Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/6pPu1gqZuJ0n0DmxxmV-oBFbW5o.roa
File: 6pPu1gqZuJ0n0DmxxmV-oBFbW5o.roa (raw, json)
Hash identifier: d4WVgsPleacL9cbr8cVQ1hTXAyJ08ZG8MKqPZSClECY=
Subject key identifier: EA:93:EE:D6:0A:99:B8:9D:27:D0:39:B1:C6:65:7E:A0:11:5B:5B:9A
Certificate issuer: /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial: 018810497436827880656517F37346BCE26C
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/6pPu1gqZuJ0n0DmxxmV-oBFbW5o.roa
Signing time: Fri 12 May 2023 14:07:09 +0000
ROA not before: Fri 12 May 2023 14:07:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12813
IP address blocks: 212.11.224.0/24 maxlen: 24
212.11.224.0/19 maxlen: 19
212.11.226.0/24 maxlen: 24
212.11.225.0/24 maxlen: 24
212.11.227.0/24 maxlen: 24
212.11.240.0/24 maxlen: 24
212.11.245.0/24 maxlen: 24
212.11.244.0/24 maxlen: 24
212.11.241.0/24 maxlen: 24
2a00:1278::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:10:49:74:36:82:78:80:65:65:17:f3:73:46:bc:e2:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Validity
Not Before: May 12 14:07:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea93eed60a99b89d27d039b1c6657ea0115b5b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f8:d6:e0:c3:c6:77:fa:e0:1f:36:d6:27:e1:
60:47:44:f2:a9:8d:8f:3c:20:b6:db:ff:a5:80:6a:
e3:d6:fd:93:9d:02:27:ff:a4:82:71:59:7d:02:8c:
a9:79:32:12:06:39:c8:9d:e3:3f:ad:7a:c2:38:96:
b9:96:0b:29:b9:75:1f:25:14:79:c5:1e:04:07:e6:
93:de:cf:df:02:26:ef:ab:87:51:ad:c0:90:f4:97:
fc:54:27:55:90:9e:d7:ec:5d:52:ce:e4:3d:77:17:
fc:2f:18:1b:4e:02:e9:65:09:f7:2b:e2:2e:01:97:
39:99:28:6e:ec:c5:ca:26:9b:f2:43:1b:0f:d4:5e:
ad:81:b8:66:23:db:b8:a9:ca:ba:c5:e4:3f:13:79:
95:a5:13:87:2c:f7:0f:cf:67:8d:44:a3:e5:f3:e8:
8c:6d:2f:ba:b0:82:35:62:63:e9:10:12:81:33:10:
21:97:c9:89:40:4c:2e:db:26:04:da:20:7c:ed:4d:
75:64:11:24:d3:b1:16:d6:4e:c4:47:06:8a:73:cb:
7c:59:8e:e8:85:d8:5c:cf:3a:eb:84:8f:df:a5:50:
0e:bf:58:34:be:6f:a1:3b:1f:f6:86:f2:15:37:1e:
45:06:94:45:55:26:9f:2c:cc:ba:8c:7a:58:d6:e4:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:93:EE:D6:0A:99:B8:9D:27:D0:39:B1:C6:65:7E:A0:11:5B:5B:9A
X509v3 Authority Key Identifier:
keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/6pPu1gqZuJ0n0DmxxmV-oBFbW5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.224.0/19
IPv6:
2a00:1278::/32
Signature Algorithm: sha256WithRSAEncryption
21:2b:26:bf:96:7a:ce:1a:83:c7:da:11:ec:23:bb:61:60:cc:
ac:32:37:68:17:8e:14:7a:7b:2e:91:55:f6:ca:8a:59:75:00:
10:11:ae:20:00:6c:59:92:82:e9:be:19:7f:05:eb:19:14:57:
93:93:92:56:0a:6b:4e:51:3d:33:3d:33:a8:81:ac:0c:0a:dd:
40:ac:db:46:d7:dc:dc:83:19:d3:8c:90:dd:61:2e:c8:20:ad:
c2:13:90:ae:ac:6d:99:7c:01:1c:ce:93:bd:99:99:0f:49:b6:
b2:6e:b0:ca:52:48:a4:45:7a:cd:f0:30:3e:0a:f8:2c:50:ff:
8a:c8:d3:0e:ab:3b:9d:57:13:fd:55:89:02:49:62:7e:43:e9:
12:18:19:72:2e:d4:70:41:12:13:f5:70:5d:84:9c:12:25:38:
38:59:cc:df:7b:c8:45:85:50:29:17:94:63:14:5f:0a:82:6f:
12:95:dc:32:ff:5e:44:88:22:13:0e:9c:e0:6d:7b:55:c7:6c:
a8:2f:5c:8e:7f:39:9c:eb:d8:24:f7:d7:8a:59:be:57:68:27:
dd:53:9a:3a:2a:e7:76:21:70:05:05:0c:0e:2e:d9:fb:c3:ea:
be:97:93:2e:7f:7c:e6:75:77:9f:e2:b6:ff:07:f0:84:e3:e9:
51:3c:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:54 2023 by rpki-client on console.sobornost.net