Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/RIUZbpRRkN0wOysmdVl1SnUFWmo.roa
File: RIUZbpRRkN0wOysmdVl1SnUFWmo.roa (raw, json)
Hash identifier: WwbTHzbIUzNcXzRfo894ha88Xqdu5HhaVLH7Uyu7AKQ=
Subject key identifier: 44:85:19:6E:94:51:90:DD:30:3B:2B:26:75:59:75:4A:75:05:5A:6A
Certificate issuer: /CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Certificate serial: 01856DB872E0B76BD563654FCAF8BAE459D4
Authority key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/RIUZbpRRkN0wOysmdVl1SnUFWmo.roa
Signing time: Sun 01 Jan 2023 14:24:42 +0000
ROA not before: Sun 01 Jan 2023 14:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8412
IP address blocks: 185.26.188.0/22 maxlen: 22
185.26.188.0/24 maxlen: 24
185.26.189.0/24 maxlen: 24
185.26.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:b8:72:e0:b7:6b:d5:63:65:4f:ca:f8:ba:e4:59:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Validity
Not Before: Jan 1 14:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4485196e945190dd303b2b267559754a75055a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:91:21:4e:ee:dc:9d:85:ad:52:73:e5:b5:
3f:fa:88:cb:03:7b:0b:69:44:5d:ac:eb:3d:05:99:
6f:77:73:23:f8:ac:f3:3f:9d:12:b4:66:92:2b:d0:
5a:e8:6a:d9:4e:85:c9:29:de:c1:fe:6c:1f:20:68:
b6:fd:0b:4d:13:54:ba:9e:aa:d2:1b:87:02:cd:bb:
92:06:96:ea:1e:21:8e:ce:d2:a8:3a:10:57:bb:3f:
ba:99:2d:f5:61:65:c5:b6:86:d3:b5:56:96:ed:0b:
e8:0a:bf:13:05:1b:f0:22:d0:7d:3b:8b:47:c2:47:
55:68:d6:f9:af:4f:d3:fe:ec:c7:f5:c6:e6:74:50:
b0:14:cb:6c:b9:85:c4:22:81:2a:ca:f8:ad:04:49:
5f:44:26:aa:ff:77:17:e4:3f:9a:f8:cf:84:3b:e8:
29:77:95:ac:27:b1:cf:ac:83:a2:2c:1f:56:06:83:
4e:ac:f2:44:60:80:d1:ee:58:14:56:b6:07:b1:11:
74:f1:99:b3:7d:5e:bc:99:96:6b:0a:9a:bd:5d:18:
63:4f:17:b7:16:cf:81:38:6d:65:1f:da:29:ce:a2:
24:93:1d:c6:07:8a:11:cd:a8:5a:cc:41:e3:62:9f:
14:31:b5:37:ef:75:4d:9a:72:2d:6c:c4:32:e7:e5:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:85:19:6E:94:51:90:DD:30:3B:2B:26:75:59:75:4A:75:05:5A:6A
X509v3 Authority Key Identifier:
keyid:CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/RIUZbpRRkN0wOysmdVl1SnUFWmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.188.0/22
Signature Algorithm: sha256WithRSAEncryption
28:ca:cb:cf:10:30:f8:e4:dd:b5:58:24:e2:47:20:dd:b6:88:
ec:ca:b0:67:9d:70:a7:b4:a4:17:cb:20:dc:c9:62:81:92:5e:
ac:d9:0b:1f:3c:d0:5b:79:ff:47:16:8e:03:0f:9c:ae:7c:5a:
7e:47:72:b7:8d:8b:6f:c0:1c:8e:cc:9b:c0:40:03:22:df:14:
b9:e5:4a:ab:38:6a:35:9c:29:66:a5:3d:bc:2c:81:bb:ef:cc:
b0:9e:99:26:4f:09:19:72:c8:46:65:f6:18:7c:13:66:9c:ca:
69:bf:cf:7f:d8:44:47:17:dc:83:7a:71:40:b3:89:06:99:a0:
2d:0e:e9:2e:7e:de:66:8d:d8:af:65:be:f7:e5:90:0a:56:fd:
b6:15:3a:30:6b:99:af:f7:aa:f8:c6:ce:00:7c:92:ea:13:89:
da:61:00:e3:14:9d:d7:97:90:67:7c:ec:81:fa:36:88:02:f0:
2d:67:6b:b0:aa:79:9b:ed:7c:a1:a5:ef:a7:52:b0:d4:80:9a:
2d:3b:ec:b9:1c:4f:f6:64:cc:60:a7:7f:63:7f:f4:18:e6:d5:
a4:4c:41:80:7b:3a:0e:c5:d3:a9:4d:f1:07:38:4d:de:62:0a:
3f:8c:f9:35:33:be:8c:77:a9:dd:df:fb:ee:eb:52:ca:2e:e8:
ad:dd:01:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:28 2024 by rpki-client on console-fra.rpki-client.org