Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/Dq-61_pBu7rmmh9Ik_IKuCzNH9E.roa
File: Dq-61_pBu7rmmh9Ik_IKuCzNH9E.roa (raw, json)
Hash identifier: dHD4LZsW+xcvY6eemmKmSTKAjD1hzCdbkCWl8na8+eE=
Subject key identifier: 0E:AF:BA:D7:FA:41:BB:BA:E6:9A:1F:48:93:F2:0A:B8:2C:CD:1F:D1
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 01856B8A21051EC1DA26A9A8A5343695CCEB
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/Dq-61_pBu7rmmh9Ik_IKuCzNH9E.roa
Signing time: Sun 01 Jan 2023 04:14:52 +0000
ROA not before: Sun 01 Jan 2023 04:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9051
IP address blocks: 185.192.160.0/22 maxlen: 24
46.19.192.0/21 maxlen: 24
2a0a:2d40::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:21:05:1e:c1:da:26:a9:a8:a5:34:36:95:cc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Jan 1 04:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0eafbad7fa41bbbae69a1f4893f20ab82ccd1fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a5:20:37:05:73:d7:ba:d1:0e:9c:e3:8c:53:
a7:3d:15:0e:f6:4f:9e:a5:81:80:02:44:ff:d2:9f:
5a:c2:b1:0e:69:94:25:09:87:01:17:d2:8c:93:a3:
bd:8d:0c:97:b9:66:61:34:c4:0a:43:4b:4c:76:06:
8d:a0:bf:6a:c4:9c:08:4c:1f:b7:b1:9b:fa:28:7e:
44:c9:e0:a5:04:b8:42:42:2e:07:39:40:6a:9a:3d:
5c:cf:84:95:44:a7:8b:63:e8:ea:49:e7:1b:e9:5a:
69:87:26:79:bc:14:70:b3:d8:16:3c:6d:dd:b7:f2:
b9:a5:83:6f:46:8f:21:02:2b:a9:6e:94:02:b2:a6:
90:0e:87:13:25:e6:43:e8:5f:aa:17:48:d3:fc:f4:
37:d4:23:43:ba:3e:6e:b4:e4:0f:f8:27:7b:03:a7:
dd:2f:29:bf:96:97:7d:bc:f3:96:3a:e8:7a:fa:0a:
29:e7:8d:37:39:67:a7:f7:a8:16:f4:c7:47:16:e7:
f0:38:69:19:ff:8b:ea:ea:f8:eb:bd:1c:21:02:e9:
01:0d:35:42:76:b9:df:83:ed:57:3e:0b:9a:0a:1a:
5e:1b:63:92:98:75:7d:b1:4a:af:cf:4f:54:12:66:
c1:d7:14:c6:66:54:2f:1d:5c:9e:8b:4c:bc:55:b2:
dd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AF:BA:D7:FA:41:BB:BA:E6:9A:1F:48:93:F2:0A:B8:2C:CD:1F:D1
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/Dq-61_pBu7rmmh9Ik_IKuCzNH9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.192.0/21
185.192.160.0/22
IPv6:
2a0a:2d40::/29
Signature Algorithm: sha256WithRSAEncryption
45:3b:27:4f:bc:98:cf:c4:63:28:03:f2:4b:a8:74:43:ae:d2:
4c:11:2c:cb:f1:2f:a0:f2:95:e4:56:d1:88:e5:68:01:9a:1d:
d1:33:cf:dd:1e:2e:48:ac:ac:3b:3e:86:6b:26:5b:d0:fb:34:
8d:82:d8:8f:3c:a3:94:00:7d:6f:82:95:8a:b8:0e:a3:29:19:
6d:c7:6c:3f:4c:7b:8c:1c:d5:1a:1f:80:e0:00:c2:75:74:0a:
9e:05:10:b0:8a:68:a2:3e:d9:c4:96:6b:25:3b:ce:02:eb:5d:
ee:c9:73:55:ee:29:d3:9a:c0:3b:6f:83:fd:1e:72:2e:f0:9b:
dc:ce:9c:ed:24:ff:d6:aa:f2:70:f1:e2:3d:47:90:e5:12:33:
84:35:7e:f6:07:54:02:fc:12:1b:d3:40:ff:f5:92:c9:8f:3d:
e2:3a:e5:3b:95:80:3f:9d:79:10:15:a0:d2:95:d3:74:54:e2:
35:70:04:07:4c:ee:6e:b4:cf:c0:76:57:54:45:09:a4:55:4b:
c2:a0:8f:91:be:e5:76:06:b0:cc:0f:8b:c6:dd:df:b6:4e:8e:
76:23:ed:dd:b7:6e:03:27:26:44:4d:d4:24:6b:5d:f5:48:5d:
f3:e6:05:b3:48:a5:dd:92:97:c7:92:61:21:5e:b5:00:cc:a9:
25:72:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:57 2024 by rpki-client on console.sobornost.net