Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/c__RLev41B9NFAcLMQnis7cIuh0.roa
File: c__RLev41B9NFAcLMQnis7cIuh0.roa (raw, json)
Hash identifier: of55FFh92VQD3w6m3lfbJyL0lH8sTH8V0RqObmtwEq4=
Subject key identifier: 73:FF:D1:2D:EB:F8:D4:1F:4D:14:07:0B:31:09:E2:B3:B7:08:BA:1D
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 01856B8A219FD0696116424E3789B6A5FAFA
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/c__RLev41B9NFAcLMQnis7cIuh0.roa
Signing time: Sun 01 Jan 2023 04:14:52 +0000
ROA not before: Sun 01 Jan 2023 04:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24634
IP address blocks: 185.192.160.0/22 maxlen: 24
46.19.192.0/21 maxlen: 24
2a0a:2d40::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:21:9f:d0:69:61:16:42:4e:37:89:b6:a5:fa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Jan 1 04:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73ffd12debf8d41f4d14070b3109e2b3b708ba1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:77:32:d5:ef:d9:05:77:7b:70:3a:9f:eb:
47:24:b3:ec:13:4a:db:7b:0a:4d:8b:fb:20:9a:5c:
d2:24:85:9e:56:ca:95:b8:8c:ee:b0:e3:ab:31:1c:
26:cc:74:27:79:7a:da:89:12:84:ca:6c:36:0e:cc:
ea:25:6b:4c:af:c6:47:40:d4:d5:3f:69:ba:7f:21:
fc:58:53:c1:f9:8b:ca:d1:c6:f1:6b:23:e7:f2:6f:
cc:19:5f:ac:10:b1:91:28:67:53:db:e8:fe:5e:19:
11:5b:07:1e:f7:5d:39:05:6c:fc:57:ed:59:07:60:
dd:74:7d:d7:4b:db:e6:6c:e2:eb:e0:c4:a6:e3:e1:
97:5d:5e:38:77:0c:05:97:55:13:a2:16:be:c6:be:
5f:d1:bd:99:36:77:a2:b3:1d:62:c7:02:e3:10:76:
db:83:e3:b8:69:b9:14:67:fa:02:c9:ab:34:5b:01:
d1:1f:a5:8b:83:7e:53:72:cb:5e:70:c0:71:dd:7e:
72:46:eb:5f:3e:b6:0e:59:c8:2d:67:51:a8:fe:80:
be:11:45:42:0d:2b:7e:05:72:27:c1:41:f4:2a:85:
cd:eb:bf:16:a4:bb:ae:6b:09:27:d8:de:e1:4c:f9:
71:4d:a0:ef:49:70:06:4c:51:09:16:65:8d:b6:49:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FF:D1:2D:EB:F8:D4:1F:4D:14:07:0B:31:09:E2:B3:B7:08:BA:1D
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/c__RLev41B9NFAcLMQnis7cIuh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.192.0/21
185.192.160.0/22
IPv6:
2a0a:2d40::/29
Signature Algorithm: sha256WithRSAEncryption
45:b0:4f:d1:e5:ba:6d:aa:a1:b5:8c:8a:86:e7:e9:03:6c:44:
15:8b:64:d2:6d:dd:84:a3:e5:44:42:65:d3:39:ec:90:d5:2e:
4e:76:05:a4:6a:da:da:d0:d8:65:41:de:3c:19:92:ea:cc:78:
20:bb:a0:da:1a:9d:a8:44:cc:95:6d:10:7d:7a:a9:17:f9:b6:
8a:98:0c:0c:10:00:5c:e7:23:85:bd:aa:b7:6e:fe:86:d5:93:
ce:6b:3b:19:ed:32:1e:a0:c7:7b:53:96:5c:15:d2:29:d9:82:
32:db:2c:18:d9:e2:12:63:61:3a:ae:ff:20:75:40:cd:b2:57:
08:2b:b8:58:b0:12:02:83:c9:08:58:79:e1:83:68:6b:28:50:
ea:cd:bf:fa:7c:f2:ed:a7:c7:c0:92:75:4f:d9:e7:64:32:0f:
be:fd:d0:4c:fb:9a:4d:52:d4:e1:1b:75:9e:3d:15:c0:fa:d2:
4b:ef:cc:8d:1a:68:ed:42:fc:bf:35:7f:68:cf:a3:e5:73:34:
b1:41:a7:15:4e:77:39:94:c2:37:e9:09:90:a2:49:f2:b4:12:
da:a6:cc:aa:ed:2d:2a:54:90:11:ef:7a:b8:f5:e1:39:89:75:
0c:e6:17:b9:31:e8:28:d5:b4:b0:07:d3:fe:1b:62:52:33:68:
3a:6b:45:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:47 2024 by rpki-client on console-ams.rpki-client.org