Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/nRsvXTM9RzPp5JrX5Ls4u3VcflM.roa
File: nRsvXTM9RzPp5JrX5Ls4u3VcflM.roa (raw, json)
Hash identifier: sg+5NOIUN2i+NbICae7qEG7luGpb3LcBO9fnT6SzWrs=
Subject key identifier: 9D:1B:2F:5D:33:3D:47:33:E9:E4:9A:D7:E4:BB:38:BB:75:5C:7E:53
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 0186B28D283A514524ADE573A54EF808F397
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/nRsvXTM9RzPp5JrX5Ls4u3VcflM.roa
Signing time: Sun 05 Mar 2023 16:14:00 +0000
ROA not before: Sun 05 Mar 2023 16:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 185.42.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Mar 2023 11:05:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b2:8d:28:3a:51:45:24:ad:e5:73:a5:4e:f8:08:f3:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Mar 5 16:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d1b2f5d333d4733e9e49ad7e4bb38bb755c7e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:0b:23:8b:6d:64:3a:f8:48:2e:6c:0c:bf:
24:a6:c6:8a:b1:78:ef:b6:0d:da:c2:50:46:33:de:
54:64:46:ef:07:c0:98:97:79:6b:dd:19:82:5f:e4:
46:dc:2d:f7:a4:9f:29:6a:9d:89:19:d1:87:a0:54:
10:20:8b:71:2a:4f:a7:1c:a8:94:b8:68:7e:63:58:
05:30:f7:d6:96:12:e4:4a:ab:10:a3:3a:e4:bc:0c:
8f:9d:71:29:f2:b9:6f:cb:10:cb:68:55:70:db:2d:
2d:9d:fe:7b:8c:f0:91:ad:2d:e9:f8:82:cb:8b:37:
f3:a8:ed:e6:df:26:a3:f1:e5:83:56:b6:51:a2:0e:
e9:ce:14:36:cb:55:af:3f:cd:68:09:73:d5:0c:9d:
e9:93:5d:35:78:20:b1:e5:a8:c2:f1:10:ea:39:93:
5f:41:66:aa:fd:50:d1:30:98:97:2f:a1:42:e8:d3:
eb:c7:9b:52:19:f2:3b:ca:0b:95:e1:cd:d0:aa:44:
e4:6c:1a:98:a8:be:6b:72:5d:ba:f3:1a:7f:a2:b1:
d4:2c:fd:6d:c3:70:e8:12:58:14:94:27:53:f7:10:
3b:18:cd:61:52:af:9e:0c:32:10:e2:3f:e0:b1:b4:
dc:69:3c:9e:fb:78:86:fd:4a:9a:f2:ac:6e:11:9b:
81:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1B:2F:5D:33:3D:47:33:E9:E4:9A:D7:E4:BB:38:BB:75:5C:7E:53
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/nRsvXTM9RzPp5JrX5Ls4u3VcflM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:dd:29:71:29:82:e9:30:a4:6b:53:83:9b:bf:9d:40:e8:be:
27:0a:f1:cb:a1:1c:22:d1:44:7c:af:24:80:4e:71:8e:17:ad:
ec:89:ed:4c:e0:bf:32:c0:83:92:8d:81:99:6d:f6:42:fb:b3:
67:32:5e:65:88:28:9c:f6:ad:f4:16:52:a7:09:05:11:d1:0e:
1d:74:f2:dc:20:c8:b8:89:63:f2:f6:e7:a8:af:36:a5:f2:7c:
82:6c:9a:d9:a1:37:df:bb:8c:4e:2e:40:9f:49:56:d2:5b:26:
2a:d4:39:99:07:d0:ec:23:85:f6:20:78:1a:44:46:0b:49:71:
0d:f0:e5:7d:a4:b5:61:65:7c:74:6c:ba:e7:1d:ad:24:ac:14:
5a:b8:b2:1f:b2:aa:7a:d7:f2:3d:c4:76:2c:e8:93:4c:b2:f9:
48:88:cd:18:55:cc:a4:65:e0:fa:f7:3c:0d:8a:f9:e0:c9:3e:
68:a0:27:e8:5b:72:45:fb:a1:f6:8b:4f:e6:74:80:31:75:e9:
d6:33:30:73:ec:02:38:81:a4:a3:28:58:c2:d7:8b:77:c4:ac:
c7:c0:06:3a:5d:05:73:3e:41:49:a0:fd:d3:5c:4b:1d:f5:62:
7f:19:b2:ef:f1:e1:26:29:31:93:d9:1a:31:9e:bd:c3:bf:22:
fd:0d:71:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:09 2024 by rpki-client on console-ams.rpki-client.org