Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/ESOmWNaQZTEWJbEzR21rfFyGc5A.roa
File: ESOmWNaQZTEWJbEzR21rfFyGc5A.roa (raw, json)
Hash identifier: c9/1iZACiwlNezv3NssCzOdywS8meEvz6l/tFIyBO34=
Subject key identifier: 11:23:A6:58:D6:90:65:31:16:25:B1:33:47:6D:6B:7C:5C:86:73:90
Certificate issuer: /CN=83f8294469fb7aec2601bb03772d0156f470b74d
Certificate serial: 0185703048F1EE50FCA229889C017851DCF5
Authority key identifier: 83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/ESOmWNaQZTEWJbEzR21rfFyGc5A.roa
Signing time: Mon 02 Jan 2023 01:54:50 +0000
ROA not before: Mon 02 Jan 2023 01:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59884
IP address blocks: 185.67.213.0/24 maxlen: 24
185.67.212.0/24 maxlen: 24
185.67.212.0/22 maxlen: 22
185.67.214.0/24 maxlen: 24
185.67.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:48:f1:ee:50:fc:a2:29:88:9c:01:78:51:dc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f8294469fb7aec2601bb03772d0156f470b74d
Validity
Not Before: Jan 2 01:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1123a658d69065311625b133476d6b7c5c867390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:d8:45:59:8f:39:61:de:c5:bc:07:b6:ec:
0d:e4:04:14:f1:44:fa:fa:da:29:da:1a:3d:43:10:
4f:07:cf:10:7c:20:ea:b6:81:10:e5:d7:ce:f3:d7:
d4:a9:c2:e5:b5:de:67:b0:a1:54:08:ff:e5:47:f7:
f9:12:de:3c:b1:ad:28:09:74:3c:d7:3b:1a:fb:84:
3d:1e:ea:f4:2b:71:72:db:07:f0:c3:fb:53:f0:34:
27:a2:93:23:59:c4:92:50:31:63:e8:72:99:8a:82:
4b:37:ff:dd:52:42:b9:37:84:d6:c4:5e:69:9c:98:
8f:67:56:79:7d:f4:60:28:46:94:0a:6e:d1:29:9b:
ad:07:c7:a7:84:60:72:11:a5:fa:55:7b:89:26:bb:
57:2d:f4:d0:99:68:95:13:3f:4f:78:a6:40:bd:4e:
67:bf:a0:93:c0:20:a3:e7:dd:31:88:05:e9:f2:2d:
29:e4:65:42:8e:db:c6:a9:57:21:30:c2:81:a2:ae:
48:09:3d:db:79:d4:3f:89:b7:6c:1c:5f:a7:3d:6b:
9a:13:2e:30:fc:e5:cf:c3:03:e0:0c:00:15:b7:7f:
1b:93:e0:fb:49:d2:ca:2e:cf:e2:28:24:7f:32:57:
7a:de:6e:93:46:1f:6f:17:f7:fd:8f:bd:ab:f4:ae:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:23:A6:58:D6:90:65:31:16:25:B1:33:47:6D:6B:7C:5C:86:73:90
X509v3 Authority Key Identifier:
keyid:83:F8:29:44:69:FB:7A:EC:26:01:BB:03:77:2D:01:56:F4:70:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_gpRGn7euwmAbsDdy0BVvRwt00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/ESOmWNaQZTEWJbEzR21rfFyGc5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/861f32-81f4-4d64-8610-54de7a6cb3b1/1/g_gpRGn7euwmAbsDdy0BVvRwt00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.212.0/22
