Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/DlruACdbUa6_Yt3IQ6hPKHfWls0.roa
File: DlruACdbUa6_Yt3IQ6hPKHfWls0.roa (raw, json)
Hash identifier: Xb/w4q8zk7JmcGEgjL7K6CnYsQEgl7MUsXJAsmwU1Qk=
Subject key identifier: 0E:5A:EE:00:27:5B:51:AE:BF:62:DD:C8:43:A8:4F:28:77:D6:96:CD
Certificate issuer: /CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Certificate serial: 018570B0774E2D4D05DFBC62FB41D6235094
Authority key identifier: D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/DlruACdbUa6_Yt3IQ6hPKHfWls0.roa
Signing time: Mon 02 Jan 2023 04:14:51 +0000
ROA not before: Mon 02 Jan 2023 04:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15951
IP address blocks: 185.94.177.0/24 maxlen: 24
185.94.176.0/24 maxlen: 24
185.94.178.0/24 maxlen: 24
193.41.164.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:77:4e:2d:4d:05:df:bc:62:fb:41:d6:23:50:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d002fbe9f0a413603edefb733a531f2e2c0e9c06
Validity
Not Before: Jan 2 04:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e5aee00275b51aebf62ddc843a84f2877d696cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c7:73:5f:44:13:4c:c8:c8:9f:4e:8d:2c:5f:
24:5d:57:d2:ca:7e:2d:a6:d5:be:16:c8:9e:e8:61:
1b:a4:8f:69:1d:67:f3:9a:cb:ea:84:0d:6c:79:53:
80:23:b1:f6:18:a8:82:70:87:7d:1d:31:e9:bd:ca:
b8:8a:94:07:ed:62:c2:aa:f8:5b:49:a8:86:ba:7a:
5f:ce:05:8d:e8:4a:50:75:f1:22:08:43:27:32:c4:
25:f8:47:c0:07:db:9c:1b:69:4b:c7:f0:c7:74:ae:
0a:f3:20:73:e5:04:fc:7c:73:d4:b4:69:7c:c8:2d:
1a:e9:8f:78:eb:e2:04:8e:ea:4b:5a:40:c1:f9:7a:
c8:83:88:7e:e1:0e:2d:2b:a3:a7:8d:7a:a6:86:82:
0a:bb:ea:1d:72:70:98:ba:20:96:04:cc:ff:f4:3e:
4a:16:89:8a:d8:59:45:c8:0d:f1:2e:f1:06:54:a3:
96:bd:b4:8c:5c:43:55:6f:b7:81:cf:52:8e:32:d2:
6c:7e:62:f8:c3:39:1f:41:f3:63:9b:62:80:4c:6a:
b7:28:b2:b8:92:8f:a8:dd:9c:f3:72:17:02:1e:cc:
ca:b8:95:08:06:66:4c:06:a7:68:93:e2:c3:ec:24:
aa:dd:4c:fa:9f:0d:26:0d:00:3f:73:e2:05:8a:bf:
76:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5A:EE:00:27:5B:51:AE:BF:62:DD:C8:43:A8:4F:28:77:D6:96:CD
X509v3 Authority Key Identifier:
keyid:D0:02:FB:E9:F0:A4:13:60:3E:DE:FB:73:3A:53:1F:2E:2C:0E:9C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AL76fCkE2A-3vtzOlMfLiwOnAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/DlruACdbUa6_Yt3IQ6hPKHfWls0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9bafb1-0c42-425b-aa29-19c045c6a14f/1/0AL76fCkE2A-3vtzOlMfLiwOnAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.176.0-185.94.178.255
193.41.164.0/23
Signature Algorithm: sha256WithRSAEncryption
72:59:c6:8d:0c:bc:5e:16:21:6c:1f:76:72:87:87:33:34:dc:
27:e2:22:f6:7d:bf:06:ea:f1:61:fc:6e:57:f0:49:87:ac:25:
cd:0d:b9:b9:ec:d8:38:3b:3e:c4:78:25:6a:89:e6:9d:fb:2f:
02:f3:ef:d6:5b:48:0c:18:cf:c6:3d:79:c6:ab:c7:b5:d3:4c:
90:9e:17:af:c8:bf:0d:a4:ed:d8:a9:e4:2f:cc:22:a3:90:28:
37:36:72:34:57:96:e7:53:e7:c0:a4:8a:b6:c7:31:e5:a9:ac:
d3:b3:43:f5:0b:77:69:a1:ad:29:bb:2d:7c:6a:07:91:b1:87:
70:3e:c6:87:e5:86:39:a4:1d:a8:d0:b6:f0:5b:44:be:d5:9d:
23:b5:31:4e:8b:0f:b7:d7:3c:3b:86:fb:68:ff:5a:a9:f5:51:
a0:b6:43:17:49:20:b6:21:44:b5:5c:04:f1:56:ac:7d:f9:f5:
b1:38:bc:6c:62:ec:27:46:9d:75:38:61:8a:6e:78:0a:04:1c:
dc:03:8e:36:f6:42:26:58:d7:29:f6:eb:26:9b:67:92:ac:30:
06:14:87:05:8b:ea:0c:e5:cc:32:0a:43:d2:76:62:b5:11:c0:
9a:09:71:80:59:63:a4:e3:ed:2a:1a:0e:0d:80:6a:36:a6:b0:
ea:b1:3d:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 05:00:57 2024 by rpki-client on console.sobornost.net