5:6D:23:28:A5:19:5B:AA:28:84:2C:07:3A:BE:BF:7E:AD
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 01856B8A1745E986651ADB4DFFB26C7079B0
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pXx39W0jKKUZW6oohCwHOr6_fq0.roa
Signing time: Sun 01 Jan 2023 04:14:50 +0000
ROA not before: Sun 01 Jan 2023 04:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212956
IP address blocks: 46.229.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:17:45:e9:86:65:1a:db:4d:ff:b2:6c:70:79:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 04:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a57c77f56d2328a5195baa28842c073abebf7ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:d8:fb:93:d4:cc:bc:aa:23:ea:0d:83:94:
dc:e7:25:8a:de:9c:d1:bd:18:c8:46:8e:70:70:57:
c0:f0:ca:f7:33:cc:a9:64:2c:c5:ba:fc:ba:57:c5:
20:7d:98:c1:08:a1:95:08:33:b7:10:4f:58:f9:49:
63:41:6b:b0:13:79:cb:6d:97:bd:5c:29:1f:7d:64:
b7:2c:aa:b1:36:73:3d:46:c5:2e:91:73:b4:76:5f:
95:15:ad:b1:e6:e9:d7:5d:b3:45:91:10:69:99:6a:
2e:16:6d:b5:dd:0c:ff:85:cb:ca:04:90:d9:63:ec:
8f:62:e3:08:df:56:b2:2d:c7:d5:0e:28:96:4b:4e:
3b:86:08:82:ed:e8:e6:13:57:ce:da:b6:db:8c:c6:
4f:42:38:50:da:b2:14:41:0c:40:85:8c:7b:9d:be:
15:1c:0f:05:ea:0f:e4:04:de:bf:c8:4d:8f:11:2a:
a5:e4:b6:5e:7f:e4:9b:77:7e:d3:5d:4f:80:37:67:
49:ee:15:71:40:6d:77:97:29:95:09:c1:38:92:14:
67:bb:9d:9c:2a:6a:7f:85:cc:3b:08:70:e2:1e:eb:
0b:c9:15:10:04:00:33:d0:ee:3f:08:1e:72:c6:a0:
ec:12:ee:80:54:72:63:58:41:b4:17:9d:1a:31:0f:
2c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7C:77:F5:6D:23:28:A5:19:5B:AA:28:84:2C:07:3A:BE:BF:7E:AD
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pXx39W0jKKUZW6oohCwHOr6_fq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.63.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f6:ca:4c:d0:83:2b:f4:85:c8:82:4e:c4:58:d4:da:43:40:
7c:fa:e9:a4:65:2e:bd:9d:f0:9c:2d:aa:60:93:bf:01:70:a5:
0d:c3:9e:a1:58:9b:30:86:9a:1a:7e:eb:db:a4:11:ae:a0:6f:
ca:7f:4b:58:dc:da:ed:e2:b6:2c:8a:b8:95:5d:f9:58:ce:1f:
c0:68:11:2b:45:25:7f:f3:e8:a0:a3:28:62:43:65:6f:3f:c4:
2a:87:98:61:de:d8:13:47:75:84:74:9b:18:67:9e:78:b0:0b:
16:21:4a:72:e8:8b:d5:5a:97:9a:d5:4a:81:cc:9f:b3:27:cb:
e9:2a:8a:19:53:0c:ff:a0:4a:9f:21:aa:21:be:bd:8c:f8:29:
dd:0b:90:fc:e4:b2:de:6b:77:53:8b:49:bd:8f:a0:8c:91:7e:
5a:1c:e4:d6:20:8e:9d:ce:b4:0d:32:5c:23:37:e8:83:c3:57:
45:df:f4:b3:10:72:18:0e:ee:a0:dd:0a:47:fb:60:4d:1d:6d:
a5:f8:68:22:d2:81:f8:10:fc:6a:4b:a3:a7:db:7b:0c:be:16:
91:1a:cc:48:53:3b:55:70:e1:c1:e1:81:d2:6c:b1:93:4b:3c:
0f:90:f5:ea:1a:05:fd:7c:f9:08:28:b6:40:fa:3d:10:91:2f:
35:e0:5c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:11 2024 by rpki-client on console.sobornost.net