Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/YeK1OkAB5Ji2_PKY8g3HxLKJwyw.roa
File: YeK1OkAB5Ji2_PKY8g3HxLKJwyw.roa (raw, json)
Hash identifier: HTbiyvTrrk4275ceKouAuvWmQcGXu3LXvtVLTO3q0rE=
Subject key identifier: 61:E2:B5:3A:40:01:E4:98:B6:FC:F2:98:F2:0D:C7:C4:B2:89:C3:2C
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 018DC7D98D8967BA62E820AA81320041A183
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/YeK1OkAB5Ji2_PKY8g3HxLKJwyw.roa
Signing time: Tue 20 Feb 2024 18:48:59 +0000
ROA not before: Tue 20 Feb 2024 18:48:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57908
IP address blocks: 46.243.16.0/24 maxlen: 24
46.243.17.0/24 maxlen: 24
46.243.18.0/24 maxlen: 24
46.243.19.0/24 maxlen: 24
46.243.20.0/24 maxlen: 24
46.243.22.0/24 maxlen: 24
46.243.23.0/24 maxlen: 24
2a03:6dc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 31 Mar 2024 00:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c7:d9:8d:89:67:ba:62:e8:20:aa:81:32:00:41:a1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Feb 20 18:48:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61e2b53a4001e498b6fcf298f20dc7c4b289c32c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:e9:d4:19:90:b6:65:18:08:32:c1:96:46:
9a:49:c6:d8:96:0a:d4:eb:ce:16:af:c4:a9:2f:cf:
0d:2a:56:3d:65:3d:33:a2:28:98:1d:fc:65:4f:1c:
be:68:47:18:39:69:e1:8a:a2:c7:62:c4:19:06:28:
a1:47:2d:3b:73:72:98:15:52:3f:5a:14:81:5e:bf:
25:cc:2f:a4:cb:0c:23:de:95:e5:a5:c5:97:01:8d:
d5:0c:46:57:eb:20:79:f0:8d:d5:f0:ba:4b:07:e5:
2e:84:6f:23:08:1d:50:b4:0c:82:09:95:cb:94:33:
6c:fe:db:a8:3e:3d:de:79:53:fe:eb:14:56:0d:e3:
09:cb:e6:b0:9d:86:0e:41:94:07:3b:f8:e9:14:42:
7e:d4:6a:c9:93:aa:b3:89:8a:ad:69:52:84:b5:c1:
92:bd:c1:be:0b:8b:c2:12:e5:99:c0:88:12:d7:83:
cf:cd:94:56:9b:e1:6d:c9:09:7b:3e:92:72:1c:ce:
75:a7:59:77:96:ee:24:00:19:3a:7d:4d:d3:e8:a3:
e3:aa:9a:a1:02:51:8b:06:a2:42:1f:f1:b8:19:43:
8f:3b:27:e3:1c:d1:39:56:c8:5c:68:8e:a7:a2:98:
4c:90:ed:ac:39:fd:e6:d7:5f:32:11:a5:11:3e:ec:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E2:B5:3A:40:01:E4:98:B6:FC:F2:98:F2:0D:C7:C4:B2:89:C3:2C
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/YeK1OkAB5Ji2_PKY8g3HxLKJwyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.16.0-46.243.20.255
46.243.22.0/23
IPv6:
2a03:6dc0::/32
Signature Algorithm: sha256WithRSAEncryption
71:0f:12:c3:49:30:ad:eb:84:22:93:76:43:19:d2:86:8c:ee:
57:48:d7:b2:3b:8c:f7:b0:e2:b2:fc:2c:48:70:f5:f1:af:80:
67:53:e3:e5:72:ed:dc:a2:20:44:ca:26:36:e8:a0:96:e6:ff:
32:04:a5:d4:14:02:c2:84:13:be:30:0a:00:d4:3f:f9:c6:b1:
2f:fb:f6:25:be:58:93:2e:46:e8:37:b9:ae:37:a5:89:4c:4e:
3e:4b:29:e3:90:81:42:03:48:4a:8a:0e:2f:5c:00:14:87:2c:
0b:d9:d5:e0:9e:f3:96:d7:95:90:de:ab:9d:ef:9c:d4:ec:16:
06:19:db:49:12:14:c9:e4:b2:ae:62:30:f3:fe:fe:bd:6e:a4:
18:a9:50:13:e2:3e:cc:10:dc:a9:05:f0:a9:72:50:53:02:c1:
2a:4d:97:58:2e:8f:d0:49:ac:32:ff:b0:e6:ba:88:cf:6f:84:
f2:2c:95:2f:bd:4e:fa:2e:cb:0d:6a:66:ac:47:8e:89:11:32:
f3:91:ed:df:39:13:40:06:e0:98:6a:9e:cf:71:ea:61:40:0c:
4b:bf:a6:0e:58:c9:29:6f:a0:22:1c:37:fc:be:f4:de:9a:ee:
87:f6:a7:b3:d5:f4:52:01:13:62:61:bd:74:46:54:23:cc:4b:
e2:dc:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 06:26:09 2024 by rpki-client on console.sobornost.net