Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/DoSP7U25b2LrTDoFxOthpBL5x5M.roa
File: DoSP7U25b2LrTDoFxOthpBL5x5M.roa (raw, json)
Hash identifier: dLKQAfQA57TqJtEuHxbAdTT8nGolZX8kNJiYbXuw2v8=
Subject key identifier: 0E:84:8F:ED:4D:B9:6F:62:EB:4C:3A:05:C4:EB:61:A4:12:F9:C7:93
Certificate issuer: /CN=853a1db50ab771dcb529367dd951a67cacc48527
Certificate serial: 01856B0A2B59B298C9080834584E032787E9
Authority key identifier: 85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/DoSP7U25b2LrTDoFxOthpBL5x5M.roa
Signing time: Sun 01 Jan 2023 01:55:06 +0000
ROA not before: Sun 01 Jan 2023 01:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41332
IP address blocks: 194.127.252.0/23 maxlen: 24
194.145.112.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:0a:2b:59:b2:98:c9:08:08:34:58:4e:03:27:87:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853a1db50ab771dcb529367dd951a67cacc48527
Validity
Not Before: Jan 1 01:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e848fed4db96f62eb4c3a05c4eb61a412f9c793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:d7:f7:a0:2f:49:fc:38:b8:a0:f7:d8:12:
eb:9e:d7:3b:41:1c:7c:21:27:2c:df:80:2f:9b:d8:
e3:0b:2d:81:ed:dc:e9:85:6d:b0:81:b3:d2:78:de:
82:35:09:43:fb:cc:dd:78:27:43:5f:d3:bc:4c:3f:
dc:21:ed:31:3d:8e:d1:50:6e:ed:bd:35:a1:63:e9:
45:b2:a3:4c:11:15:b5:5b:25:14:78:ec:b2:a8:47:
88:79:64:1a:de:da:e6:4a:f2:c7:48:cd:bc:82:4b:
46:a5:8a:ad:de:56:70:1a:12:09:c2:03:1c:c1:9a:
c6:e7:68:27:84:f3:70:86:0e:bf:0d:50:42:8c:69:
7e:e6:f4:d6:de:ff:88:e2:71:f5:02:8a:8a:d6:6f:
a9:b4:0d:d3:b7:97:b8:d0:2c:16:5e:89:f2:34:f4:
0a:94:88:fb:f1:93:ee:88:36:12:26:f7:5e:c6:b9:
90:c0:6a:d6:6a:26:f6:00:0e:ca:90:3e:4f:a6:4a:
3c:d1:ad:e5:0c:78:57:22:25:38:1e:c4:ca:b7:d2:
aa:19:f9:e8:f4:c0:22:f4:cc:93:b0:84:1b:2b:1f:
3e:fe:80:83:b6:e3:57:45:6e:38:c4:ce:84:e5:be:
0f:9e:c0:3b:8c:3d:ad:4c:4a:a0:42:0f:bb:3a:c3:
10:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:84:8F:ED:4D:B9:6F:62:EB:4C:3A:05:C4:EB:61:A4:12:F9:C7:93
X509v3 Authority Key Identifier:
keyid:85:3A:1D:B5:0A:B7:71:DC:B5:29:36:7D:D9:51:A6:7C:AC:C4:85:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTodtQq3cdy1KTZ92VGmfKzEhSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/DoSP7U25b2LrTDoFxOthpBL5x5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/dc66f3-8ac9-41b9-8eb8-77295c9ce866/1/hTodtQq3cdy1KTZ92VGmfKzEhSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.252.0/23
194.145.112.0/23
Signature Algorithm: sha256WithRSAEncryption
15:0a:69:5c:ae:32:ab:d6:37:eb:46:98:ed:45:52:a8:f9:66:
54:32:4b:b7:ac:9d:69:ab:e0:2a:ac:61:19:80:bb:e2:e3:d4:
20:b2:99:9a:f5:0a:13:0a:25:61:b8:ba:34:e8:80:1d:d4:ee:
1b:1e:91:52:09:03:45:ba:e1:d3:a5:8f:46:85:6b:d4:46:14:
5b:07:3c:43:8b:64:d9:7c:81:5b:eb:d8:eb:ef:f4:0d:16:bf:
6c:a2:47:46:f0:88:72:81:99:0b:9e:c0:d0:7d:8b:4e:32:0b:
56:ed:85:b1:af:dc:d8:b9:83:8b:8b:2a:c9:fd:10:5b:37:3b:
fd:66:87:57:ba:ce:bb:05:c1:81:6a:67:99:55:42:01:36:bf:
15:fc:1c:92:c0:6e:d1:15:c4:b5:ac:83:5f:9b:db:de:4e:db:
e1:47:69:7d:b4:65:12:ed:ba:16:48:f4:a7:83:3d:8f:40:35:
81:a8:25:de:01:59:15:fb:eb:70:6a:9c:d2:bf:db:87:1c:c8:
91:73:c2:ae:0b:d3:e6:55:60:14:8e:72:07:4d:e8:d3:22:ec:
8f:e5:e1:76:ff:84:36:9a:e8:a6:20:b2:27:a0:6a:7b:c5:3a:
9f:31:12:b9:7e:5f:88:60:c2:b6:a2:06:cb:70:70:c7:b3:1a:
16:a2:eb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:48 2024 by rpki-client on console.sobornost.net