Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/ekq44YHvbx137Q39ppQaA7Y3F28.roa
File: ekq44YHvbx137Q39ppQaA7Y3F28.roa (raw, json)
Hash identifier: oxhRooNc3tOnhj8vcJAjA3EhAzrVunXU5SvqzkqO/OY=
Subject key identifier: 7A:4A:B8:E1:81:EF:6F:1D:77:ED:0D:FD:A6:94:1A:03:B6:37:17:6F
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 0188786CBC115843E81969F014780294EA47
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/ekq44YHvbx137Q39ppQaA7Y3F28.roa
Signing time: Thu 01 Jun 2023 19:26:11 +0000
ROA not before: Thu 01 Jun 2023 19:26:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62263
IP address blocks: 185.42.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:78:6c:bc:11:58:43:e8:19:69:f0:14:78:02:94:ea:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Jun 1 19:26:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a4ab8e181ef6f1d77ed0dfda6941a03b637176f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:c8:a2:4a:bb:26:c0:b4:d0:8e:c0:37:a9:
dc:92:61:6c:9f:a6:98:7d:75:ff:4d:e8:96:c3:61:
72:ef:f9:dd:5e:c0:e3:5f:f1:c8:80:43:2b:90:e0:
d9:d7:79:12:94:f8:30:55:0c:49:ca:53:a7:78:27:
b4:14:be:f1:fe:97:42:95:97:0d:9e:4c:9b:91:94:
cb:7b:e4:fc:d6:31:bc:ed:3b:19:84:23:92:5c:31:
b5:06:68:2c:4e:81:27:ad:94:21:a1:66:0a:f1:b9:
46:eb:1c:c5:7e:0f:21:df:6a:4f:55:ba:65:a3:d2:
12:49:f9:25:9f:e4:cf:a8:71:10:14:cb:ef:1c:74:
37:36:29:0b:7a:c2:d2:1f:9a:bd:55:a2:4e:19:d9:
d2:7d:f7:14:ec:84:9f:91:57:ef:97:03:fa:19:c8:
bc:7b:fb:3b:dc:29:79:e5:68:bc:d3:c3:d6:7b:69:
61:1f:b8:38:df:90:a6:e6:24:2a:ca:7e:49:70:1a:
f9:6c:2d:4d:1c:37:43:6f:ef:55:0e:0f:8b:02:c2:
69:f2:8b:17:08:70:ca:29:b4:f1:c1:a4:d4:b0:f5:
5c:89:00:f3:e0:5a:d5:16:f5:27:a9:14:ca:d5:a9:
a5:7d:51:5e:79:be:15:be:d7:d2:39:48:94:d2:27:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4A:B8:E1:81:EF:6F:1D:77:ED:0D:FD:A6:94:1A:03:B6:37:17:6F
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/ekq44YHvbx137Q39ppQaA7Y3F28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:92:60:97:bc:9a:f1:ea:33:aa:ee:e0:d5:fb:d5:f5:04:a6:
ab:e9:22:8b:6f:7f:cb:97:de:93:1d:48:1d:d0:01:9f:71:9e:
26:05:fb:b4:50:ec:bf:e1:20:6a:69:43:68:f1:4a:99:5d:28:
70:c0:d5:f9:f6:60:75:b3:a5:2d:a0:cf:de:98:7e:32:58:97:
62:b2:b8:ae:95:0a:b4:49:a3:49:83:5c:e1:12:42:f6:a3:84:
54:4c:93:f8:f8:9b:b4:f0:e5:5f:49:de:34:4a:ed:c3:1e:21:
bb:d0:59:6b:44:78:02:e9:88:c9:b4:ae:8b:ae:03:c7:cc:92:
52:72:38:c5:16:c7:95:15:6c:df:af:3e:4a:dc:c9:3f:3a:ab:
69:c5:b8:92:5d:a3:1c:18:83:68:b4:c0:8c:0c:0b:ff:d2:55:
41:2a:c0:5c:fd:8a:16:ba:15:d3:04:a5:60:34:71:fd:ed:8d:
89:43:99:d3:a9:cf:63:b7:b8:ed:01:8f:56:3c:76:76:cd:1e:
c6:22:c2:83:6b:d4:58:a2:dc:5b:5e:e8:43:90:14:fd:b2:e5:
82:90:4c:94:69:b0:b5:b8:2c:7f:27:9e:36:4f:35:a6:c9:f0:
b8:44:45:f0:e5:57:7b:86:93:d6:12:c2:37:42:ce:db:2b:ca:
9b:ce:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:51 2023 by rpki-client on console-fra.rpki-client.org