Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/TEWSPybCw2s3KUAwB3I4Jh_482c.roa
File: TEWSPybCw2s3KUAwB3I4Jh_482c.roa (raw, json)
Hash identifier: pQC/vGSN7YO0O/2JrqugfQg6jixnMvDMX9+Jd3Zeppw=
Subject key identifier: 4C:45:92:3F:26:C2:C3:6B:37:29:40:30:07:72:38:26:1F:F8:F3:67
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018917FDD4C56E127153A5695D794DF897F1
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/TEWSPybCw2s3KUAwB3I4Jh_482c.roa
Signing time: Sun 02 Jul 2023 19:04:18 +0000
ROA not before: Sun 02 Jul 2023 19:04:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.162.8.0/23 maxlen: 24
46.162.10.0/23 maxlen: 24
46.162.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:17:fd:d4:c5:6e:12:71:53:a5:69:5d:79:4d:f8:97:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Jul 2 19:04:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c45923f26c2c36b37294030077238261ff8f367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:99:71:17:93:67:10:05:2a:5e:e1:31:59:a6:
34:4b:ec:15:93:3f:ff:c3:16:c0:71:66:b2:dc:74:
67:38:37:26:13:23:10:aa:b3:8f:bb:fd:af:b9:b6:
17:27:9e:6c:a5:76:77:0d:40:75:97:3e:3c:5d:2b:
fc:77:c0:32:fe:ef:28:79:85:bd:23:54:e9:5c:a0:
b8:45:e5:fc:da:10:91:bd:16:89:a7:09:db:d5:5b:
b3:a9:5e:49:60:87:64:b1:cf:81:b7:32:28:05:e7:
1f:4c:d5:78:82:b2:de:57:9d:9b:e7:e3:75:79:ee:
36:0b:e1:35:59:f8:9d:f4:22:7d:13:65:a8:a9:48:
81:ee:e3:66:cf:03:ac:c1:dd:e1:58:e4:07:e4:59:
b1:f7:73:6d:d4:0e:fc:4c:e5:9d:5b:13:f2:c5:c3:
e0:0f:5e:8c:29:05:40:dc:69:38:17:ff:cf:6d:4c:
07:71:8f:39:1c:ed:a4:20:1d:41:50:a6:7b:53:de:
58:5d:e2:59:17:d2:a1:41:84:55:a6:88:37:53:3c:
60:19:91:d5:95:f8:96:e7:fb:c9:eb:f6:88:d6:3c:
be:93:0a:5d:7d:81:b2:ca:9c:86:78:9f:58:3a:f3:
d5:eb:fa:93:a2:48:1a:1f:91:88:02:79:8a:6a:31:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:45:92:3F:26:C2:C3:6B:37:29:40:30:07:72:38:26:1F:F8:F3:67
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/TEWSPybCw2s3KUAwB3I4Jh_482c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:fc:1e:79:45:47:76:72:28:b1:3a:2e:a8:47:30:6e:cf:c1:
bd:97:eb:19:a7:d2:98:13:f8:68:4c:b3:8d:03:2d:9c:d5:2f:
b8:7f:5a:98:d3:2d:91:6f:b3:8c:94:e2:1f:b5:b6:7d:5e:63:
10:cc:58:98:46:d2:35:47:0a:05:03:5f:65:24:c2:83:58:67:
80:20:ba:0a:28:7f:0d:df:fa:99:6e:5f:c4:a7:8a:eb:98:3e:
ed:38:a4:be:d1:c5:d1:77:42:a9:08:1a:3d:57:1f:ec:64:d0:
c8:e1:e5:eb:d6:42:a2:90:79:41:87:cf:dc:c1:cc:4c:7b:a0:
8b:f9:6d:e8:fe:9e:02:3e:8d:a5:49:f5:a4:2b:02:fa:26:84:
9e:93:a8:38:b5:c3:03:0b:55:bb:3f:f4:ea:bf:e4:84:5c:f4:
fc:3c:7e:26:16:d8:8c:e9:78:85:b7:13:9e:08:da:1a:af:3a:
eb:8e:d8:00:82:87:d7:18:8b:41:dc:f3:88:cb:81:ab:1e:5b:
9e:28:2d:29:81:e9:55:45:cb:4a:50:46:a1:86:a1:f3:bf:e1:
d2:44:9b:a4:ab:1c:35:f6:62:2a:6d:dc:b7:83:e8:43:04:2e:
66:b0:e7:ce:1c:21:da:4b:07:cc:87:9e:34:b7:bb:9e:11:28:
48:e0:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net