Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/kcO9274yeJzvz8nK4vk9ZOWiPe0.roa
File: kcO9274yeJzvz8nK4vk9ZOWiPe0.roa (raw, json)
Hash identifier: /KMk+vu+Bcflkq5UA7XMrXzgrfIutGVwf+y1ZF2fYtM=
Subject key identifier: 91:C3:BD:DB:BE:32:78:9C:EF:CF:C9:CA:E2:F9:3D:64:E5:A2:3D:ED
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018B4CF532CF9506375636E6A15522FF6E53
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/kcO9274yeJzvz8nK4vk9ZOWiPe0.roa
Signing time: Fri 20 Oct 2023 12:00:19 +0000
ROA not before: Fri 20 Oct 2023 12:00:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 185.126.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4c:f5:32:cf:95:06:37:56:36:e6:a1:55:22:ff:6e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Oct 20 12:00:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91c3bddbbe32789cefcfc9cae2f93d64e5a23ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:9f:6f:6f:70:25:bb:dc:9a:28:4e:23:a4:
dd:8b:83:eb:5a:c5:45:13:2f:59:12:78:10:f6:7c:
01:29:22:f4:12:fe:70:d0:30:c5:54:4a:c2:06:4c:
e4:43:c3:e3:9b:b6:85:e8:83:de:39:33:18:ad:f5:
35:df:ed:25:5d:56:ed:1f:5e:b9:83:0e:fa:63:a5:
e8:cd:3b:5c:99:9f:7a:49:a7:e0:a6:48:13:0a:23:
29:f4:fa:37:dc:46:e6:46:41:f3:d9:17:a3:cc:a3:
24:71:31:74:f6:a0:d3:e9:1c:85:ed:9f:9f:79:30:
d7:93:12:7f:05:fd:b9:07:e9:c3:5b:3c:a5:4e:d3:
aa:65:3b:ad:5e:2f:7e:0b:c1:46:64:e9:22:87:eb:
e7:af:9f:cf:06:d7:0b:ec:24:10:95:e0:71:3d:c8:
82:bc:f8:ea:7c:ac:43:dd:0b:12:b0:c3:a0:75:14:
a9:3c:ad:a9:5b:61:41:02:04:9d:fe:0c:e0:3a:3b:
a0:d3:c2:d1:43:25:c5:7b:e6:bb:8d:c3:5b:f3:d7:
9e:88:c9:44:b9:f5:dc:90:fc:72:24:15:a4:d4:59:
6e:fb:53:d1:b7:e2:5b:3b:70:4d:60:5b:9c:32:9d:
2b:c4:74:4f:a6:60:38:91:b9:ec:6a:92:5d:aa:62:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C3:BD:DB:BE:32:78:9C:EF:CF:C9:CA:E2:F9:3D:64:E5:A2:3D:ED
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/kcO9274yeJzvz8nK4vk9ZOWiPe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.181.0/24
Signature Algorithm: sha256WithRSAEncryption
37:6c:f2:81:f0:30:af:d8:8c:6d:47:a5:8c:a4:6d:d9:6d:a3:
87:04:36:7a:59:ff:72:54:64:eb:12:4e:29:dc:a0:90:5f:46:
7a:4e:a4:94:f1:85:13:5e:fe:e6:ab:35:da:f4:3d:fb:90:e8:
ac:dd:a1:c7:4c:e9:c8:91:eb:9c:f4:05:b1:4a:4e:6b:8a:cf:
f9:c7:db:5c:a2:03:00:90:45:9e:a7:f3:f3:4c:53:f3:7f:a1:
c4:a7:01:04:74:bf:66:ed:c4:d0:1c:cc:01:20:0b:f5:39:c4:
b9:12:6c:0f:f0:24:f4:e4:99:ae:64:da:11:a8:52:2e:5a:ce:
dc:db:40:37:6b:64:86:67:c8:f1:ff:90:ad:72:c3:ec:93:c3:
da:05:81:a9:3f:41:5f:68:c5:29:ce:11:16:9f:11:63:5b:87:
ce:c3:49:47:91:57:6e:24:70:5a:b4:25:53:c6:e8:34:a7:39:
16:51:81:59:44:c6:48:c7:6e:00:5f:ce:7a:d5:f6:7c:74:01:
5e:a1:e6:01:82:3f:a5:44:15:1f:11:c1:1d:5b:e7:bd:fe:10:
14:09:2d:bb:1e:fc:d8:58:7e:8a:13:5a:4f:89:da:45:07:a7:
5b:fa:ee:41:ab:a1:cd:80:12:2d:ee:e0:15:aa:ed:7e:3b:ed:
a4:da:f6:79
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 17 06:15:19 2023 by rpki-client on console-fra.rpki-client.org