Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/rr0WaQZ9udssGxFORSLYf4j9Lh8.roa
File: rr0WaQZ9udssGxFORSLYf4j9Lh8.roa (raw, json)
Hash identifier: kMv1WDqN+OqpT6gNk/TeestTNrO4OfvACvJMtY6/1uc=
Subject key identifier: AE:BD:16:69:06:7D:B9:DB:2C:1B:11:4E:45:22:D8:7F:88:FD:2E:1F
Certificate issuer: /CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Certificate serial: 01857246B4999EF0B1FACEC645E4A4D4268F
Authority key identifier: C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/rr0WaQZ9udssGxFORSLYf4j9Lh8.roa
Signing time: Mon 02 Jan 2023 11:38:34 +0000
ROA not before: Mon 02 Jan 2023 11:38:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197369
IP address blocks: 46.16.40.0/21 maxlen: 21
46.16.45.0/24 maxlen: 24
46.16.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:b4:99:9e:f0:b1:fa:ce:c6:45:e4:a4:d4:26:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c88c53b477c3bfa70b61f427b47994c2d1783458
Validity
Not Before: Jan 2 11:38:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aebd1669067db9db2c1b114e4522d87f88fd2e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:9f:5c:44:f4:78:d0:59:f5:8f:28:33:89:
98:b5:e4:55:34:12:91:1d:4b:de:b2:be:b0:e4:84:
e0:14:49:d3:cc:3c:cb:e8:47:ce:77:b7:7b:4c:2a:
97:74:50:ca:7f:ee:e8:d5:37:2e:90:42:19:a2:62:
a5:9c:92:4e:94:44:14:8a:c6:af:57:98:4f:9d:02:
9d:dc:bc:68:96:e1:04:4c:df:96:c9:e6:a0:8e:8e:
68:d0:54:2a:b6:d6:82:e1:b7:c9:4a:67:72:6b:0b:
06:01:f3:7d:9c:0e:87:9e:0e:82:85:da:56:51:b7:
e3:f6:2b:d4:f9:cd:af:6d:76:48:34:1c:2e:f7:99:
d4:f5:76:a0:15:33:10:9c:b1:0f:81:47:77:55:e6:
c4:75:ac:e2:5d:47:73:96:65:9f:89:65:e0:82:a9:
b4:0c:86:42:96:9e:bc:92:1a:96:e5:97:af:c5:63:
05:9e:f5:2c:b0:5d:05:60:fd:f9:ed:a6:21:84:f3:
f5:62:68:f7:d0:b9:b8:26:c5:7b:6f:91:3a:9b:79:
42:b3:ff:6e:b6:38:7b:0e:ed:62:f5:3c:8b:8b:9f:
f4:84:fc:56:bc:ad:fd:3e:b9:d7:24:b7:bd:f7:60:
85:ec:37:7d:44:1f:c2:5e:78:01:8d:68:73:46:25:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BD:16:69:06:7D:B9:DB:2C:1B:11:4E:45:22:D8:7F:88:FD:2E:1F
X509v3 Authority Key Identifier:
keyid:C8:8C:53:B4:77:C3:BF:A7:0B:61:F4:27:B4:79:94:C2:D1:78:34:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIxTtHfDv6cLYfQntHmUwtF4NFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/rr0WaQZ9udssGxFORSLYf4j9Lh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e15cf6-6f13-4d27-9166-b064660f704f/1/yIxTtHfDv6cLYfQntHmUwtF4NFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.16.40.0/21
Signature Algorithm: sha256WithRSAEncryption
ce:2c:2c:34:ed:0d:84:0a:0c:3e:48:5c:e8:1a:81:59:a9:78:
48:18:b3:c1:c1:b6:8f:1b:3b:f0:75:ba:8c:05:eb:3e:1c:7e:
ab:8d:3d:b7:90:e5:f2:41:8d:44:b1:a1:96:55:27:af:21:56:
7c:08:38:33:79:21:ef:24:35:c1:74:e9:3b:19:9c:a3:3e:25:
8c:35:4a:62:ab:16:09:25:75:21:5f:e2:13:62:81:15:82:14:
02:cc:51:6f:a2:7f:b2:c7:72:8f:41:1f:96:c8:9b:40:5c:7a:
fe:0b:c6:33:3e:ed:65:d1:95:ad:b9:bc:f5:5f:4d:4b:30:de:
b9:7f:70:a1:e4:1a:c2:7b:fa:96:5b:c3:30:e1:9d:38:cc:d8:
0b:0b:6f:35:02:88:98:25:89:51:4d:d5:f4:25:af:f8:97:7c:
ae:1c:aa:5a:0f:c3:79:31:c6:26:45:d2:96:68:e9:6c:51:ce:
f7:e9:72:ca:59:88:c4:78:fa:d0:cd:0c:9b:ba:1e:e1:62:cd:
e0:b8:39:83:d0:94:b1:62:0a:7d:19:87:83:6f:c7:03:8d:bc:
0b:a1:01:52:f4:c1:01:d0:7f:4c:3f:b0:5e:f8:46:3f:db:b9:
23:13:bf:bd:dd:64:67:82:1c:cc:04:9b:52:1e:d3:84:f4:74:
b5:d5:78:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:15 2023 by rpki-client on console.sobornost.net