Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/w_X3r6NHbnnzLdXGK2dCC6mRPp4.roa
File: w_X3r6NHbnnzLdXGK2dCC6mRPp4.roa (raw, json)
Hash identifier: fnIxlPHFQHBzCYNZq+YntfvRSHYQbGYAXuBlExfu7Ps=
Subject key identifier: C3:F5:F7:AF:A3:47:6E:79:F3:2D:D5:C6:2B:67:42:0B:A9:91:3E:9E
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 018A5F51173FE3DB73066D01D686076067BE
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/w_X3r6NHbnnzLdXGK2dCC6mRPp4.roa
Signing time: Mon 04 Sep 2023 08:31:04 +0000
ROA not before: Mon 04 Sep 2023 08:31:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6730
IP address blocks: 46.140.0.0/16 maxlen: 16
31.10.192.0/18 maxlen: 18
46.127.0.0/16 maxlen: 16
178.82.0.0/16 maxlen: 16
31.10.128.0/18 maxlen: 18
31.10.128.0/17 maxlen: 17
46.126.0.0/16 maxlen: 16
46.126.0.0/15 maxlen: 15
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:51:17:3f:e3:db:73:06:6d:01:d6:86:07:60:67:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Sep 4 08:31:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3f5f7afa3476e79f32dd5c62b67420ba9913e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:fc:0c:46:60:ab:0d:3e:09:82:ba:59:b8:
ed:bf:a8:29:58:c3:85:4f:64:a2:ae:54:e5:7a:53:
14:bf:5a:c6:e5:66:b7:4d:f7:99:e6:53:c6:d7:2c:
35:5c:b4:54:b5:7c:ab:80:32:7d:b8:f2:83:9e:ce:
13:14:73:41:6f:2a:52:88:de:72:60:52:d6:10:21:
41:a0:8d:11:ab:c6:aa:ae:f3:eb:1b:2b:b9:68:80:
e5:3b:7a:f1:2f:fb:03:b5:c2:a8:71:21:69:c2:d9:
09:f0:c3:de:c6:3b:94:47:1c:72:d5:89:35:47:b3:
73:77:2d:85:0e:88:15:e4:c6:c8:eb:58:39:9a:cf:
33:b6:d4:4f:54:07:c1:ce:64:55:f6:00:70:a5:1c:
0e:30:d2:e6:93:9f:3d:e4:48:6e:b7:f8:20:4c:fd:
9c:0d:4f:35:c0:95:cc:b1:4c:53:aa:b1:ed:b0:e3:
e8:c3:c9:7d:a8:c9:d7:e4:67:85:43:4c:fc:02:cd:
c0:1b:74:60:dd:35:8c:f8:5d:9e:1d:09:2d:0a:be:
e0:d9:1a:0d:d8:6c:c8:b2:56:ad:25:a7:7f:16:a8:
de:a1:44:d3:b3:4f:85:ce:6d:06:46:ac:ac:12:58:
7f:62:e3:d6:5e:5f:cd:90:07:e8:51:78:50:ab:da:
4f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F5:F7:AF:A3:47:6E:79:F3:2D:D5:C6:2B:67:42:0B:A9:91:3E:9E
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/w_X3r6NHbnnzLdXGK2dCC6mRPp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.128.0/17
46.126.0.0/15
46.140.0.0/16
178.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:35:57:42:83:81:a4:80:68:f2:8c:91:ab:94:48:41:c7:28:
c6:b0:a7:20:0f:02:e6:28:27:e2:90:a8:e4:30:7c:bf:27:7b:
7d:c3:17:cb:14:ee:1c:47:9f:b3:e7:0c:d4:ef:e4:a5:e2:88:
c9:8f:34:dd:2e:d1:2b:d0:19:91:88:ab:b8:53:ef:27:0d:07:
a2:39:e9:61:db:92:b4:99:74:0a:fd:3b:45:44:35:75:62:70:
00:76:f0:4e:26:dc:b7:dd:07:82:b3:2e:58:94:30:61:a6:11:
5f:34:56:85:30:21:e4:da:73:f7:a9:ef:98:6c:d8:de:ad:37:
a5:58:8d:06:5c:57:ac:fd:5a:a7:57:f6:8c:32:73:15:3a:86:
ff:06:19:03:68:57:a4:9e:f6:ac:fd:5a:03:ce:a4:e6:72:14:
46:2d:e3:a6:d0:cf:b1:31:16:34:2a:66:43:cb:48:d7:26:b3:
3d:59:41:df:94:c1:0b:0d:7a:71:a5:fc:48:55:1b:82:74:75:
d0:64:3e:6f:a6:7c:88:db:bb:5b:45:bc:4b:e8:51:68:21:e4:
fa:5c:55:6b:f4:6b:53:92:c3:34:3f:e4:55:d0:14:6f:b2:a4:
a3:11:5f:df:6d:21:7d:4e:8c:02:d8:aa:07:06:f7:c8:ef:20:
50:43:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net