Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9dpcmGk7cWDeR1MYPlk90Qgi0LQ.roa
File: 9dpcmGk7cWDeR1MYPlk90Qgi0LQ.roa (raw, json)
Hash identifier: KKd65Xo4AxFoHc06+lY6avitcg2dO27Ep+VkeZnKYmk=
Subject key identifier: F5:DA:5C:98:69:3B:71:60:DE:47:53:18:3E:59:3D:D1:08:22:D0:B4
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0187849FDB609F9A2700D210CE4FC757AAB2
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9dpcmGk7cWDeR1MYPlk90Qgi0LQ.roa
Signing time: Sat 15 Apr 2023 11:14:41 +0000
ROA not before: Sat 15 Apr 2023 11:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:84:9f:db:60:9f:9a:27:00:d2:10:ce:4f:c7:57:aa:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 15 11:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5da5c98693b7160de4753183e593dd10822d0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:10:7c:8e:7d:74:7c:f1:65:ca:d7:0d:d0:
79:37:21:90:ed:6b:3c:69:c3:55:f3:e9:82:dc:6a:
1d:ea:0d:7f:f0:32:eb:f4:76:cc:73:4e:7a:24:e8:
58:50:14:f7:5a:4c:7b:13:78:f7:8d:94:ec:c3:e2:
11:b8:a2:1c:de:7d:84:a1:6f:82:36:5c:fc:9f:ff:
bb:20:77:f6:18:cd:93:01:db:59:0f:d3:8f:28:d8:
84:e6:2a:1e:cc:11:c3:b4:27:3f:5e:a8:03:fb:d8:
e1:f1:89:10:8a:2e:05:f6:99:03:2f:db:37:3a:55:
17:55:67:a5:2b:b2:90:8d:52:9a:20:3d:be:c0:f2:
b6:d6:89:58:82:6a:54:9e:26:17:04:b3:e2:77:04:
b8:e6:90:6a:48:07:d0:53:d3:b6:49:df:f9:c8:a4:
dd:f5:03:4a:3f:ba:14:54:c5:ed:4d:a5:65:3b:55:
93:39:03:03:1f:b6:a3:92:28:9e:4a:7c:78:ed:10:
1e:f2:a4:52:94:45:61:43:02:6e:e5:d6:dd:d2:7a:
d5:26:5e:2c:a2:c6:e4:05:83:55:a3:b9:99:0b:64:
50:12:b0:dc:7d:e9:81:be:f2:cb:94:72:92:56:4a:
6d:03:3c:56:6d:41:7c:ee:ad:be:10:74:60:0c:d2:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DA:5C:98:69:3B:71:60:DE:47:53:18:3E:59:3D:D1:08:22:D0:B4
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/9dpcmGk7cWDeR1MYPlk90Qgi0LQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
94:47:15:2a:10:e0:90:87:4b:b2:15:94:b4:71:3f:18:c1:88:
b9:64:e9:29:05:55:d7:24:17:1b:30:86:22:6b:dd:33:6b:51:
9b:0a:c1:d7:03:ed:eb:4a:4f:5e:62:53:11:9d:9a:7e:e8:c6:
ae:de:da:32:16:c6:d6:8d:26:bc:8e:f7:a4:11:22:1a:96:c4:
0e:35:7c:ba:b6:97:48:24:a7:d8:de:8f:87:40:1b:3b:b6:51:
fd:b1:3d:be:b4:48:e1:65:22:92:2c:a4:a4:db:02:27:78:aa:
69:8f:b0:14:04:a6:f4:71:b8:b4:9c:53:a3:de:65:4f:48:a3:
35:08:54:c7:aa:5d:23:86:12:61:01:07:5c:29:9e:46:69:aa:
0f:8d:0e:66:87:f5:cf:85:b3:fb:8a:bd:af:99:db:9b:fd:66:
c3:49:70:2e:f4:ce:e9:be:55:3e:fa:19:bd:df:3a:f2:93:01:
c0:40:e0:20:d0:40:f2:98:97:15:8b:8f:32:f4:ac:df:99:2c:
b6:9a:06:9f:f7:a5:18:e8:24:fa:cc:d5:e0:60:c3:81:4f:1b:
3d:eb:b8:95:53:7b:50:99:56:b1:a4:a7:a7:98:b4:8f:24:34:
c4:09:51:f4:f0:88:48:ce:8b:9e:d5:6b:32:fc:c9:47:66:45:
bd:6f:4d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:11 2023 by rpki-client on console-ams.rpki-client.org