Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/r6_lGbm8kLYd-tAvJQ-EG5T06UU.roa
File: r6_lGbm8kLYd-tAvJQ-EG5T06UU.roa (raw, json)
Hash identifier: oSITiJFk+Sq4YR9n8saQuCBd5+sUA9vrmzyh5IZAO2c=
Subject key identifier: AF:AF:E5:19:B9:BC:90:B6:1D:FA:D0:2F:25:0F:84:1B:94:F4:E9:45
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 01856D2F2C0E18C2E52BB53864E542A56514
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/r6_lGbm8kLYd-tAvJQ-EG5T06UU.roa
Signing time: Sun 01 Jan 2023 11:54:45 +0000
ROA not before: Sun 01 Jan 2023 11:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206283
IP address blocks: 185.26.26.0/23 maxlen: 23
2a02:f401::/32 maxlen: 32
2a02:f406:fe50::/48 maxlen: 48
2a02:f406:fe90::/48 maxlen: 48
2a02:f402::/32 maxlen: 32
2a02:f403::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:2c:0e:18:c2:e5:2b:b5:38:64:e5:42:a5:65:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Jan 1 11:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afafe519b9bc90b61dfad02f250f841b94f4e945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:17:e6:36:50:e6:c5:b5:fc:dd:87:25:fb:
1e:c6:22:ef:b6:3c:58:fb:ad:f7:4a:4a:45:c6:0b:
15:88:53:19:15:d7:96:e4:de:3f:6d:fb:41:2b:33:
ac:9d:6a:1f:d4:95:ae:f9:d6:c9:04:1b:d6:3d:b1:
9a:2e:a1:7c:eb:53:0e:ba:e2:66:7a:05:3b:66:01:
a4:a0:4b:c2:8f:ed:7a:73:fd:b0:3a:c5:8b:1c:56:
6d:56:18:99:80:5e:1d:f9:f5:ae:59:d3:69:0f:f5:
25:90:e9:89:9e:24:d5:f8:0f:b6:5b:57:cb:f1:ea:
08:6a:45:6b:e2:7c:57:e4:c8:c2:e8:75:2c:71:65:
a7:88:b7:7b:fa:e5:39:c0:ae:38:bb:17:3c:59:53:
68:5f:81:0f:db:c4:45:94:e5:7a:0c:40:60:03:68:
e6:56:54:8b:17:43:10:0b:31:d3:0c:35:d1:8f:94:
73:3c:5a:cb:5b:79:4f:c9:51:40:f2:5e:7e:b8:b6:
8e:6f:06:a7:fe:12:4e:00:af:52:33:80:22:6e:b9:
1f:24:39:5e:a3:25:7e:7b:19:6e:9a:ea:2f:d3:c5:
4e:d3:a6:d9:28:c5:a6:33:52:1d:99:ad:bc:44:88:
1b:9e:e0:3a:26:09:8b:59:95:af:59:a7:6b:99:c7:
78:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AF:E5:19:B9:BC:90:B6:1D:FA:D0:2F:25:0F:84:1B:94:F4:E9:45
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/r6_lGbm8kLYd-tAvJQ-EG5T06UU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.26.0/23
IPv6:
2a02:f401::-2a02:f403:ffff:ffff:ffff:ffff:ffff:ffff
2a02:f406:fe50::/48
2a02:f406:fe90::/48
Signature Algorithm: sha256WithRSAEncryption
48:ad:28:02:16:d5:6a:9b:69:61:54:fb:25:49:b8:d7:8b:83:
22:b7:e6:e3:9c:a6:60:b2:95:c5:74:8e:14:d0:44:f2:80:82:
3a:ee:63:3f:7f:c4:19:c6:b0:8c:c9:82:c9:c9:5f:7f:a6:44:
e1:a5:cd:c1:c5:c1:b1:37:18:c5:b5:2b:7e:1a:2d:48:78:bf:
e4:f1:40:31:fa:ad:ba:f4:27:7d:25:14:0c:8c:67:c6:ef:c4:
eb:25:59:70:c5:d6:c6:7a:c5:d9:23:7f:11:35:63:48:8d:02:
76:2f:b5:18:e5:c6:22:cf:f0:b1:c1:14:e7:ab:3d:b3:72:a9:
04:65:ca:62:59:09:16:64:b9:ef:47:56:1e:f2:18:23:df:5e:
9d:b2:c3:b2:32:67:05:a3:53:26:a6:dd:fb:f2:b5:fa:8f:b5:
c8:be:ff:31:fc:89:47:6f:b1:c9:fd:43:48:80:bd:4b:3b:41:
c2:ff:b4:0a:9b:c2:2b:e6:55:a0:8a:f7:e9:c5:1b:76:98:d4:
b0:54:0b:df:7f:e7:4b:ed:a4:1d:e3:42:22:56:47:32:8f:46:
b2:68:73:46:05:73:19:8e:cf:19:4b:15:da:75:d6:eb:c8:8a:
78:82:53:b4:f5:d0:74:c5:d7:a0:67:7c:07:23:d7:f2:36:14:
9b:bb:4b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:45 2024 by rpki-client on console-fra.rpki-client.org