Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/dzO2QjADcc6IvjgiKnYLyaLDJME.roa
File: dzO2QjADcc6IvjgiKnYLyaLDJME.roa (raw, json)
Hash identifier: zvt19swmErsxTYKFhbB3+TLasczssaMwnIuk7s2nNDA=
Subject key identifier: 77:33:B6:42:30:03:71:CE:88:BE:38:22:2A:76:0B:C9:A2:C3:24:C1
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 018CC6B8E72E170774EB0FF290EA09966AE5
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/dzO2QjADcc6IvjgiKnYLyaLDJME.roa
Signing time: Mon 01 Jan 2024 20:30:55 +0000
ROA not before: Mon 01 Jan 2024 20:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 46.243.16.128/25 maxlen: 25
46.243.16.0/25 maxlen: 25
Validation: Failed, certificate revoked on Mon 15 Jan 2024 07:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:e7:2e:17:07:74:eb:0f:f2:90:ea:09:96:6a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Jan 1 20:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7733b642300371ce88be38222a760bc9a2c324c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:58:c0:92:af:27:13:a1:ea:58:97:3c:80:95:
a8:31:36:2b:f0:01:97:08:79:e9:a8:35:6e:0f:78:
43:73:a1:68:01:bc:4f:48:a4:1a:79:da:90:fc:2e:
7a:6f:42:d7:1b:3b:85:3d:b3:cd:49:19:e4:87:cf:
12:71:38:81:cb:fe:b2:9c:49:c4:bd:f4:c6:d7:d9:
9f:86:2d:c3:09:8f:db:8c:ce:d2:91:59:c5:ba:1a:
43:31:d9:78:98:92:45:b9:9d:54:d1:73:44:fe:56:
fa:f6:b4:d4:0c:d1:e8:66:0b:08:63:42:1c:07:9a:
38:8d:e7:cb:6d:1f:5f:4a:0c:6b:4a:24:e9:f5:23:
bc:7c:86:19:c8:58:9e:a5:80:e3:d4:2d:ad:47:91:
5b:03:9a:fc:f5:a8:df:11:71:aa:95:8e:ea:09:17:
fc:4a:4f:f3:e3:73:e8:09:a7:30:38:16:36:5e:e0:
17:89:41:af:e4:0a:51:81:82:69:64:24:77:68:ee:
03:12:f7:7b:70:2a:1f:91:7e:2f:6f:62:ca:fe:46:
33:58:37:77:76:57:12:60:84:7a:1e:b0:5a:bf:43:
c7:93:6b:04:db:b2:32:23:16:6f:93:af:2d:23:5b:
8d:a4:f3:ac:6f:08:89:a3:6e:73:0a:35:a5:ae:2a:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:33:B6:42:30:03:71:CE:88:BE:38:22:2A:76:0B:C9:A2:C3:24:C1
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/dzO2QjADcc6IvjgiKnYLyaLDJME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.16.0/24
Signature Algorithm: sha256WithRSAEncryption
30:d7:d6:16:fd:61:5f:ab:0a:8e:b3:1a:46:e3:46:77:18:d3:
4e:cf:44:d3:c6:92:78:91:65:78:2e:6b:db:1f:06:b0:4d:19:
3e:e3:d7:db:38:3f:45:30:7e:ca:48:5e:f0:1d:59:56:f6:1f:
5b:0e:2b:9c:7c:50:fd:3b:56:4c:36:da:05:23:01:6f:f8:84:
61:13:d3:fb:a8:e4:a7:c8:c3:c5:af:f1:ea:c6:8e:0a:23:e3:
89:49:51:05:a1:e0:ae:c3:67:be:4a:98:99:bf:14:09:86:7c:
3d:f2:5c:6c:93:fe:24:7d:4b:bc:ba:94:9b:a8:88:01:63:61:
35:ae:56:b6:82:f1:bc:c1:72:78:00:c8:65:65:ce:4f:71:64:
c6:cb:54:68:2d:91:35:db:54:96:f2:1a:f5:5a:83:1c:8e:7e:
d0:34:19:6a:71:37:36:21:8e:89:cd:46:a5:7b:bd:0a:d2:68:
10:51:26:4f:73:f4:53:23:d3:60:54:38:a3:6d:82:3b:ec:29:
af:4e:dd:63:23:be:ec:d9:df:a9:17:a5:90:41:ed:74:4a:c9:
8f:c2:85:7d:27:03:0d:d8:78:a8:4a:e9:5f:5d:45:fa:51:f8:
45:a7:b2:45:30:39:dc:72:f7:a9:65:ef:cf:d8:51:46:58:05:
99:fa:c2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:54 2024 by rpki-client on console.sobornost.net