Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/BdILGALtadkmgyXEBigkTEOMWHA.roa
File: BdILGALtadkmgyXEBigkTEOMWHA.roa (raw, json)
Hash identifier: WYvpynlodiNnB4Y2jirNeVn2y4234IuGhAvsiyewhC8=
Subject key identifier: 05:D2:0B:18:02:ED:69:D9:26:83:25:C4:06:28:24:4C:43:8C:58:70
Certificate issuer: /CN=f4348ae7baedc54ec120f420d79d6a1b71de7fb7
Certificate serial: 0185736860436463BBC8AB8E4D07BF14BDBB
Authority key identifier: F4:34:8A:E7:BA:ED:C5:4E:C1:20:F4:20:D7:9D:6A:1B:71:DE:7F:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9DSK57rtxU7BIPQg151qG3Hef7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/BdILGALtadkmgyXEBigkTEOMWHA.roa
Signing time: Mon 02 Jan 2023 16:54:58 +0000
ROA not before: Mon 02 Jan 2023 16:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 194.26.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:60:43:64:63:bb:c8:ab:8e:4d:07:bf:14:bd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4348ae7baedc54ec120f420d79d6a1b71de7fb7
Validity
Not Before: Jan 2 16:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05d20b1802ed69d9268325c40628244c438c5870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:9c:e4:d0:07:bc:ed:85:a2:ba:9c:ce:2d:
a9:04:45:8c:59:aa:3e:36:00:99:ea:c2:2e:67:83:
01:4f:2d:74:b1:65:eb:4a:77:fc:4f:63:5b:4c:2c:
b6:fa:85:29:74:f7:42:35:0b:00:bf:3d:df:3f:f0:
2e:eb:64:24:6a:c9:f3:09:ba:a3:10:cc:a5:14:59:
2c:6a:08:ca:7b:97:b2:1c:40:e3:96:64:3d:f3:d7:
ca:5f:2f:93:b5:e7:1b:b6:58:74:15:12:e6:38:31:
4d:6e:40:f0:70:7c:99:22:25:fb:b4:9f:75:e9:f6:
dc:27:ec:45:59:b5:52:92:44:97:86:c0:c8:ee:47:
11:58:0c:6c:3f:8f:98:1e:36:75:ce:cf:dc:33:dc:
59:e8:50:1a:e7:83:e7:4a:f1:8b:32:40:1e:ec:10:
f9:ac:64:de:f0:6d:75:c0:cb:49:3b:08:9d:da:48:
14:f5:54:5b:90:8d:ca:8b:30:db:03:4e:dc:8e:5d:
f3:26:49:49:c9:69:f2:1a:54:29:4f:77:1d:17:3f:
d4:35:42:73:65:32:5f:35:b9:25:16:e7:d9:9d:78:
0d:fc:25:f9:1b:a8:fa:39:85:fc:f0:de:57:75:be:
de:79:ea:6f:2a:e7:37:35:33:1e:b0:9f:a2:8b:36:
52:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D2:0B:18:02:ED:69:D9:26:83:25:C4:06:28:24:4C:43:8C:58:70
X509v3 Authority Key Identifier:
keyid:F4:34:8A:E7:BA:ED:C5:4E:C1:20:F4:20:D7:9D:6A:1B:71:DE:7F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9DSK57rtxU7BIPQg151qG3Hef7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/BdILGALtadkmgyXEBigkTEOMWHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c4bd7-c498-4d02-b6fc-6c4e2569679e/1/9DSK57rtxU7BIPQg151qG3Hef7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.129.0/24
Signature Algorithm: sha256WithRSAEncryption
43:79:2b:61:f0:66:3e:58:14:9b:ee:27:05:52:47:87:9a:9b:
1c:72:ab:6b:7e:69:d6:39:2a:7b:0c:d6:f0:e2:44:57:cf:f5:
57:ae:27:05:90:af:a9:e4:f2:2b:ba:24:28:bd:44:e2:ca:77:
8c:bc:96:ce:3c:30:34:6a:a8:72:18:b2:60:2f:25:dc:c7:e1:
ed:73:35:b1:3b:05:37:b5:93:60:53:97:78:c4:ec:84:8d:81:
df:b7:5f:2f:6b:f1:f2:fb:f5:e8:25:33:fe:c9:e8:24:8f:9a:
74:b9:44:78:7b:3a:02:e7:9a:bf:18:bb:b0:1d:48:28:6c:89:
a3:cb:32:bd:83:fa:ea:e4:e0:c8:c6:9c:b4:35:b1:6c:f8:6b:
d4:ca:8d:db:c0:4c:09:30:4a:7e:e1:b4:54:be:4d:e9:89:90:
14:90:4e:5f:b0:ac:21:d6:34:c7:ab:bf:9b:d3:f7:f7:2e:46:
54:d6:8b:7d:a5:99:7d:ce:b5:e5:96:44:77:f6:76:a5:97:cf:
e8:b6:bc:dc:37:39:39:6a:14:33:b7:e7:3e:a4:cc:af:0c:b7:
79:07:2c:17:01:f8:c5:29:20:7b:85:b3:38:93:42:83:ca:bf:
2d:16:68:44:5b:83:34:a0:ff:89:d5:b9:65:d3:1b:22:d8:83:
77:f5:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:50 2023 by rpki-client on console-ams.rpki-client.org