Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/Kw6GKHkeN2OA0AjY2qoqcPTILec.roa
File: Kw6GKHkeN2OA0AjY2qoqcPTILec.roa (raw, json)
Hash identifier: cobz3L2VxWlSkCttmGFgGqynMkiCecu9VKUdJPhvCx8=
Subject key identifier: 2B:0E:86:28:79:1E:37:63:80:D0:08:D8:DA:AA:2A:70:F4:C8:2D:E7
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 018B14D04CE56D0E8015B788B23CA9BA0B86
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/Kw6GKHkeN2OA0AjY2qoqcPTILec.roa
Signing time: Mon 09 Oct 2023 14:21:17 +0000
ROA not before: Mon 09 Oct 2023 14:21:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48199
IP address blocks: 212.42.48.0/22 maxlen: 22
212.42.56.0/22 maxlen: 22
212.42.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:d0:4c:e5:6d:0e:80:15:b7:88:b2:3c:a9:ba:0b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Oct 9 14:21:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b0e8628791e376380d008d8daaa2a70f4c82de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8c:85:a4:62:36:d7:24:a0:c4:8e:11:b1:ff:
30:74:4d:f1:b2:06:d7:b3:3c:4a:6c:1e:dd:69:30:
87:3b:29:ec:d8:a3:bc:4b:1d:cc:00:96:7d:03:f8:
cc:b1:3b:00:3e:07:35:89:24:cf:13:64:e2:b7:8d:
94:8a:e1:48:dd:e3:b0:6d:54:a1:0a:12:13:cf:47:
d8:e5:5c:05:29:2e:fd:47:92:3b:a7:05:47:9f:4e:
ae:17:1f:9f:dc:07:52:ae:d8:15:53:31:21:a6:a8:
26:49:0e:18:11:c5:c0:8a:67:75:2a:4e:15:eb:7c:
74:3b:23:ae:3c:ec:c1:82:97:6f:c4:5a:38:65:74:
a4:89:bc:ba:f4:e2:85:25:63:30:29:65:eb:37:f5:
39:9f:25:ab:41:1e:81:f7:86:32:71:1f:8f:d1:31:
5b:ba:b7:5a:45:17:9b:21:e0:a0:3d:42:3d:74:cd:
df:4e:ba:c1:14:88:33:8e:08:38:4f:fc:a4:30:ff:
4c:ed:d1:34:2d:19:20:d3:82:84:82:60:52:62:e9:
db:83:76:3d:1a:6a:8c:ef:26:a7:fa:39:bd:42:bf:
86:b8:5b:de:f9:4c:ce:1a:ce:a1:bd:b1:aa:c9:f5:
3d:e6:b8:0e:8d:39:d8:29:51:7a:e3:f0:f5:a7:4f:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:0E:86:28:79:1E:37:63:80:D0:08:D8:DA:AA:2A:70:F4:C8:2D:E7
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/Kw6GKHkeN2OA0AjY2qoqcPTILec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.42.48.0-212.42.52.255
212.42.56.0/22
Signature Algorithm: sha256WithRSAEncryption
39:a6:6f:97:e9:15:40:b9:f9:71:c1:c6:24:48:a6:da:bd:5b:
06:94:49:79:14:ba:a2:6f:33:d0:82:af:45:04:ca:bc:fa:15:
98:a2:52:06:26:5f:c0:e4:cc:b2:e4:32:a8:e2:6b:7b:3e:a2:
9f:7b:8c:42:02:92:fe:d8:65:b7:fb:5e:0e:08:ac:f9:be:59:
42:dd:40:14:a5:81:39:3d:bd:77:ea:47:97:9e:39:c3:c4:4f:
28:6c:ca:f1:0b:46:43:48:fc:18:2b:55:58:dd:4a:f7:d1:fd:
dd:91:66:80:8a:70:dd:21:a7:0c:c8:7e:da:1a:ea:99:d7:10:
13:df:0c:0b:40:08:82:8a:55:23:ed:d1:66:d8:23:51:31:fc:
bb:a3:60:b0:80:f8:1b:7a:6b:9b:b9:24:f8:b6:06:e3:45:6c:
17:33:b4:d7:43:be:54:0c:13:14:db:36:59:c8:cf:2c:42:32:
50:9d:94:f2:56:36:e1:71:69:27:06:4c:22:c3:ca:0f:17:65:
f0:bc:31:06:ab:23:89:a5:48:d7:f5:4e:f0:7f:15:7c:c6:ff:
3d:fa:c5:6c:8d:74:37:98:f3:da:52:50:39:3b:7d:b0:b3:ea:
2e:c6:cc:cc:af:ef:08:00:48:1f:ac:66:a9:30:c3:87:41:79:
2c:34:4a:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 18:01:21 2024 by rpki-client on console.sobornost.net