Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/bY65_371du8M9UayHi2em0QWOIA.roa
File: bY65_371du8M9UayHi2em0QWOIA.roa (raw, json)
Hash identifier: BQU45ROfVWS1cdUHNMBt6sJvVTL6tgZztVzlkNVB4Z8=
Subject key identifier: 6D:8E:B9:FF:7E:F5:76:EF:0C:F5:46:B2:1E:2D:9E:9B:44:16:38:80
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01857195626E02B3AC2F525E954FE6F0B2CE
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/bY65_371du8M9UayHi2em0QWOIA.roa
Signing time: Mon 02 Jan 2023 08:24:53 +0000
ROA not before: Mon 02 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 149.126.192.0/19 maxlen: 24
46.232.0.0/17 maxlen: 24
46.3.0.0/16 maxlen: 24
80.243.128.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:62:6e:02:b3:ac:2f:52:5e:95:4f:e6:f0:b2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d8eb9ff7ef576ef0cf546b21e2d9e9b44163880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:4d:91:3a:5e:e1:42:c0:41:a7:a2:2a:ec:
fe:47:33:b1:6c:c8:53:c9:54:0a:2b:e1:d9:60:f9:
8d:1c:94:cf:ba:51:5d:d7:4a:c3:ec:f8:55:04:12:
5f:d3:5d:cb:b0:8c:f2:bf:d0:94:42:da:23:8d:8f:
e8:a9:88:ea:55:86:de:48:67:be:d8:26:63:52:ea:
f8:ef:6c:01:8a:a9:5b:72:3c:2f:3c:b0:c1:e5:d9:
dd:9c:7f:db:41:30:40:0c:3d:ca:19:34:1b:ca:4e:
68:4b:33:45:a1:8f:35:c7:7d:a6:b0:c9:3c:1d:fe:
35:82:7b:fc:16:ec:69:83:9b:2e:6d:bc:88:d6:68:
9f:8b:39:81:9b:d2:9d:81:8a:bf:30:21:d0:7d:5d:
7e:2f:35:90:d5:7a:89:03:d7:a4:5b:2b:77:d0:e9:
16:34:de:1e:b4:53:62:f8:ae:59:28:7c:b0:08:15:
57:d4:0a:12:9c:0c:67:4e:59:2f:01:02:cc:ae:d0:
47:46:4d:92:c0:4a:fc:ca:b7:95:56:85:0c:86:10:
11:08:2b:44:fa:29:b4:aa:c0:5c:ad:de:5e:2e:33:
33:89:92:d5:6b:d6:39:16:0e:43:86:8c:2b:f8:d1:
65:8c:6f:57:78:02:07:ab:9d:29:68:09:5b:ec:76:
c3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8E:B9:FF:7E:F5:76:EF:0C:F5:46:B2:1E:2D:9E:9B:44:16:38:80
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/bY65_371du8M9UayHi2em0QWOIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
80.243.128.0/20
149.126.192.0/19
Signature Algorithm: sha256WithRSAEncryption
35:fa:06:5a:29:12:6c:d3:ca:e1:9f:47:2b:88:17:cc:69:fe:
0e:05:c7:c9:d1:67:1d:26:b2:77:ef:b2:ab:81:10:bf:aa:45:
06:c0:78:ce:36:4d:01:cc:65:a4:21:04:6a:b8:4c:69:f2:ba:
f5:f2:99:b7:1b:60:9b:91:f2:85:71:aa:27:e2:a3:de:61:d1:
64:1b:13:80:a7:05:78:9c:5b:a6:ef:92:09:ef:bd:ae:e8:a8:
54:4e:97:a1:c0:28:af:e3:39:f9:8d:dd:52:07:a4:e4:af:29:
25:0b:68:eb:7e:3b:2d:aa:ef:73:04:4f:8a:e1:32:5a:ab:b8:
de:9c:1a:e8:34:2f:ab:23:f1:b3:61:a3:59:3b:2b:f4:a8:81:
50:69:78:df:03:b1:e6:70:32:e9:35:36:8c:de:66:ca:1a:08:
0e:96:52:34:e8:56:86:67:93:2c:d9:80:e3:91:b2:b5:2a:5f:
25:23:f9:d9:99:e2:66:20:09:40:b1:48:fe:81:f1:91:ed:84:
25:fe:e8:cb:95:1f:4d:8b:19:25:6a:05:e7:55:08:a3:0c:27:
32:65:54:d7:cd:02:fc:91:65:bf:85:c0:aa:af:69:ff:ce:97:
26:a3:96:94:32:42:c0:d3:1f:af:94:3a:a8:f5:b0:ff:fa:cd:
fd:0d:cf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:56 2023 by rpki-client on console.sobornost.net