Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/xBZSrSCmNlLrFjomSa1CBRqIew4.roa
File: xBZSrSCmNlLrFjomSa1CBRqIew4.roa (raw, json)
Hash identifier: Br1JKM5McO32OFVDJdFx5avQLoYDnO3lTf0SR3v+9mk=
Subject key identifier: C4:16:52:AD:20:A6:36:52:EB:16:3A:26:49:AD:42:05:1A:88:7B:0E
Certificate issuer: /CN=064983d3a4a1c26aa295034869c584f757380b2b
Certificate serial: 01856D0AE44E4D8B31A64D00F5FC84B0A875
Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/xBZSrSCmNlLrFjomSa1CBRqIew4.roa
Signing time: Sun 01 Jan 2023 11:15:08 +0000
ROA not before: Sun 01 Jan 2023 11:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42065
IP address blocks: 185.26.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e4:4e:4d:8b:31:a6:4d:00:f5:fc:84:b0:a8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b
Validity
Not Before: Jan 1 11:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c41652ad20a63652eb163a2649ad42051a887b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:60:02:8f:ba:9b:b6:e2:1f:e5:f5:15:96:2e:
29:4c:50:b8:54:36:45:b1:d2:8b:5c:28:1f:06:6a:
d5:2b:d6:dc:f8:9c:db:d7:d4:c5:94:8e:1e:59:a5:
08:8e:2b:3f:65:48:96:3b:70:e8:9d:ac:21:80:21:
07:70:e7:92:26:0b:c8:0e:ae:b3:63:a6:0a:ec:0e:
28:bc:bf:ee:0f:de:2d:01:23:d5:01:28:b8:cc:c6:
33:6d:4b:82:a3:07:5c:69:11:32:3a:9e:00:74:5a:
24:82:b7:2d:9d:76:1f:08:3b:3c:4e:34:08:8c:b8:
83:19:87:4c:71:4c:3d:fe:a1:5f:d1:cf:29:38:a6:
cf:36:df:f9:4a:4d:3a:80:06:97:36:b3:77:85:26:
17:69:bf:f5:49:ef:07:5c:ce:6e:5f:b3:da:ee:de:
8c:e3:4f:d5:2f:30:f2:f1:6c:58:b4:f0:c4:45:77:
7b:f0:08:1a:3b:03:de:f4:cf:f9:06:5d:93:82:12:
c8:37:fc:09:eb:03:5e:29:5a:9a:07:09:f8:23:85:
49:b4:ac:39:62:ca:4a:fc:c7:0e:c1:af:78:05:aa:
1f:e7:fd:71:85:2d:a1:b4:e3:48:90:37:e5:ff:54:
f8:e6:4a:33:fd:4f:1e:fa:b9:a5:ba:25:73:f3:fa:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:16:52:AD:20:A6:36:52:EB:16:3A:26:49:AD:42:05:1A:88:7B:0E
X509v3 Authority Key Identifier:
keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/xBZSrSCmNlLrFjomSa1CBRqIew4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.74.0/24
Signature Algorithm: sha256WithRSAEncryption
89:79:8d:70:48:21:4f:d7:e3:16:97:b3:67:d2:47:f7:e2:4c:
3b:22:91:ab:9a:5a:98:bf:af:3e:4e:12:2b:77:e2:25:4f:20:
2e:c9:63:54:31:85:3c:24:cc:06:b4:78:a7:1d:ec:40:03:6b:
aa:24:be:66:4c:35:6e:ce:12:8c:a8:dd:6d:00:57:9b:af:d6:
51:48:e7:cd:22:c4:9e:c7:63:8b:e7:9a:5a:26:17:30:b3:34:
83:99:d2:0c:d5:6e:68:db:12:d3:f8:9f:44:90:8c:b9:0a:6a:
3f:ae:33:03:3b:70:63:1d:fa:1c:1c:5f:e3:97:de:85:32:d1:
8e:14:f8:b6:fd:92:cd:3b:5e:73:b5:82:d1:e0:00:0c:e5:2e:
91:10:8e:1f:5e:17:58:a4:78:85:e2:19:3a:21:cc:66:94:96:
cc:8d:4d:c7:48:e7:1c:08:17:8c:d7:f7:f3:16:13:53:97:7b:
03:79:18:55:a6:e0:ab:03:f9:f0:59:4b:0d:86:43:d7:c6:0b:
c3:0e:af:d4:5d:97:03:78:8b:b0:0d:07:08:92:63:d2:cc:cd:
44:57:2b:07:73:fa:fe:a6:11:59:bb:8c:29:b4:84:a8:b1:c9:
44:5a:a2:b5:0c:b6:18:7e:bc:cb:05:77:29:74:02:7e:9a:fd:
ff:d8:35:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:55 2024 by rpki-client on console-fra.rpki-client.org