Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/ZUALa1uYyENPkB284LojUSqCdgU.roa
File: ZUALa1uYyENPkB284LojUSqCdgU.roa (raw, json)
Hash identifier: p2fvSTrr6pK58gsQZ3sk9rLVPiNzdb+6LHCR55AFsXQ=
Subject key identifier: 65:40:0B:6B:5B:98:C8:43:4F:90:1D:BC:E0:BA:23:51:2A:82:76:05
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018A5F7B06F689F3BC22F1D410EB47FDB904
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/ZUALa1uYyENPkB284LojUSqCdgU.roa
Signing time: Mon 04 Sep 2023 09:16:52 +0000
ROA not before: Mon 04 Sep 2023 09:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 46.140.0.0/17 maxlen: 17
46.140.0.0/16 maxlen: 16
81.7.224.0/20 maxlen: 20
81.7.224.0/19 maxlen: 19
62.2.0.0/17 maxlen: 17
62.2.0.0/16 maxlen: 16
178.82.0.0/16 maxlen: 16
81.7.240.0/20 maxlen: 20
31.10.128.0/18 maxlen: 18
31.10.128.0/17 maxlen: 17
80.219.0.0/16 maxlen: 16
31.10.192.0/18 maxlen: 18
46.127.0.0/16 maxlen: 16
46.140.128.0/17 maxlen: 17
80.218.0.0/16 maxlen: 16
80.218.0.0/15 maxlen: 15
62.2.128.0/17 maxlen: 17
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:7b:06:f6:89:f3:bc:22:f1:d4:10:eb:47:fd:b9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Sep 4 09:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65400b6b5b98c8434f901dbce0ba23512a827605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:8a:4e:5d:a8:08:d9:bd:c9:90:65:0f:05:
c5:cf:47:e0:1c:51:d3:bd:c4:f3:5e:8f:95:ee:4e:
67:31:a2:b5:05:e2:f0:42:89:b1:fa:ad:30:71:53:
ae:f3:78:59:e0:62:bb:ba:63:96:1b:17:05:05:08:
82:4e:ce:b5:cd:c2:73:44:69:bb:56:70:6d:9f:e5:
12:92:04:ee:94:11:54:b4:71:e7:b7:37:0f:68:81:
11:3d:58:29:5b:ce:c0:cd:ae:63:97:fc:a3:89:f7:
30:95:ef:dd:4c:68:9c:0d:fb:99:44:c6:8a:e5:f4:
66:dc:87:78:dd:80:42:6b:fc:a5:f1:4f:29:a8:cc:
ab:ce:85:39:a5:93:b8:9c:74:ea:5a:15:5e:39:f8:
03:06:98:8a:b2:71:a5:da:bd:2f:c0:3f:fd:c9:c7:
a4:83:59:46:12:2c:f6:73:1a:b3:e3:32:ab:62:35:
29:f8:ad:73:d0:dc:ac:5a:b9:36:e7:3b:67:21:c0:
d4:ad:dc:4e:a0:a6:da:4d:9d:1c:96:8b:23:96:44:
82:35:10:23:e5:7e:b5:05:6c:49:d6:63:e5:f0:e8:
e5:83:42:b9:2b:7c:59:c4:4d:de:74:e3:da:3d:c4:
dd:2b:02:a1:fa:14:d1:ca:29:72:d3:f0:4e:22:1e:
6b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:40:0B:6B:5B:98:C8:43:4F:90:1D:BC:E0:BA:23:51:2A:82:76:05
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/ZUALa1uYyENPkB284LojUSqCdgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
62.2.0.0/16
80.218.0.0/15
81.7.224.0/19
178.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:02:21:6d:0e:7f:17:c0:bf:39:b0:62:8b:94:7c:9b:30:b1:
9b:c2:80:2c:80:6b:eb:07:68:a3:e2:6b:e7:d4:cc:81:a8:f3:
0d:5f:f6:af:e4:67:f3:f1:9d:64:a1:1e:9c:8d:35:c8:9f:02:
eb:2e:78:c8:84:80:d6:4c:4d:91:6f:e2:3c:b4:23:16:8e:66:
f3:55:3a:14:43:72:ac:19:49:ac:82:7b:59:1c:c4:65:3a:5d:
46:e1:c4:fe:fd:5c:25:e8:20:7b:1a:0c:c9:1d:ca:3c:fa:89:
8a:ae:34:9a:66:1c:21:97:66:f4:d0:65:4e:7d:ce:8b:73:ae:
21:28:a7:04:e8:a5:4e:cf:35:76:3c:fb:a9:cf:0c:eb:fd:16:
1d:ea:66:68:5d:79:0b:04:77:a8:c3:9b:76:6f:2a:dc:3f:e6:
aa:1a:4d:0f:3c:29:ff:b9:ec:70:64:da:3c:69:e6:b3:d8:63:
94:78:d7:95:6d:ff:11:d5:3c:6e:2b:33:42:6e:8d:0f:ba:29:
2b:9c:82:ec:45:c9:e0:45:38:08:28:d7:74:93:2f:b9:3a:73:
29:da:77:da:26:83:bf:86:ac:5b:bd:46:1f:69:fc:70:85:45:
f2:dd:5a:96:b1:7d:b6:9f:d2:be:14:e0:43:cf:55:8f:cc:86:
ad:72:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net