Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/R6LSkFVtmXaNgsMN0SBtDTXPGOA.roa
File: R6LSkFVtmXaNgsMN0SBtDTXPGOA.roa (raw, json)
Hash identifier: zyp9PR82g/4rR4CHlSdh7KdnwvLq4Av0breJoBQ+TPQ=
Subject key identifier: 47:A2:D2:90:55:6D:99:76:8D:82:C3:0D:D1:20:6D:0D:35:CF:18:E0
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 018AD11F5B3B0F542AFE4BD6D4BB2E771D7F
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/R6LSkFVtmXaNgsMN0SBtDTXPGOA.roa
Signing time: Tue 26 Sep 2023 10:53:27 +0000
ROA not before: Tue 26 Sep 2023 10:53:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202673
IP address blocks: 185.81.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d1:1f:5b:3b:0f:54:2a:fe:4b:d6:d4:bb:2e:77:1d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Sep 26 10:53:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47a2d290556d99768d82c30dd1206d0d35cf18e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:6a:b4:67:d5:5e:ee:62:66:c0:1b:94:4d:
ec:d5:f3:be:68:c2:2d:ca:ea:5e:59:74:e7:5d:52:
ce:d8:ae:63:c6:ea:e7:a9:ea:cb:56:ae:52:cb:c6:
2f:c0:83:d1:28:55:b7:b1:25:cd:59:87:52:89:82:
e7:7a:ed:ec:82:7f:f7:a8:5a:8c:10:67:fc:aa:d0:
10:b9:5b:10:5e:f0:ed:74:32:a3:0e:80:62:73:3f:
1b:e8:7a:48:05:b7:6b:4c:53:e9:81:17:4e:7f:61:
82:ae:64:5d:25:49:76:3c:f0:7b:e5:9c:79:23:ba:
e2:3b:7f:c8:78:c3:bc:ef:8d:38:03:6b:c9:c9:8e:
74:b9:d9:da:42:30:28:2b:96:cb:21:7e:35:79:f6:
25:3d:4d:a4:00:f7:1e:0b:98:23:5b:6b:3f:33:fb:
10:6a:fb:1b:bc:bc:31:94:94:cd:84:a9:0a:e3:59:
37:8f:51:dc:2f:2d:da:09:3e:38:16:8f:e4:be:09:
d6:c7:82:d2:7a:a8:f2:a9:24:0a:fe:7c:3b:53:e3:
02:5f:bb:ff:7e:62:d7:4e:20:52:c7:00:f1:6c:21:
ad:c6:f3:e9:fc:f3:bc:9a:9b:d7:dd:ae:b8:06:d2:
f4:d1:6a:71:02:19:0c:c8:b9:e6:75:5d:b6:5d:3e:
94:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:D2:90:55:6D:99:76:8D:82:C3:0D:D1:20:6D:0D:35:CF:18:E0
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/R6LSkFVtmXaNgsMN0SBtDTXPGOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.126.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:40:28:8f:77:b2:cb:0c:e4:a2:9d:02:0b:2f:79:d6:71:af:
45:94:11:18:1d:a3:33:fe:ba:ed:cb:1b:c4:64:c4:3e:d7:80:
09:7c:60:a1:a3:23:1e:87:be:dd:92:f7:cd:6d:2e:16:a7:aa:
6e:b1:05:4f:91:7e:b0:81:1b:d1:c6:6f:a7:4c:8a:c6:07:1e:
40:57:1d:72:55:cb:ac:3d:28:1a:b6:27:3b:63:88:96:4d:89:
51:75:53:4d:d6:7d:1e:0d:d8:6a:25:f5:27:3b:cc:c4:ed:11:
d7:41:53:53:4a:e0:b4:d1:28:79:bc:ab:7e:7d:8f:93:d3:02:
ff:8d:ee:30:ed:b3:1b:b0:05:11:6d:00:cf:e5:bd:2a:48:9d:
3b:a5:89:ea:57:d1:72:fc:bf:62:a8:f6:dc:c3:04:0a:75:07:
51:19:19:ef:06:63:9c:09:82:8b:23:1b:c3:db:37:8a:ee:de:
1c:88:66:ad:36:69:30:37:83:9a:d3:a7:d2:dd:f9:16:a0:03:
79:ef:bd:fb:22:19:9f:74:d2:c7:85:83:f7:68:c9:45:e0:90:
47:7b:8e:bd:f9:66:66:99:97:b9:0f:a7:59:4e:ef:9e:9c:36:
d2:f3:70:42:d7:a9:46:46:34:4e:92:98:15:d7:c5:bc:f8:61:
83:6c:61:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:46 2024 by rpki-client on console-fra.rpki-client.org