Signature Algorithm: sha256WithRSAEncryption
66:52:7c:86:c1:2b:17:2a:f4:e3:89:2e:a9:50:38:b3:5d:d0:
ea:2a:f5:e0:8e:17:16:64:27:30:0b:3e:c2:dc:ca:af:87:1e:
3a:7b:ff:fc:28:bc:09:73:61:ad:8b:74:57:c4:6f:d1:91:48:
48:cc:18:c5:37:e9:00:7a:16:e8:1a:e5:39:59:09:80:1e:b2:
8f:c9:98:94:cc:f3:da:1d:96:ae:0d:cd:e4:f0:e4:b6:eb:42:
93:2f:d2:0f:c6:95:cb:41:f6:b1:68:cb:00:cd:69:8c:bd:a8:
dd:7e:0a:28:c9:73:6b:17:68:60:bf:01:ee:36:75:f6:d7:34:
43:b7:c7:cb:6c:39:8c:c6:a1:78:fd:64:0d:24:07:28:71:3b:
03:17:89:aa:ea:00:32:04:94:b4:70:3a:0c:05:8d:dd:80:8f:
31:1f:83:96:c5:2f:61:27:fd:70:b3:2a:d7:8e:a0:6b:30:e4:
7e:49:2e:5d:66:29:3b:b5:40:ea:33:40:e4:f0:b4:17:53:a5:
00:c4:d3:1a:77:f0:62:28:cd:e6:98:fc:30:6a:3a:e0:25:21:
f2:cd:a3:98:a0:d6:1d:19:82:05:78:ba:0f:5a:e2:30:a3:b1:
85:ad:81:9d:5c:53:43:6a:95:df:62:06:9b:42:f1:0d:e5:75:
a3:9a:92:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwMEjx7lD8oimInAF4Udz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZjgyOTQ0NjlmYjdhZWMyNjAxYmIwMzc3MmQwMTU2ZjQ3
MGI3NGQwHhcNMjMwMTAyMDE1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTIzYTY1OGQ2OTA2NTMxMTYyNWIxMzM0NzZkNmI3YzVjODY3MzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw57YRVmPOWHexbwHtuwN5AQU8UT6
+top2ho9QxBPB88QfCDqtoEQ5dfO89fUqcLltd5nsKFUCP/lR/f5Et48sa0oCXQ8
1zsa+4Q9Hur0K3Fy2wfww/tT8DQnopMjWcSSUDFj6HKZioJLN//dUkK5N4TWxF5p
nJiPZ1Z5ffRgKEaUCm7RKZutB8enhGByEaX6VXuJJrtXLfTQmWiVEz9PeKZAvU5n
v6CTwCCj590xiAXp8i0p5GVCjtvGqVchMMKBoq5ICT3bedQ/ibdsHF+nPWuaEy4w
/OXPwwPgDAAVt38bk+D7SdLKLs/iKCR/Mld63m6TRh9vF/f9j72r9K6YGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEjpljWkGUxFiWxM0dta3xchnOQMB8GA1UdIwQY
MBaAFIP4KURp+3rsJgG7A3ctAVb0cLdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NjFmMzItODFmNC00ZDY0LTg2MTAt
NTRkZTdhNmNiM2IxLzEvRVNPbVdOYVFaVEVXSmJFelIyMXJmRnlHYzVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My84NjFmMzItODFmNC00ZDY0LTg2MTAtNTRkZTdhNmNiM2Ix
LzEvZ19ncFJHbjdldXdtQWJzRGR5MEJWdlJ3dDAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUPUMA0G
CSqGSIb3DQEBCwUAA4IBAQBmUnyGwSsXKvTjiS6pUDizXdDqKvXgjhcWZCcwCz7C
3Mqvhx46e//8KLwJc2Gti3RXxG/RkUhIzBjFN+kAehboGuU5WQmAHrKPyZiUzPPa
HZauDc3k8OS260KTL9IPxpXLQfaxaMsAzWmMvajdfgooyXNrF2hgvwHuNnX21zRD
t8fLbDmMxqF4/WQNJAcocTsDF4mq6gAyBJS0cDoMBY3dgI8xH4OWxS9hJ/1wsyrX
jqBrMOR+SS5dZik7tUDqM0Dk8LQXU6UAxNMad/BiKM3mmPwwajrgJSHyzaOYoNYd
GYIFeLoPWuIwo7GFrYGdXFNDapXfYgabQvEN5XWjmpJ6
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:08 2023 by rpki-client on console.sobornost.net