Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/RRWhJtbIntf9c6iPM_TQoQ8FEIk.roa
File: RRWhJtbIntf9c6iPM_TQoQ8FEIk.roa (raw, json)
Hash identifier: AzUR5eT8zrz1ubm1qb5gZDHceXM5uUiV+iAmp+bEBik=
Subject key identifier: 45:15:A1:26:D6:C8:9E:D7:FD:73:A8:8F:33:F4:D0:A1:0F:05:10:89
Certificate issuer: /CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Certificate serial: 018C832716CFA64033C90C03DFE880C0A69E
Authority key identifier: 50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/RRWhJtbIntf9c6iPM_TQoQ8FEIk.roa
Signing time: Tue 19 Dec 2023 17:37:06 +0000
ROA not before: Tue 19 Dec 2023 17:37:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12813
IP address blocks: 212.11.226.0/24 maxlen: 24
212.11.225.0/24 maxlen: 24
212.11.224.0/24 maxlen: 24
212.11.224.0/19 maxlen: 19
212.11.227.0/24 maxlen: 24
212.11.235.0/24 maxlen: 24
212.11.240.0/24 maxlen: 24
212.11.242.0/24 maxlen: 24
212.11.241.0/24 maxlen: 24
212.11.245.0/24 maxlen: 24
212.11.244.0/24 maxlen: 24
2a00:1278::/32 maxlen: 32
2a00:1278:500::/40 maxlen: 40
2a00:1278:200::/40 maxlen: 40
2a00:1278:100::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:83:27:16:cf:a6:40:33:c9:0c:03:df:e8:80:c0:a6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50264c3f09831ccd889712f4fab5c5b1be0cad56
Validity
Not Before: Dec 19 17:37:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4515a126d6c89ed7fd73a88f33f4d0a10f051089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:bc:f1:ab:f0:bd:9d:34:97:3e:71:e5:37:
36:aa:aa:7a:d9:3a:03:21:1b:f8:f3:17:da:62:33:
67:e6:fd:19:59:05:86:9c:a5:38:88:a7:2a:88:aa:
77:1d:d9:94:33:2d:bc:b7:97:fd:71:14:5e:6d:ff:
88:26:32:c9:6a:b3:d2:1b:2f:70:8b:82:0f:2c:82:
cb:ce:9f:06:21:18:30:ae:10:b0:dd:06:c6:55:95:
61:c2:9c:64:b9:3d:51:1f:66:06:ef:b6:bb:00:84:
8f:10:0a:fc:c7:b4:bf:d7:ab:a3:c9:e9:b4:44:83:
6e:f7:6d:ab:dd:cf:71:67:f1:33:05:db:16:5e:b4:
41:0f:1d:d9:67:39:a8:91:7c:15:af:0a:51:06:82:
ff:85:ad:1b:17:79:11:53:c6:df:30:40:b9:87:c4:
f8:86:2e:00:65:fb:c6:4f:a7:68:41:ae:b1:89:e3:
5f:65:d8:81:8b:ab:79:de:69:35:ba:e1:d5:b6:df:
cb:37:55:58:89:49:b0:45:14:24:32:fb:99:3c:e1:
db:9c:c1:e4:c1:d9:c5:4b:47:c9:f0:2e:08:05:f1:
ee:99:0f:fa:fe:fd:e1:46:3d:91:86:8f:df:99:b6:
5b:e4:09:68:04:56:b9:d0:36:dd:bf:69:a5:a1:ce:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:15:A1:26:D6:C8:9E:D7:FD:73:A8:8F:33:F4:D0:A1:0F:05:10:89
X509v3 Authority Key Identifier:
keyid:50:26:4C:3F:09:83:1C:CD:88:97:12:F4:FA:B5:C5:B1:BE:0C:AD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCZMPwmDHM2IlxL0-rXFsb4MrVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/RRWhJtbIntf9c6iPM_TQoQ8FEIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/01835f-504f-45bd-a052-714f9626d021/1/UCZMPwmDHM2IlxL0-rXFsb4MrVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.11.224.0/19
IPv6:
2a00:1278::/32
Signature Algorithm: sha256WithRSAEncryption
33:a4:71:4c:d1:60:eb:89:57:73:16:93:b0:3e:c2:e1:15:88:
67:f6:3d:e9:56:f1:8e:27:4d:e7:59:e8:d3:f1:c8:dd:99:57:
ce:4f:93:66:da:56:96:54:de:07:8a:4f:16:61:e2:74:36:96:
9f:d0:00:39:f4:16:cf:c3:ff:36:11:cb:39:f4:56:02:dc:2b:
04:34:1e:82:ef:f5:08:fb:7e:00:4f:e8:05:06:5a:5d:08:d3:
e3:64:81:3c:3b:9c:6e:73:f4:15:f0:4d:7b:44:c5:a1:69:45:
6d:7e:c6:46:eb:de:75:19:b6:7c:b8:b8:2a:b8:d5:44:54:0c:
c9:e0:74:5f:fb:50:d6:c9:27:04:ca:4e:b5:56:7d:ff:f7:8a:
62:eb:0e:41:a7:22:c4:95:2d:6f:f1:42:4d:11:69:5f:23:87:
c8:00:0b:24:d7:6a:22:b9:80:3f:9f:c3:11:13:a7:cc:a3:bf:
b9:98:9c:fa:6d:9d:38:4e:a8:ee:29:84:a7:f2:87:a4:28:bc:
c6:75:06:ee:98:3a:b6:19:cd:13:2e:db:9d:c9:db:56:58:54:
0e:46:f3:39:59:c8:a2:0d:a8:b9:81:3a:9e:fd:d8:8b:de:89:
fd:bb:c3:0c:21:7e:76:88:88:5d:6e:9d:ef:8e:5d:87:23:15:
be:44:24:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:02:12 2024 by rpki-client on console.sobornost.net