Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/DTE4uOe7CecX5d1mRY4p2boorZ8.roa
File: DTE4uOe7CecX5d1mRY4p2boorZ8.roa (raw, json)
Hash identifier: oKbo7b2w2KmI1WLkHcX8Ya+iliB8v5FQWy3sUTcowpw=
Subject key identifier: 0D:31:38:B8:E7:BB:09:E7:17:E5:DD:66:45:8E:29:D9:BA:28:AD:9F
Certificate issuer: /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial: 0189C75057B0B85E7EA6D0DDFB661CFBB67B
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/DTE4uOe7CecX5d1mRY4p2boorZ8.roa
Signing time: Sat 05 Aug 2023 20:07:58 +0000
ROA not before: Sat 05 Aug 2023 20:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 46.162.2.0/24 maxlen: 24
46.162.4.0/24 maxlen: 24
46.162.5.0/24 maxlen: 24
46.162.6.0/24 maxlen: 24
46.162.40.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c7:50:57:b0:b8:5e:7e:a6:d0:dd:fb:66:1c:fb:b6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Validity
Not Before: Aug 5 20:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d3138b8e7bb09e717e5dd66458e29d9ba28ad9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:a0:f5:fc:df:c4:87:c0:11:18:e7:eb:ec:
e1:e8:79:f8:1d:3a:df:72:c8:ad:65:49:72:74:0f:
2a:ac:c5:d6:be:90:11:c1:3c:0b:33:80:2f:a7:0a:
8e:bf:ab:bb:1a:84:d6:96:40:26:c2:bc:14:2d:50:
1c:1a:36:4f:bb:73:83:57:fe:e9:58:1a:00:3b:18:
d8:eb:3e:43:36:23:54:dd:82:1d:8f:c3:45:d4:8d:
5c:b6:06:35:42:72:ea:94:71:56:04:63:7c:6d:01:
3f:d8:a2:9a:31:8f:36:54:13:fb:b1:6d:9b:ee:7d:
9d:e2:8f:48:14:aa:84:3c:35:53:52:8a:48:56:cb:
56:a6:27:1e:70:33:0e:67:1e:db:bc:33:11:d3:cb:
d5:20:f6:4a:33:d5:6e:b0:fe:33:f5:80:79:a9:51:
ac:ac:c1:7e:ee:15:25:fc:24:9a:4d:e9:31:02:8e:
49:b8:b7:d1:8a:bb:98:23:0f:65:3e:ef:66:1a:37:
84:33:20:1a:4d:de:51:82:5a:82:bb:1b:e4:26:39:
d2:5c:98:c1:32:8e:06:33:14:3f:76:3a:31:92:b8:
87:a7:10:29:87:a9:fc:7d:4e:f0:04:12:f6:62:a1:
39:ee:9f:0c:5e:92:c8:c5:e6:2b:9e:f9:e8:b9:ab:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:38:B8:E7:BB:09:E7:17:E5:DD:66:45:8E:29:D9:BA:28:AD:9F
X509v3 Authority Key Identifier:
keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/DTE4uOe7CecX5d1mRY4p2boorZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.162.2.0/24
46.162.4.0-46.162.6.255
46.162.40.0/22
Signature Algorithm: sha256WithRSAEncryption
97:4a:f8:71:12:f1:b3:02:f3:05:18:1f:bd:61:ac:fc:4e:23:
3e:5d:4d:54:25:5c:0f:31:68:57:6a:7c:50:cd:3d:f9:7d:6f:
b0:03:bf:f6:7d:b4:9c:e7:c4:ae:e9:a5:e7:8c:f4:6a:96:71:
ac:bd:b7:98:2c:92:e5:ec:69:6e:6d:c3:0d:eb:03:8b:b6:d5:
98:13:a4:8b:1a:0d:0d:1f:6b:51:d8:32:1a:d4:00:da:c5:48:
99:14:1d:72:ee:98:48:3a:83:dd:a4:58:7e:cf:41:a5:f0:fe:
fc:dc:93:cf:ef:3c:4b:0e:0c:03:7d:98:ca:56:74:f8:46:26:
63:34:1b:de:86:9f:52:e7:85:8d:7c:d6:7d:c8:18:6a:2f:0f:
b9:76:b0:0e:f1:30:5f:bf:66:2b:6c:fb:6b:50:85:0f:42:38:
04:06:be:6a:f6:1e:26:5f:0e:36:71:f0:42:eb:54:37:e6:72:
c9:7e:d7:05:77:2b:ad:d3:51:3d:35:4c:6b:85:73:e3:25:06:
73:89:89:1b:2c:22:d7:1b:b9:3a:93:83:85:02:32:8a:44:f5:
eb:56:d2:d6:e1:5a:00:62:5b:70:7d:25:e3:36:9c:b9:e4:a4:
7d:37:a7:3b:a1:42:9f:1e:64:09:06:3f:33:4a:78:4c:2e:56:
55:a2:59:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:05 2023 by rpki-client on console.sobornost.net