Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/CGPE9YyF39s_rwHgI77vK9-yv9k.roa
File: CGPE9YyF39s_rwHgI77vK9-yv9k.roa (raw, json)
Hash identifier: fDfTRImunsbh9ok7JLQbK7hXBc/qDY9vF9GOhuQI/0c=
Subject key identifier: 08:63:C4:F5:8C:85:DF:DB:3F:AF:01:E0:23:BE:EF:2B:DF:B2:BF:D9
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 0187042466C3005449C31CC1732A04F7EDFA
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/CGPE9YyF39s_rwHgI77vK9-yv9k.roa
Signing time: Tue 21 Mar 2023 12:28:27 +0000
ROA not before: Tue 21 Mar 2023 12:28:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62263
IP address blocks: 185.42.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Mar 2023 13:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:24:66:c3:00:54:49:c3:1c:c1:73:2a:04:f7:ed:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Mar 21 12:28:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0863c4f58c85dfdb3faf01e023beef2bdfb2bfd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a5:07:bf:7f:39:75:76:33:7e:15:18:f3:29:
b0:6a:fa:d6:62:50:de:ee:21:50:6b:1b:86:44:6d:
4c:76:b3:05:a8:3f:c6:3a:97:69:f1:e5:38:3d:9e:
20:9a:39:d5:7e:b1:09:b9:d6:43:2a:99:14:15:da:
ad:22:d2:20:02:62:b3:66:24:d7:ba:96:5e:f2:bb:
ee:77:b9:0e:e0:a5:62:01:d0:d4:52:8f:3d:4b:47:
a4:c9:27:e6:f5:da:f1:ef:c2:cf:bc:35:ed:e0:77:
ba:ba:df:fe:cb:4e:0a:b4:07:f2:1d:29:02:af:4f:
32:3f:e7:1b:ac:cc:fc:28:cb:bc:0f:51:a5:bf:be:
f0:15:f4:a1:d1:5e:a0:e1:68:14:8b:a0:94:5a:d9:
b6:94:8b:cc:66:d5:13:b2:43:7a:79:1f:ea:04:80:
ea:5b:c0:35:1c:bd:40:0a:a7:24:f3:8f:4e:7f:e3:
97:20:43:3b:58:7e:f3:4a:f6:ec:65:69:cf:4c:d5:
b2:d9:b7:fe:e3:45:4c:8e:d4:ac:7e:37:3b:e5:aa:
f0:d6:0c:18:26:0d:22:19:aa:68:77:54:60:71:5b:
a5:c1:46:ad:fc:44:cd:0f:b8:3e:06:6d:43:e2:50:
b0:fb:26:48:9f:af:aa:29:05:d8:1e:c6:47:dd:70:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:63:C4:F5:8C:85:DF:DB:3F:AF:01:E0:23:BE:EF:2B:DF:B2:BF:D9
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/CGPE9YyF39s_rwHgI77vK9-yv9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.26.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ba:c2:34:af:cc:70:97:63:f5:49:cc:76:d1:94:72:e8:69:
34:02:6a:9a:34:b8:a7:ad:9b:c7:17:da:08:70:b9:00:31:f4:
22:32:85:3d:43:0a:f4:cc:9a:83:36:34:d9:83:d9:f6:04:c8:
d7:d3:bb:06:27:92:05:2d:21:44:44:46:34:02:b9:8d:22:8c:
04:50:09:24:3e:9a:d4:4e:b3:90:43:55:6d:61:3e:dc:b2:f5:
d2:9a:d2:66:05:6c:24:8c:65:8d:e9:80:b0:9a:1f:f1:3d:cd:
e0:cf:b2:3d:85:20:5c:22:fc:27:d1:0a:eb:61:1f:3b:f1:14:
79:17:1d:13:2a:34:58:8a:ec:dc:d6:0c:7a:0f:e5:97:32:c9:
ca:35:52:30:f2:49:11:61:5d:61:3b:c6:9d:5d:77:71:1d:b9:
43:fe:c7:3a:ae:3c:64:b9:d5:20:b2:ca:2a:c0:e9:65:7e:ca:
5e:24:41:f4:37:5b:3d:e8:a1:98:fa:c5:f7:c8:ff:bf:f2:a2:
11:c2:38:de:00:ed:18:c2:ce:9c:ec:eb:98:fa:8b:a3:4b:55:
54:b9:93:dd:d1:d4:db:6c:15:33:71:15:a5:e8:25:50:12:f0:
ff:1b:ae:17:8c:f0:ac:6b:5f:c7:7a:2a:57:49:09:06:29:69:
d8:20:ed:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:12 2024 by rpki-client on console-fra.rpki-client.org