Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/0RSrIPu_mW_TgwA6HIHFDG8dxnQ.roa
File: 0RSrIPu_mW_TgwA6HIHFDG8dxnQ.roa (raw, json)
Hash identifier: Xbw9rGkzkH3fbrJJ0F13+vGVu+s45wpOqiQ2P4XeAEM=
Subject key identifier: D1:14:AB:20:FB:BF:99:6F:D3:83:00:3A:1C:81:C5:0C:6F:1D:C6:74
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 0185700B97E43F6C1C9502F193F81CC05FF3
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/0RSrIPu_mW_TgwA6HIHFDG8dxnQ.roa
Signing time: Mon 02 Jan 2023 01:14:45 +0000
ROA not before: Mon 02 Jan 2023 01:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197726
IP address blocks: 185.112.14.0/23 maxlen: 23
185.112.12.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:0b:97:e4:3f:6c:1c:95:02:f1:93:f8:1c:c0:5f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Jan 2 01:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d114ab20fbbf996fd383003a1c81c50c6f1dc674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:f1:74:e5:1b:1e:71:c3:b2:63:69:08:ee:
ba:1d:03:9c:f8:8b:b0:5d:5f:af:92:22:46:2c:0c:
64:69:55:2b:4a:c4:75:9f:c4:11:e7:7d:57:c6:3e:
e3:41:53:8a:3a:c7:28:3f:9b:4f:a9:a3:58:75:38:
71:45:34:6c:5d:8b:30:8d:74:9c:4c:64:d0:09:ce:
8c:6e:fa:0d:b8:37:63:94:2d:8a:5e:e7:ef:a1:de:
44:15:f6:53:42:9e:0e:b0:d3:94:f2:6d:02:67:d2:
ac:36:42:a6:20:d0:33:08:09:ac:d0:ce:92:19:ef:
08:91:f8:00:4f:95:d6:9d:c9:85:a5:2e:e3:83:f6:
87:97:0e:16:d2:c8:83:fe:db:a7:e1:b8:63:d9:48:
2f:67:6b:85:fe:8b:08:7a:d9:f8:b2:b9:a7:58:5b:
0b:72:cc:cc:c6:a0:5d:22:35:3b:7f:80:d8:28:e2:
e2:92:4b:02:4f:a5:5a:02:6c:64:ac:ef:87:da:06:
e5:39:27:e8:be:6b:d8:07:fb:78:10:e8:ef:c1:a1:
82:19:02:e9:eb:01:03:b8:90:31:bd:bc:1c:55:a3:
c7:93:b0:59:6a:17:c3:04:cf:ec:80:d0:e0:1d:a0:
db:a1:a6:b1:eb:50:94:55:77:24:aa:16:46:9e:e8:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:14:AB:20:FB:BF:99:6F:D3:83:00:3A:1C:81:C5:0C:6F:1D:C6:74
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/0RSrIPu_mW_TgwA6HIHFDG8dxnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.12.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:c3:01:2e:d9:a6:fb:72:25:c7:ed:b2:07:02:aa:d8:d9:92:
bc:e1:9f:8b:5b:52:3e:bf:6a:99:b8:14:9e:f4:72:be:4f:3d:
55:17:7c:8d:34:f5:06:22:76:a4:bc:2b:c2:b0:fb:d9:a8:92:
a3:4e:70:46:c8:0b:a8:cc:e8:6f:b5:33:4a:95:31:0c:6d:e4:
4c:7c:da:d6:c8:97:3f:68:25:70:1f:c7:76:3e:b6:e0:98:98:
ff:35:46:af:42:16:19:b5:66:85:30:4c:e8:29:48:d3:16:17:
24:aa:82:37:d5:d1:7d:d8:a0:5c:6e:68:60:1d:18:66:25:be:
ee:d8:1b:c1:d1:53:5b:68:3c:e7:2b:9e:25:d0:c5:40:5e:64:
1a:ce:f9:88:fe:53:6e:fc:85:79:ee:0c:36:3e:d3:af:1f:25:
d6:16:de:d5:8f:85:81:2a:9d:0b:c7:6d:37:fd:2b:a6:63:fd:
d4:ee:b5:fa:25:e1:7f:98:b3:00:7f:8c:a1:01:54:51:a0:9c:
67:62:04:f1:f5:0b:8c:02:7b:7c:d8:63:6a:05:c0:00:7e:2c:
ad:d5:89:ac:63:e2:d9:09:fe:0e:75:56:e0:03:bf:90:60:29:
d3:36:e9:f5:10:1b:b3:e8:cd:8e:76:cc:19:2d:a1:00:d9:7c:
9d:9d:9b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:30:55 2024 by rpki-client on console.sobornost.net