Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/WFyoBxDfv853fnTLkza7L04P5PU.roa
File: WFyoBxDfv853fnTLkza7L04P5PU.roa (raw, json)
Hash identifier: aySEqwlM48nnEzRQPeu3HQTt7JJrexVvEYvAJyEsTIQ=
Subject key identifier: 58:5C:A8:07:10:DF:BF:CE:77:7E:74:CB:93:36:BB:2F:4E:0F:E4:F5
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 018CC6B8E85501A792657969B8BBEF604CAA
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/WFyoBxDfv853fnTLkza7L04P5PU.roa
Signing time: Mon 01 Jan 2024 20:30:55 +0000
ROA not before: Mon 01 Jan 2024 20:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212850
IP address blocks: 46.243.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jan 2024 07:13:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e8:55:01:a7:92:65:79:69:b8:bb:ef:60:4c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Jan 1 20:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=585ca80710dfbfce777e74cb9336bb2f4e0fe4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:38:dc:07:69:7a:6d:cd:57:fc:3c:6b:5f:
c0:1f:d6:2a:a5:6b:84:b3:b9:37:1a:4f:4f:55:b3:
66:ec:30:93:9a:4f:89:3d:ce:e1:8e:95:96:b0:ef:
98:9a:87:48:c8:f4:55:af:52:a9:eb:17:d9:8b:b2:
4b:78:69:12:e2:14:82:35:3d:23:1a:1c:c2:79:72:
fc:9d:bb:91:70:fe:45:07:39:0a:4b:92:c9:89:41:
ca:a4:61:c0:9e:05:2f:31:0b:b8:70:6c:30:c1:45:
04:9b:09:42:15:91:0c:7a:ec:25:c5:74:47:18:0e:
a4:fb:d7:ef:a7:b8:c1:5c:75:8c:0c:2d:cc:fc:d4:
f3:ec:28:19:0a:0a:da:ba:bd:95:29:be:09:7a:23:
f1:23:74:45:5f:83:15:a0:87:b9:54:ed:15:65:b8:
5d:5b:06:16:9f:d1:10:39:f8:57:ca:09:79:d9:e0:
b6:46:7f:0f:48:ac:70:3b:8d:a4:2b:02:f0:4e:42:
ec:56:83:24:19:d7:d1:be:3f:e9:14:bc:1d:35:43:
7c:66:9d:f4:6b:c0:61:4e:c7:e9:4b:0c:dc:d7:f4:
ef:0c:c8:d1:e5:f6:a0:96:cc:4f:72:ba:4a:02:0e:
c7:13:84:cf:29:52:14:52:54:27:b1:72:6e:3c:b9:
ba:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5C:A8:07:10:DF:BF:CE:77:7E:74:CB:93:36:BB:2F:4E:0F:E4:F5
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/WFyoBxDfv853fnTLkza7L04P5PU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.22.0/24
Signature Algorithm: sha256WithRSAEncryption
99:bf:b6:eb:00:89:7c:c3:85:64:4c:72:16:ac:51:c3:62:33:
2e:39:25:83:63:93:55:af:3e:6e:b2:3b:65:ab:13:3e:4c:ce:
63:6d:86:cf:ee:c7:1f:b9:74:53:70:f9:0c:19:7f:74:a3:3a:
8c:65:dd:03:01:fb:dd:dc:fb:8e:bf:55:42:55:08:81:fe:4c:
29:ed:36:db:5e:c7:4b:86:d3:9c:32:f0:03:37:c4:29:cb:b9:
2d:9e:4d:40:67:45:5a:a0:17:43:f4:c2:ec:df:4a:5f:d1:29:
1e:37:fb:e8:b3:55:e6:37:98:5a:d3:b3:53:3d:85:e4:29:da:
ce:14:11:17:7f:56:11:04:1b:aa:cd:03:c7:e8:66:4e:73:9a:
0b:12:57:b1:fd:16:82:0c:86:92:85:16:d8:85:b4:f7:04:a3:
ab:3a:53:05:6d:da:0d:1b:b0:e5:5c:d9:84:6a:fd:24:e6:9a:
87:1e:d2:ce:cd:2e:e1:6a:34:ca:3c:71:79:00:98:30:73:b3:
5b:5c:5e:de:30:94:08:56:37:23:f8:00:7c:9a:50:3d:16:6d:
7d:53:3d:fc:72:0e:fd:25:f6:7b:7c:05:2a:e6:a2:43:43:e0:
7e:b5:6b:8d:12:c4:e9:23:de:5a:6c:cd:37:f7:24:c3:b9:65:
bf:48:30:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:54 2024 by rpki-client on console.sobornost.net