Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/xWv1m0ev20LNRcOQdSGn7cxpvH4.roa
File: xWv1m0ev20LNRcOQdSGn7cxpvH4.roa (raw, json)
Hash identifier: eCjQdvjc5Lj+e39/djv1rV45uww3k9R79pNUR7ZH7is=
Subject key identifier: C5:6B:F5:9B:47:AF:DB:42:CD:45:C3:90:75:21:A7:ED:CC:69:BC:7E
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 018618849D89FE46387B5317DC204A0C93F1
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/xWv1m0ev20LNRcOQdSGn7cxpvH4.roa
Signing time: Fri 03 Feb 2023 18:23:09 +0000
ROA not before: Fri 03 Feb 2023 18:23:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13347
IP address blocks: 46.162.32.0/22 maxlen: 22
46.162.36.0/24 maxlen: 24
46.162.38.0/23 maxlen: 23
46.162.40.0/22 maxlen: 22
46.162.44.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:18:84:9d:89:fe:46:38:7b:53:17:dc:20:4a:0c:93:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Feb 3 18:23:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c56bf59b47afdb42cd45c3907521a7edcc69bc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:30:c2:68:c2:63:bb:d9:61:fe:47:1f:a6:29:
ea:d5:8f:89:91:ce:fd:21:38:26:3d:ba:f5:0a:3d:
ee:3d:ba:d1:11:eb:34:07:5f:a1:de:21:5d:df:98:
a7:6d:be:cc:99:a3:89:31:e6:a0:58:a7:fe:af:b7:
be:cd:6f:6b:57:1d:ab:ee:22:51:d1:2f:44:be:ac:
45:de:3d:bc:8a:39:75:c8:6c:12:bc:cf:59:bd:35:
3d:6f:fb:27:66:a4:88:5a:59:f7:04:c8:83:34:4a:
4f:85:0d:f0:ad:1e:fb:a6:c9:68:38:3c:0e:e8:2f:
ec:f3:23:b9:14:ab:e0:67:58:2b:1e:bf:ec:9a:b5:
41:dc:19:70:4a:41:0d:31:7f:93:c1:ac:72:11:aa:
ff:f9:fc:67:7c:8b:35:3a:82:57:72:f1:d4:83:71:
03:c0:6b:78:0b:00:ee:e0:e8:6d:79:27:69:c2:05:
59:2d:79:5a:3b:01:a6:3c:6c:65:5b:05:4e:e9:19:
f8:20:cb:aa:b7:60:a9:88:aa:22:3a:72:0b:59:11:
a3:42:ba:9d:5a:3f:1a:50:45:36:50:3f:0d:4f:a3:
84:6f:f8:0d:d4:7a:7f:ea:c1:99:de:ce:87:55:53:
a2:ff:e0:9f:d2:ff:d6:e2:92:19:66:a7:17:65:d2:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6B:F5:9B:47:AF:DB:42:CD:45:C3:90:75:21:A7:ED:CC:69:BC:7E
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/xWv1m0ev20LNRcOQdSGn7cxpvH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.32.0-46.162.36.255
46.162.38.0-46.162.47.255
Signature Algorithm: sha256WithRSAEncryption
7c:19:72:c0:ef:ac:12:6c:fe:2d:68:3f:00:0e:99:9b:94:9e:
9f:f7:9f:ea:6b:1e:ec:e6:e9:3e:9e:d5:f2:a9:94:2a:ad:4d:
25:e3:96:63:31:0d:60:c5:36:1b:2e:2e:1b:88:99:1f:12:e5:
c9:20:2b:42:5a:e2:5b:ae:8b:6a:de:3d:dd:da:56:b9:c4:9c:
1a:4e:c9:72:7d:0e:e5:c0:14:df:38:9f:13:d8:d1:e9:3c:d7:
ed:2a:78:22:29:67:72:dc:ef:be:77:c3:00:bb:9e:59:59:45:
c0:b1:6b:fc:a3:3d:39:22:ab:bd:d8:5a:26:6f:73:57:02:78:
8e:b3:36:dc:6f:50:d6:7b:0e:cb:a3:57:0e:85:f1:79:22:46:
a8:af:75:b7:fd:23:ba:a8:0c:59:65:78:16:b6:9b:d4:d7:19:
32:5f:fd:06:aa:fd:a4:76:ee:4b:0f:13:df:33:c7:26:e8:54:
0f:22:cb:1e:ef:06:7d:a6:b8:3b:b9:21:95:93:b5:80:46:16:
ac:b7:99:91:f8:b8:13:79:72:8b:19:13:e8:d4:29:64:3f:2d:
c9:1d:d7:80:1b:fb:7a:3a:bc:51:e9:ed:ab:e0:1b:60:81:20:
12:dd:8d:22:e8:8e:46:c7:79:18:f0:1e:2a:18:6f:26:03:83:
24:bf:67:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net