Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Qpu5kRxIDmeVkAydBisZ0rUgPI0.roa
File: Qpu5kRxIDmeVkAydBisZ0rUgPI0.roa (raw, json)
Hash identifier: bwBKRlfbUxRm+BTzBBrXE8PPa4gIsdwkSqzrJesCfCE=
Subject key identifier: 42:9B:B9:91:1C:48:0E:67:95:90:0C:9D:06:2B:19:D2:B5:20:3C:8D
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E4137942DBA89858E332C5FD17C1B3BBF
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Qpu5kRxIDmeVkAydBisZ0rUgPI0.roa
Signing time: Fri 15 Mar 2024 08:25:45 +0000
ROA not before: Fri 15 Mar 2024 08:25:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399587
IP address blocks: 46.3.20.0/22 maxlen: 24
46.3.32.0/19 maxlen: 24
46.3.32.0/20 maxlen: 20
46.3.48.0/21 maxlen: 24
46.3.56.0/21 maxlen: 24
46.3.80.0/21 maxlen: 22
46.3.96.0/20 maxlen: 24
46.3.120.0/21 maxlen: 22
46.3.160.0/22 maxlen: 24
46.3.164.0/22 maxlen: 24
46.3.208.0/21 maxlen: 21
46.3.216.0/21 maxlen: 22
46.3.216.0/22 maxlen: 24
46.3.222.0/24 maxlen: 24
46.3.224.0/21 maxlen: 22
46.232.20.0/22 maxlen: 24
46.232.64.0/22 maxlen: 24
80.243.128.0/21 maxlen: 24
80.243.128.0/23 maxlen: 24
80.243.130.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 08:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:37:94:2d:ba:89:85:8e:33:2c:5f:d1:7c:1b:3b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 15 08:25:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=429bb9911c480e6795900c9d062b19d2b5203c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a6:a8:4a:68:e7:80:59:48:3b:c2:2a:42:05:
06:2c:6d:7f:5c:50:09:f5:87:74:51:cb:db:dd:d9:
25:bb:2f:6b:0c:06:59:78:0c:ae:9b:0e:4f:43:6a:
dc:7f:54:61:64:32:e0:9c:ac:11:95:4b:b1:34:67:
93:15:5f:00:87:9c:b2:f1:8c:7c:90:16:71:c4:28:
cd:a0:f7:db:f4:de:4e:50:94:4b:f9:78:1e:11:30:
c4:d9:f4:20:d3:69:a3:fb:b4:15:6e:ac:03:00:e5:
5c:cb:63:1a:69:19:98:20:eb:79:13:b6:31:1b:0a:
34:4a:e9:46:c9:66:26:30:9c:42:50:7f:b1:c1:08:
a6:57:2b:27:b4:1d:3b:22:f8:2a:c2:ca:4d:cc:16:
dc:08:60:0a:13:9e:a4:f4:d3:1d:c6:2d:1c:4b:75:
14:55:6a:51:71:47:c5:a6:af:f2:93:78:3b:af:bf:
af:1b:dd:be:7b:56:38:63:5d:85:f8:d1:3f:c6:4e:
39:3b:6a:cb:ba:88:91:50:4f:51:4f:e3:a3:c7:b6:
cb:be:69:7d:91:9d:e9:f3:a3:0c:58:f9:0b:99:e6:
9e:ea:fb:d9:59:1e:16:bf:f7:b3:20:ae:85:e6:fc:
52:b6:d5:7c:45:4b:42:d0:c7:38:05:e7:dd:ec:bf:
5c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:B9:91:1C:48:0E:67:95:90:0C:9D:06:2B:19:D2:B5:20:3C:8D
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Qpu5kRxIDmeVkAydBisZ0rUgPI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.20.0/22
46.3.32.0/19
46.3.80.0/21
46.3.96.0/20
46.3.120.0/21
46.3.160.0/21
46.3.208.0-46.3.231.255
46.232.20.0/22
46.232.64.0/22
80.243.128.0/21
Signature Algorithm: sha256WithRSAEncryption
61:1b:17:17:de:e5:61:3c:49:a2:d3:6c:b2:67:5a:43:0c:2a:
ad:58:da:a7:dc:70:34:84:46:78:3b:24:b8:bf:02:85:e0:04:
3c:82:89:78:41:6a:b5:59:81:1a:7e:ac:24:3f:bf:57:bf:8d:
a0:23:fa:9f:f9:55:36:6b:ba:28:04:c4:1b:88:23:64:82:2c:
b6:18:cb:c6:32:84:df:22:11:6d:0b:7b:2c:19:ea:25:19:45:
ab:6b:53:56:22:7a:58:5b:03:23:be:00:8a:53:5a:de:91:17:
90:01:db:99:dc:af:a0:a6:ad:12:a6:5b:19:82:91:b2:af:b4:
93:da:9e:cf:2f:46:3d:b6:a7:17:0a:d3:88:fd:2e:66:d3:a2:
15:9a:8b:60:59:7b:22:83:95:d5:03:93:c5:e0:26:23:66:66:
51:39:d6:41:95:c2:7c:39:54:2e:ef:8b:be:64:25:d2:e5:e0:
f5:32:8d:00:10:51:60:5e:53:db:7b:fb:59:71:6a:a6:fc:c1:
b8:51:e4:d5:8b:9f:9a:12:9e:89:67:be:1c:1c:1c:c6:3c:69:
78:b8:c3:d5:42:37:5a:79:60:3b:c9:82:bd:93:03:cb:47:d6:
0f:21:2a:c7:30:68:b4:87:11:d0:fe:53:1f:e8:a5:11:78:92:
86:c1:fe:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 15 15:01:25 2024 by rpki-client on console.sobornost.net