Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/KPC3kNJ7xqQe5_6IZPqzqFCGum8.roa
File: KPC3kNJ7xqQe5_6IZPqzqFCGum8.roa (raw, json)
Hash identifier: coO/s30KePF6g7Nlqg+IRjHg41F8+m2nwqQfIOvWLmg=
Subject key identifier: 28:F0:B7:90:D2:7B:C6:A4:1E:E7:FE:88:64:FA:B3:A8:50:86:BA:6F
Certificate issuer: /CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
Certificate serial: 01857142D7AA848E407A1AC3B2AE870C4D9D
Authority key identifier: 1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/KPC3kNJ7xqQe5_6IZPqzqFCGum8.roa
Signing time: Mon 02 Jan 2023 06:54:43 +0000
ROA not before: Mon 02 Jan 2023 06:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212988
IP address blocks: 185.112.78.0/24 maxlen: 24
185.112.78.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:42:d7:aa:84:8e:40:7a:1a:c3:b2:ae:87:0c:4d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d4404c8392e82d4b7029b69cb6ee290b9b42c00
Validity
Not Before: Jan 2 06:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28f0b790d27bc6a41ee7fe8864fab3a85086ba6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:6b:ea:7c:82:62:e7:09:23:c9:d5:66:6f:
9d:c4:19:f1:16:5e:fa:ab:c0:00:cd:d0:a4:f8:48:
70:28:d5:19:c7:f0:22:6c:f3:09:31:ad:a8:78:67:
e1:8d:ea:ca:b4:f6:cf:b1:6e:b7:5e:75:e2:31:4c:
af:72:f4:27:f9:5c:8c:4f:82:93:ed:13:46:fa:41:
35:49:bd:92:ab:46:9d:bf:4a:5f:8a:0e:f7:34:37:
01:87:e1:da:51:a7:c4:94:99:31:ef:b4:b6:19:f9:
9a:86:3f:a2:6b:9f:6b:75:a7:4c:49:e7:a2:4e:cb:
94:09:ae:cf:d8:d8:1f:7d:4c:4d:47:65:36:46:5f:
1f:35:27:f5:45:d1:ea:33:01:d5:7a:6e:cf:6f:05:
0b:74:c8:1b:f6:ca:70:7f:a2:0c:c9:40:1b:47:64:
0d:cf:9f:19:3d:f5:a6:30:61:cb:f7:a0:4c:5e:97:
81:3b:5f:64:72:78:b7:c1:50:88:56:c0:a6:cb:7c:
05:12:ef:6b:2b:98:5b:11:c7:7c:e1:8f:09:93:a9:
67:9d:5e:86:26:8d:f6:71:70:13:ac:b3:4a:38:f2:
69:07:19:a0:44:ce:7a:76:d3:2a:dd:9c:aa:15:00:
ce:d3:78:16:a4:69:f9:e2:5f:b7:f8:1e:a4:ac:74:
a0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F0:B7:90:D2:7B:C6:A4:1E:E7:FE:88:64:FA:B3:A8:50:86:BA:6F
X509v3 Authority Key Identifier:
keyid:1D:44:04:C8:39:2E:82:D4:B7:02:9B:69:CB:6E:E2:90:B9:B4:2C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUQEyDkugtS3Aptpy27ikLm0LAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/KPC3kNJ7xqQe5_6IZPqzqFCGum8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b835-f5b5-4704-ae97-c26328561030/1/HUQEyDkugtS3Aptpy27ikLm0LAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.78.0/23
Signature Algorithm: sha256WithRSAEncryption
57:bb:87:a7:38:89:4d:63:1e:22:c3:37:e6:bb:26:e1:67:2d:
df:f7:93:5f:0e:6a:c7:fc:a3:6c:3d:36:8d:4f:0e:23:f2:9f:
88:ab:22:51:ae:6b:97:1d:90:8e:f8:3e:13:14:74:82:bd:41:
15:f4:a0:d3:c9:6d:ef:a2:c2:ab:7d:57:08:8f:b4:7b:68:ae:
4c:ab:34:ee:5e:a8:90:42:d1:4c:37:07:93:fe:c9:af:43:07:
04:bf:fd:8f:73:36:b7:10:15:54:56:c9:a8:e9:1e:82:fd:0b:
64:1f:89:08:b0:1b:e5:04:0b:89:33:f0:33:8a:e4:2d:61:d6:
5c:92:ea:af:ef:21:24:81:f2:8e:7f:79:06:d9:af:eb:7d:e6:
a8:16:ec:f4:25:b9:25:d6:e8:a8:1d:d4:60:31:ed:eb:c7:65:
ef:e9:0f:84:cb:70:28:02:c1:bb:05:29:d6:32:5b:f9:73:85:
37:22:59:ee:07:62:a3:00:c5:6e:d7:0c:de:62:97:ba:16:33:
67:1f:2f:fe:8e:e4:2d:39:e9:54:5a:fd:76:7b:00:00:75:b2:
95:98:97:1f:46:9c:b1:63:0d:da:45:19:ae:24:f0:b8:e2:23:
7a:a3:c6:9e:65:9e:99:1f:58:74:7d:d1:4f:2e:a2:4c:c8:af:
c9:c5:8c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:22 2024 by rpki-client on console-ams.rpki-client.org