Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/XGzWgNhxwBlCFeDelZiucDmKaKs.roa
File: XGzWgNhxwBlCFeDelZiucDmKaKs.roa (raw, json)
Hash identifier: v7pOXDmpAIXudSz38VzYJU903hKOGJitdyU6k/8T1IY=
Subject key identifier: 5C:6C:D6:80:D8:71:C0:19:42:15:E0:DE:95:98:AE:70:39:8A:68:AB
Certificate issuer: /CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Certificate serial: 01856BC10827C82494E28A0363DFEC734F3D
Authority key identifier: 0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/XGzWgNhxwBlCFeDelZiucDmKaKs.roa
Signing time: Sun 01 Jan 2023 05:14:50 +0000
ROA not before: Sun 01 Jan 2023 05:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34841
IP address blocks: 46.55.208.0/21 maxlen: 24
46.55.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:08:27:c8:24:94:e2:8a:03:63:df:ec:73:4f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2087b0f6716d23c8d23eb3d0392b6bf642ad4b
Validity
Not Before: Jan 1 05:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c6cd680d871c0194215e0de9598ae70398a68ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9b:4e:13:dc:ad:9b:c2:3c:6f:ad:39:94:36:
9a:e6:df:50:94:c0:f8:31:87:4e:bf:f5:88:94:4c:
00:08:0f:b3:5d:e9:06:48:eb:f9:e2:d0:ec:75:9d:
10:1b:ba:91:44:b7:14:c0:f2:29:f8:85:20:f9:70:
b0:7c:c3:c1:2f:89:4b:5e:23:7c:7b:45:1d:df:cd:
35:d4:f4:4e:58:f7:d4:9a:3e:cd:a6:a0:64:05:36:
ed:2c:ed:55:f3:14:46:cb:d8:52:2a:2a:e2:7a:de:
de:e9:46:af:1d:b3:b6:7a:37:57:e2:75:e0:22:cf:
eb:b4:64:06:20:15:7b:e4:2e:82:f1:74:07:63:92:
a2:49:23:9e:1b:18:82:ea:6b:f7:f4:7c:8b:98:89:
9a:63:d9:51:f4:96:f8:1d:a0:6c:df:92:c7:61:e3:
24:dc:3f:53:67:dd:db:d3:38:96:9f:e1:9d:78:cd:
c5:ca:ec:2c:90:29:f3:3b:11:39:92:43:02:2c:22:
63:b3:4b:13:42:f7:33:91:cd:75:12:07:d7:73:66:
15:e6:7e:2f:68:40:66:5d:ab:51:c1:a1:b0:3f:dd:
9a:af:c1:9c:71:d6:c0:cb:73:29:e6:8d:c9:6c:64:
e5:da:74:e8:44:ca:1c:db:1f:ed:5c:34:2e:09:8a:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6C:D6:80:D8:71:C0:19:42:15:E0:DE:95:98:AE:70:39:8A:68:AB
X509v3 Authority Key Identifier:
keyid:0D:20:87:B0:F6:71:6D:23:C8:D2:3E:B3:D0:39:2B:6B:F6:42:AD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/XGzWgNhxwBlCFeDelZiucDmKaKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fcb729-c288-4e15-9384-a20d2d751eb5/1/DSCHsPZxbSPI0j6z0Dkra_ZCrUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.55.208.0/21
46.55.240.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2a:b1:35:c0:c2:bc:f7:62:de:fd:f3:b1:f1:7c:67:03:dd:
e8:78:3a:24:5b:ac:31:5b:a0:31:01:f9:85:07:0b:9a:eb:ec:
6b:80:13:43:d9:89:46:fd:35:d4:48:97:b6:79:84:29:c4:31:
7d:36:c6:96:27:e5:d0:e9:d7:85:27:73:51:b6:ad:60:45:a1:
b7:89:c4:90:0c:10:6c:fe:1b:9a:b4:8c:44:e4:de:a6:73:da:
1c:0f:5a:b8:59:d0:e3:10:f3:2a:5e:ef:5b:e2:e2:0b:61:57:
ae:c5:01:e6:a3:65:07:78:30:10:d4:8e:30:18:ac:95:b0:1a:
b0:50:3d:6d:4d:c4:16:40:84:7f:72:e1:f9:a2:21:52:ab:b4:
58:a7:e2:aa:35:36:4a:9c:92:fe:ec:2b:cc:59:45:cf:da:b9:
2f:77:00:f6:12:a7:75:d1:d8:fa:c9:15:50:08:63:2f:22:5c:
b6:6b:27:89:d2:a9:60:60:79:60:d5:c1:e0:81:1a:04:df:94:
9d:04:cd:da:ee:98:37:d6:3d:39:32:b9:00:94:8f:5c:24:e5:
42:43:aa:7d:75:31:a5:f5:f9:fe:c8:e4:0e:73:f2:0a:66:c1:
d1:a7:23:22:ae:bb:df:f9:2e:6f:2d:f1:29:19:cf:0f:84:00:
0e:f2:f1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:14 2024 by rpki-client on console.sobornost.net