Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/afVNm5kzwpBHw9X7RsAtIz64FDM.roa
File: afVNm5kzwpBHw9X7RsAtIz64FDM.roa (raw, json)
Hash identifier: icsvUx+UfuigYk4InmXITygs7hmIT+bg8y+t7VkiHYI=
Subject key identifier: 69:F5:4D:9B:99:33:C2:90:47:C3:D5:FB:46:C0:2D:23:3E:B8:14:33
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018946B321B43733DD0AC9D235CB9AA8840F
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/afVNm5kzwpBHw9X7RsAtIz64FDM.roa
Signing time: Tue 11 Jul 2023 20:44:51 +0000
ROA not before: Tue 11 Jul 2023 20:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 80.243.128.0/20 maxlen: 24
46.3.48.0/20 maxlen: 20
46.3.84.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.16.0/23 maxlen: 23
46.232.18.0/23 maxlen: 23
46.3.0.0/16 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.3.152.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.158.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.232.112.0/23 maxlen: 23
46.232.116.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
46.232.118.0/23 maxlen: 23
46.232.124.0/23 maxlen: 23
46.232.126.0/23 maxlen: 23
46.3.136.0/22 maxlen: 22
46.3.135.0/24 maxlen: 24
46.3.144.0/22 maxlen: 22
149.126.192.0/19 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.212.0/22 maxlen: 22
46.3.208.0/22 maxlen: 22
149.126.213.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.239.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:b3:21:b4:37:33:dd:0a:c9:d2:35:cb:9a:a8:84:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 11 20:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69f54d9b9933c29047c3d5fb46c02d233eb81433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:14:d3:18:2a:c4:41:c8:07:99:b7:51:aa:
53:d1:5f:ef:2b:0b:6e:98:25:0a:45:a5:7e:0a:13:
be:d7:1b:f4:5f:cb:b0:18:a4:6e:97:db:c8:03:64:
43:7a:36:95:d0:d7:c8:26:fe:47:2e:56:bb:48:57:
36:fc:d6:7a:e5:1e:74:7f:1d:c8:a3:0e:c9:06:d3:
39:72:f0:47:42:ce:e7:c5:2f:04:ee:1c:eb:1a:dc:
f8:83:d2:89:b7:a5:f8:c2:0a:b9:4a:3c:3f:54:bc:
5e:3e:0d:45:2f:28:71:56:02:16:ff:ec:a2:04:b8:
f2:e9:27:dd:33:36:02:53:1c:ca:95:4c:82:71:d6:
9a:a0:87:28:71:30:78:c9:fe:36:26:42:24:c3:3d:
fa:63:52:a0:5b:18:41:eb:c3:a2:0d:cd:82:a2:f3:
8a:cf:7f:20:07:c9:a2:c4:55:88:cb:0f:6b:ab:20:
0b:73:f4:8a:1a:be:d7:1d:7b:96:20:2c:f2:b1:40:
05:72:33:e5:2b:01:7b:e0:e2:2b:bf:fb:08:15:f7:
c5:f7:1e:db:9e:73:03:f5:36:ac:66:4d:ff:96:06:
ed:a7:28:2c:32:7a:67:4a:62:52:ef:c0:12:67:f4:
5f:49:ea:df:b6:30:12:be:04:9d:41:3b:3c:f0:db:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F5:4D:9B:99:33:C2:90:47:C3:D5:FB:46:C0:2D:23:3E:B8:14:33
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/afVNm5kzwpBHw9X7RsAtIz64FDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
80.243.128.0/20
149.126.192.0/19
Signature Algorithm: sha256WithRSAEncryption
49:80:3c:e1:c3:82:f1:18:74:7f:39:56:44:46:99:c0:bd:6f:
6f:a0:20:30:c3:c8:b8:18:99:9d:92:16:eb:1e:c8:c9:60:d5:
51:fb:74:ea:28:e6:1d:fb:d0:a8:5a:90:28:05:38:10:25:58:
c9:b0:1f:16:e0:0a:c5:6d:f2:3a:74:8f:3b:30:d4:8a:ff:50:
cd:25:9e:e5:d2:b0:3c:d5:41:c5:8c:a1:fb:8d:f2:1f:26:17:
e9:4c:54:7e:b3:c6:d9:bb:72:58:bf:73:eb:d9:ae:58:c7:fc:
81:b9:05:5b:e3:6f:73:71:72:b4:3c:de:cc:ca:96:df:06:39:
ea:a8:f8:a0:ae:a9:f4:62:ea:02:7c:11:ba:69:f9:02:f7:08:
ba:ab:ac:d3:36:5f:37:f4:6a:e1:69:02:e4:7b:9e:d1:59:34:
6a:7a:ae:23:7e:67:f0:15:9f:cf:a1:58:e1:be:ff:f6:a2:59:
2b:3a:66:e4:65:ce:dc:76:80:b3:fd:56:1f:6d:ae:de:fd:62:
1f:ce:05:ff:83:f3:98:ea:d8:b6:ea:b0:73:3f:12:11:e3:9c:
86:b2:f1:fa:f5:33:66:93:8f:59:fa:58:5f:0c:e9:66:bb:b6:
c4:ee:d9:b0:23:6a:22:6e:6a:ec:f5:bc:c9:3a:8b:98:e2:24:
bf:fa:68:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:56 2023 by rpki-client on console.sobornost.net