Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/GKK3iYmGJ_MryBk1RsWQcm5_cXk.roa
File: GKK3iYmGJ_MryBk1RsWQcm5_cXk.roa (raw, json)
Hash identifier: dGPbm5kdmJYf6DzZ/H4FcDHXrOkdv5ST0Af+/Fjl100=
Subject key identifier: 18:A2:B7:89:89:86:27:F3:2B:C8:19:35:46:C5:90:72:6E:7F:71:79
Certificate issuer: /CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Certificate serial: 01856DC1BA1C7F1553BB2A85BC799411A38B
Authority key identifier: 2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/GKK3iYmGJ_MryBk1RsWQcm5_cXk.roa
Signing time: Sun 01 Jan 2023 14:34:50 +0000
ROA not before: Sun 01 Jan 2023 14:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30781
IP address blocks: 185.116.63.0/24 maxlen: 24
185.65.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:ba:1c:7f:15:53:bb:2a:85:bc:79:94:11:a3:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Validity
Not Before: Jan 1 14:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18a2b789898627f32bc8193546c590726e7f7179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:3f:56:f4:81:ed:87:7a:f3:86:26:0a:6d:
d0:53:68:49:ef:2f:29:e1:c6:34:e7:d6:e1:79:45:
ca:59:f4:2a:f8:aa:47:8b:9e:73:ea:b3:fd:7b:d2:
a4:91:09:e8:5c:9b:b8:ab:a0:15:6e:17:a4:ee:9c:
be:ea:b6:1e:65:f8:18:54:65:49:79:36:61:43:49:
db:d6:2b:fc:d7:be:8e:f2:a0:b6:7c:82:04:6c:2a:
19:2b:75:20:27:75:f2:75:1e:cc:9f:63:d4:ac:6c:
1f:86:22:b1:4b:e3:c2:09:b2:55:45:bd:2f:c4:14:
cd:6d:59:70:94:62:67:ea:99:78:0f:df:8c:1c:a3:
b3:af:00:b0:f2:5e:39:93:3c:d7:a7:2b:16:c7:d2:
a9:eb:b7:24:ff:30:06:0f:c7:cc:27:5b:fa:34:a2:
b6:5e:b6:3e:03:70:81:78:d3:e9:b2:6c:ab:6a:f6:
b8:4f:a2:27:63:59:01:99:3c:3d:b6:0a:6b:7b:c5:
17:34:50:7c:88:04:81:58:0d:d5:c6:a1:a9:ac:6a:
21:14:0e:c3:69:76:ae:da:00:e6:83:d1:ce:9e:b6:
0e:56:38:a5:bc:80:b8:15:89:81:94:5a:28:d5:c0:
77:7c:c0:48:63:47:1b:ae:9a:be:b0:38:d9:16:c3:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A2:B7:89:89:86:27:F3:2B:C8:19:35:46:C5:90:72:6E:7F:71:79
X509v3 Authority Key Identifier:
keyid:2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/GKK3iYmGJ_MryBk1RsWQcm5_cXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.79.0/24
185.116.63.0/24
Signature Algorithm: sha256WithRSAEncryption
80:86:2a:bf:79:85:54:7f:4e:7c:0e:6a:20:a9:7f:98:e2:cb:
72:26:62:c1:3d:2b:5b:29:53:7e:4c:c2:d0:21:79:37:27:a6:
05:db:bd:21:76:6a:0c:48:9c:0b:77:94:46:eb:f4:71:0e:31:
5f:1f:fc:64:d5:5e:79:aa:54:d9:4c:02:44:79:86:80:09:fe:
3e:6f:9f:f9:1d:ee:99:b0:9a:0c:20:e3:c9:d7:81:67:ca:b7:
fe:d1:d8:a4:e6:59:f3:78:1b:f4:03:24:d7:a0:3f:c2:78:ba:
63:22:5a:2b:2f:95:86:d2:dc:16:1f:14:d8:f6:92:7c:a7:ee:
e6:4c:09:48:c5:59:2c:47:b0:14:5f:ba:c1:6d:0d:00:3e:59:
6b:26:4c:5e:00:f5:02:da:33:b8:f8:81:ce:68:b8:5e:29:7c:
4b:5f:90:f1:b2:68:29:aa:61:1d:4f:5e:4e:d7:ff:47:ef:f8:
2a:1a:37:07:07:d0:2d:21:ca:a6:af:ae:4d:74:02:f8:82:2d:
c2:82:a8:1a:46:c0:63:ce:37:bb:db:ce:f8:5f:72:28:42:b7:
28:b9:bb:17:1f:c6:f0:cd:b5:67:2f:00:35:78:fa:4b:b0:07:
7a:7c:8a:d6:24:54:9c:3d:5d:37:7d:01:df:90:78:7d:7b:c7:
0a:0e:95:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:39 2024 by rpki-client on console.sobornost.net