Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/bDrBpOMvm-MJzeLvdEF_R8ZlLJY.roa
File: bDrBpOMvm-MJzeLvdEF_R8ZlLJY.roa (raw, json)
Hash identifier: bVhz0sL0LE6hFTy43YPYBs3mHf8SbCszKCTbYPHcmt8=
Subject key identifier: 6C:3A:C1:A4:E3:2F:9B:E3:09:CD:E2:EF:74:41:7F:47:C6:65:2C:96
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 018570CBDA745B687658D2AFC11482623305
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/bDrBpOMvm-MJzeLvdEF_R8ZlLJY.roa
Signing time: Mon 02 Jan 2023 04:44:45 +0000
ROA not before: Mon 02 Jan 2023 04:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212726
IP address blocks: 185.242.12.0/24 maxlen: 24
185.242.14.0/24 maxlen: 24
185.242.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:da:74:5b:68:76:58:d2:af:c1:14:82:62:33:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jan 2 04:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c3ac1a4e32f9be309cde2ef74417f47c6652c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7e:29:76:16:2d:ba:75:7b:52:50:e1:dd:a6:
10:6d:8a:69:b6:98:7b:3b:30:0c:cc:34:7c:b0:94:
92:eb:0a:e3:08:ee:d9:44:4a:38:57:27:ed:4e:39:
1b:0b:25:c5:74:f5:98:a1:32:38:25:39:88:91:73:
b4:df:0e:8b:45:9f:32:97:5a:e8:bd:17:41:10:29:
43:8a:8e:96:cf:40:f4:d7:31:0c:65:80:4c:3a:ac:
66:df:90:49:de:f9:6a:a3:01:0f:ff:26:12:1e:b9:
a8:c4:26:44:7f:ac:9a:26:17:7d:fe:b1:a2:c2:1a:
5d:52:ad:47:92:07:12:67:27:02:59:de:2c:ab:b7:
2b:ab:92:c9:6f:bd:b2:7b:02:33:ac:98:a3:e4:4f:
38:f2:30:ab:83:be:2d:7b:4a:88:ff:f7:4f:64:98:
17:9b:99:8b:63:f8:e9:b5:f4:65:15:f8:e2:09:f0:
51:f9:e1:32:da:e0:db:eb:43:aa:f9:6d:2d:66:ba:
fe:29:2e:46:f8:d0:ac:40:66:81:dc:a2:94:13:3a:
57:ec:6c:3d:fb:23:72:ca:27:17:7a:c9:77:40:79:
6a:f2:58:f0:38:89:06:76:1c:90:5d:fc:aa:13:10:
f6:16:44:ae:0b:e6:5d:7d:0e:76:8b:12:fd:aa:bc:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3A:C1:A4:E3:2F:9B:E3:09:CD:E2:EF:74:41:7F:47:C6:65:2C:96
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/bDrBpOMvm-MJzeLvdEF_R8ZlLJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.12.0-185.242.14.255
Signature Algorithm: sha256WithRSAEncryption
57:90:a1:52:a0:35:c8:ee:e3:b3:bb:57:5e:b5:20:4e:2a:44:
99:32:08:ec:6a:a3:ca:42:86:d8:e7:e2:62:be:4c:5c:04:1a:
76:95:f7:9d:cb:28:84:75:63:e9:19:4f:cd:f2:82:e5:20:7c:
2c:0c:97:6e:a9:ef:cf:6b:7c:79:f3:61:87:f0:19:14:5b:26:
98:50:27:fe:76:f8:74:22:be:17:8f:3a:5b:0c:6c:3b:32:14:
cc:c1:fc:76:e8:87:7a:6f:a0:0a:c9:53:be:74:38:04:5b:82:
c9:20:a6:3e:15:47:cc:c8:d9:6d:bf:4e:03:19:28:38:ae:7c:
6f:09:80:b3:90:fe:9a:40:b9:00:7c:7b:7d:ba:8e:5f:0b:cd:
2c:8c:e3:fb:b8:5c:09:45:ce:f2:4b:cb:5f:c9:4b:23:da:3f:
68:8e:46:c8:ec:8f:09:50:f4:e6:ba:f8:c5:6b:75:22:44:48:
15:20:41:a0:3d:79:55:50:2d:ec:12:2d:b6:a1:1a:87:66:05:
79:98:6d:bb:b0:ce:cb:f8:cd:91:c2:d8:1e:35:90:ad:46:8c:
a0:43:95:dd:3a:89:37:fb:5a:77:ec:02:83:12:c8:db:11:79:
bd:bb:05:2c:78:52:31:20:1c:74:9d:e2:f6:56:63:a3:3d:47:
6c:ef:f7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:54 2024 by rpki-client on console.sobornost.net