Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/_G-0kwVCr_CQzs7-_OwA1OotsRQ.roa
File: _G-0kwVCr_CQzs7-_OwA1OotsRQ.roa (raw, json)
Hash identifier: k3ihg92KGunGUImxsMlsT95PmGMlyL/d3UBYhUmO+Ng=
Subject key identifier: FC:6F:B4:93:05:42:AF:F0:90:CE:CE:FE:FC:EC:00:D4:EA:2D:B1:14
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0186CD8BC2E52782D71DBC2F98E26251038D
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/_G-0kwVCr_CQzs7-_OwA1OotsRQ.roa
Signing time: Fri 10 Mar 2023 22:02:13 +0000
ROA not before: Fri 10 Mar 2023 22:02:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 46.3.88.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.116.0/22 maxlen: 24
46.3.120.0/21 maxlen: 21
46.3.134.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
149.126.226.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cd:8b:c2:e5:27:82:d7:1d:bc:2f:98:e2:62:51:03:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 10 22:02:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc6fb4930542aff090cecefefcec00d4ea2db114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:d1:74:b2:5b:92:db:cc:59:bb:0f:8c:a8:
41:f5:43:24:1c:76:c2:f2:89:b6:39:46:38:36:e5:
33:a3:f2:f0:e6:9d:88:b3:f4:9e:5e:c3:1b:42:24:
82:71:d7:c3:5a:6e:a8:c1:7a:89:0b:db:48:43:3d:
0f:cf:7b:2a:46:74:fe:8c:f2:b8:a1:46:6e:ee:f6:
79:d7:75:96:f9:bb:96:eb:86:2c:92:a9:22:ed:72:
64:df:98:5d:26:ad:30:2a:ae:20:bc:4b:09:0c:f8:
39:37:ed:6f:b7:de:89:c6:18:31:bc:9b:48:bf:11:
c4:97:0f:2a:32:52:89:b8:ae:50:2c:9f:29:98:9d:
53:b3:12:e5:a7:8d:81:3d:8e:52:17:41:ed:cb:e1:
1e:06:58:05:7c:85:d5:36:d7:a4:0f:c0:ba:a6:c3:
99:b5:2d:28:8e:6c:4c:cf:5a:b6:b5:e2:7b:08:81:
24:30:65:7e:ae:1f:43:a5:98:88:98:88:e9:2a:a4:
2b:b2:eb:c8:49:c9:f8:19:f2:53:7e:b9:8c:8e:2e:
75:ef:63:f7:54:17:42:82:2c:11:f5:74:8c:4b:51:
4b:3f:3a:a1:fe:84:a4:2d:fe:38:9b:11:7d:3e:52:
18:b4:07:78:4e:e4:53:eb:03:cb:c5:5b:59:8b:b2:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6F:B4:93:05:42:AF:F0:90:CE:CE:FE:FC:EC:00:D4:EA:2D:B1:14
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/_G-0kwVCr_CQzs7-_OwA1OotsRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0-46.3.90.255
46.3.116.0-46.3.127.255
46.3.134.0/24
46.3.201.0/24
46.3.220.0/23
46.3.230.0/23
46.3.248.0/23
46.3.251.0/24
46.3.253.0-46.3.255.255
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
21:21:63:30:5d:12:d8:9f:24:a1:22:f8:1b:05:1a:f8:87:33:
13:1a:e3:8f:c4:87:f8:a3:f4:f5:06:d3:25:28:40:56:2a:9c:
f1:6d:df:65:f7:ca:a8:80:fc:f1:6a:eb:95:f4:6f:d2:e9:8f:
e6:cb:af:d7:a2:49:7c:c3:dc:7b:85:f2:e8:99:16:6b:3d:7e:
a8:1c:e0:a1:60:19:f0:b2:b8:7b:43:d2:4a:01:49:4b:91:b7:
42:f7:84:21:5e:86:4d:05:d5:02:cd:bf:23:21:77:eb:6f:d0:
ef:9f:4d:8e:a7:02:21:73:17:1b:0e:cb:b1:01:17:43:aa:de:
48:77:41:9c:43:6e:02:6d:db:d4:f0:37:e6:9e:8f:e5:4a:97:
c7:00:52:01:fe:d2:9d:9e:a0:4c:f5:d4:4d:1a:fd:46:0f:b5:
66:7d:bb:63:35:68:83:a1:d4:c4:2c:5a:69:18:a6:d3:ee:c8:
14:02:6b:5f:fb:89:1d:38:f0:b1:8f:c7:ba:49:0a:bd:56:af:
62:94:6c:bd:b9:40:b8:df:c5:f5:5f:7e:89:7a:bb:58:65:e0:
8d:0f:a7:fd:09:25:5f:51:10:1a:11:15:86:8e:d7:7a:06:98:
79:9a:5d:e7:02:42:b6:4b:bc:19:e2:4b:d0:77:1c:2f:be:09:
70:b6:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:56 2023 by rpki-client on console.sobornost.net