Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/dgwMhH0qG1wC6D30zXAZVydSg_0.roa
File: dgwMhH0qG1wC6D30zXAZVydSg_0.roa (raw, json)
Hash identifier: AFs5Rkk7nnLiIB34v9tN9kcroHH4t9i1VBFYGvCIyjk=
Subject key identifier: 76:0C:0C:84:7D:2A:1B:5C:02:E8:3D:F4:CD:70:19:57:27:52:83:FD
Certificate issuer: /CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Certificate serial: 01856DC1BB379FFBDB07C308E2CDA116C3EB
Authority key identifier: 2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/dgwMhH0qG1wC6D30zXAZVydSg_0.roa
Signing time: Sun 01 Jan 2023 14:34:50 +0000
ROA not before: Sun 01 Jan 2023 14:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207719
IP address blocks: 185.116.63.0/24 maxlen: 24
185.65.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:bb:37:9f:fb:db:07:c3:08:e2:cd:a1:16:c3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Validity
Not Before: Jan 1 14:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=760c0c847d2a1b5c02e83df4cd701957275283fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:68:7a:73:56:6d:5e:e7:52:90:79:b7:a5:06:
ee:63:15:e7:83:c7:b3:30:8c:db:a4:ef:8b:3c:dc:
a4:90:cb:da:8d:2f:09:1a:4f:28:d1:91:9b:75:da:
cf:e3:bc:d6:9c:dc:83:03:34:31:a7:66:3e:c0:bc:
be:90:3c:9f:68:65:ba:6f:8b:d3:02:64:a6:57:62:
1b:72:ad:1a:53:0c:94:7c:31:3b:8a:59:b1:9e:60:
98:18:9b:28:38:1e:43:b3:5e:cb:eb:11:61:0f:a4:
0c:47:1f:ac:20:58:a6:90:92:15:6e:0b:81:fc:41:
6d:ca:66:3d:25:0d:bf:0c:68:2c:b7:0d:51:78:47:
df:91:6a:f6:12:b5:07:66:a9:9f:8e:58:ba:d5:b1:
f2:b0:13:0b:5b:58:18:ee:73:eb:45:bb:34:85:1a:
56:95:b6:2e:ce:4e:17:d6:ea:44:41:09:1f:8b:50:
13:99:4b:05:db:c9:d0:20:1b:49:cd:e2:2b:be:3b:
75:cf:c8:c7:b6:ae:c3:0c:fe:92:33:00:1e:51:0d:
6b:af:01:4b:ed:39:6c:f8:69:c2:02:87:bf:3c:36:
ec:5a:74:37:0e:91:86:3f:2e:14:49:5c:a3:ff:cf:
b1:6e:8f:f5:76:15:90:7b:94:3d:06:a3:b2:2a:88:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0C:0C:84:7D:2A:1B:5C:02:E8:3D:F4:CD:70:19:57:27:52:83:FD
X509v3 Authority Key Identifier:
keyid:2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/dgwMhH0qG1wC6D30zXAZVydSg_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.79.0/24
185.116.63.0/24
Signature Algorithm: sha256WithRSAEncryption
67:9f:65:9e:a3:d1:cd:8c:34:7b:b3:27:77:78:0c:d6:67:40:
6f:34:a3:78:cb:0d:c2:3f:00:fa:f4:da:36:32:42:0f:6f:bc:
8f:96:c4:e0:7d:0a:4d:fe:0a:64:53:03:9f:13:ad:01:50:6b:
a2:f7:75:3f:d4:a1:48:56:47:75:bc:88:bc:89:40:a1:52:7c:
2e:3d:9c:7c:9c:74:03:12:51:44:6a:a5:29:80:54:9b:aa:02:
04:cd:c7:61:dd:0d:6f:f5:a0:ec:ce:c6:56:6c:d1:1c:70:a5:
6a:3b:a3:dd:26:1c:9f:5b:24:dd:ac:91:89:10:61:13:6d:b9:
fe:f9:82:e0:51:81:09:c5:ca:46:4b:83:b6:6c:a7:75:24:8e:
68:5c:8e:33:95:66:f1:dd:33:5a:d3:ab:40:7f:e5:02:25:7c:
54:0c:0b:0e:39:0d:39:43:c2:8f:e9:00:43:b2:b9:15:46:5f:
18:23:b4:de:eb:11:05:22:2a:44:f1:91:35:3b:05:27:fa:8b:
85:24:ef:83:05:d6:cb:60:d9:3f:25:ba:d4:d9:99:2a:c5:93:
72:ea:f9:dc:f7:45:a2:9e:0c:28:f5:26:12:9b:24:88:9c:ae:
51:2b:72:a7:c9:56:15:15:c0:f9:f5:22:f4:c8:12:f6:8d:f4:
0e:6c:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:39 2024 by rpki-client on console.sobornost.net