Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/63gLYDvAE4D4YF-_AdoTvgojnJA.roa
File: 63gLYDvAE4D4YF-_AdoTvgojnJA.roa (raw, json)
Hash identifier: 7J/8DxuT68rk5oEFku8vTDHsaHZkpaCkcD8VDxeCMfY=
Subject key identifier: EB:78:0B:60:3B:C0:13:80:F8:60:5F:BF:01:DA:13:BE:0A:23:9C:90
Certificate issuer: /CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Certificate serial: 0185724C6B3CEA365187C8559A23EC6D9A29
Authority key identifier: 28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/63gLYDvAE4D4YF-_AdoTvgojnJA.roa
Signing time: Mon 02 Jan 2023 11:44:48 +0000
ROA not before: Mon 02 Jan 2023 11:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208972
IP address blocks: 146.19.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:6b:3c:ea:36:51:87:c8:55:9a:23:ec:6d:9a:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Validity
Not Before: Jan 2 11:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb780b603bc01380f8605fbf01da13be0a239c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:1c:01:90:7b:78:8d:3a:d9:b9:4f:0a:72:
1e:3e:43:f0:b2:fe:bb:31:04:f8:79:89:c0:56:0e:
93:95:06:71:91:11:d4:35:ad:fb:14:4f:ec:da:6d:
95:09:fc:fa:70:f5:d2:60:fd:b3:6f:90:76:86:4d:
ac:f1:0c:1a:bb:4a:67:f2:0f:33:26:88:6c:25:2c:
ec:2b:34:23:ef:b2:36:7c:34:d1:b3:9b:45:8c:16:
b9:9a:8c:4e:f5:be:67:07:0f:c4:0e:39:cd:16:72:
c6:c1:a7:5b:7e:70:99:93:a2:db:ae:b1:e1:68:93:
69:ba:98:d3:9a:c5:e5:61:8d:ee:c4:69:6a:75:bf:
ce:0e:a7:8c:d0:3a:30:79:7d:a8:90:1b:41:21:38:
98:f5:bb:70:48:18:fd:20:22:23:01:91:98:56:c8:
d9:57:8e:3e:67:c7:ef:13:f7:79:0b:e0:81:3f:53:
1f:2e:b2:e8:64:cd:10:f3:e4:b0:76:1e:0c:db:97:
ed:b8:a4:1f:e5:50:4f:ed:59:2a:dc:94:cd:2e:e4:
7a:4b:54:d2:61:c5:4a:68:dc:17:e6:50:09:45:62:
a3:c3:09:08:b2:b2:a2:21:2f:3f:c7:e1:e2:db:4e:
e7:b2:c3:ed:85:6e:39:86:1f:5b:91:3b:b1:7d:45:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:78:0B:60:3B:C0:13:80:F8:60:5F:BF:01:DA:13:BE:0A:23:9C:90
X509v3 Authority Key Identifier:
keyid:28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/63gLYDvAE4D4YF-_AdoTvgojnJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.12.0/24
Signature Algorithm: sha256WithRSAEncryption
65:06:93:3e:c1:64:e9:9e:a7:2f:c1:b0:ce:04:0a:0e:59:ba:
0e:0a:30:4d:79:69:75:be:0a:db:1f:f4:b1:33:08:23:e3:05:
38:99:a1:c4:e4:d0:d2:bc:62:45:c1:7d:e3:16:af:2f:4a:09:
4f:90:ec:d8:0a:9b:e4:37:98:c4:89:c8:0e:a8:cc:a7:64:c7:
56:f2:41:a6:e6:f6:c2:fb:18:78:a1:57:fc:0c:10:48:75:62:
de:72:c6:59:bb:cf:a4:c3:80:37:0c:5a:0c:d8:4f:7a:8b:dc:
c1:df:3d:2a:0f:1f:9d:3f:85:bf:2c:ef:a6:db:fc:fe:8a:2a:
05:d4:6f:44:e8:2f:3a:2f:67:c3:a1:f9:68:fe:51:fd:d7:d1:
5f:76:2c:97:17:3d:b1:dd:10:34:a8:af:95:45:18:4d:43:ba:
fe:23:2e:7b:de:e1:1f:6c:0e:d8:25:18:92:76:68:29:5e:1c:
cf:aa:87:8d:a8:64:e0:a4:d5:3e:6d:bf:08:3e:e3:89:97:b5:
fb:ba:5a:54:79:1c:07:a3:2c:14:ea:27:a2:1c:f8:b6:80:a4:
e3:73:84:92:23:03:bc:c3:61:b6:e4:e1:d4:d3:6f:b5:6e:7f:
8c:73:b2:86:65:5b:08:90:da:fa:e8:14:fd:45:bf:2d:cd:cc:
f9:31:69:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:29 2024 by rpki-client on console.sobornost.net