Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/BVWulMXZZZWp-hmogDQC4UOvEw4.roa
File: BVWulMXZZZWp-hmogDQC4UOvEw4.roa (raw, json)
Hash identifier: lmJ1P3SrV6/Bb3YaP+KvKvmaHMaGkMnEWrER34XOZ6Y=
Subject key identifier: 05:55:AE:94:C5:D9:65:95:A9:FA:19:A8:80:34:02:E1:43:AF:13:0E
Certificate issuer: /CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Certificate serial: 01857130A26E051127007869BFAB2B70AC05
Authority key identifier: E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/BVWulMXZZZWp-hmogDQC4UOvEw4.roa
Signing time: Mon 02 Jan 2023 06:34:50 +0000
ROA not before: Mon 02 Jan 2023 06:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211320
IP address blocks: 185.26.138.0/24 maxlen: 24
185.26.139.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a2:6e:05:11:27:00:78:69:bf:ab:2b:70:ac:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Validity
Not Before: Jan 2 06:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0555ae94c5d96595a9fa19a8803402e143af130e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9e:f4:f5:73:e2:a9:a7:75:b5:b5:e8:cb:36:
46:1a:f2:0a:12:96:c5:a1:4c:2b:d6:af:54:78:63:
a2:2e:9b:12:af:96:4c:6a:44:9a:7b:9c:7f:7d:1c:
88:a9:ff:63:ff:7d:c9:d1:40:52:66:10:06:4b:83:
c7:6c:d3:d5:62:f2:b6:ea:03:6c:3b:ab:ab:cb:93:
3a:f5:23:21:eb:4b:99:8a:29:fe:5a:c1:1d:2c:d3:
1c:eb:bf:6e:74:12:77:6a:d2:d3:1a:cd:c8:f3:93:
8c:c5:65:02:a6:cc:b1:a9:20:95:d8:11:b7:38:7f:
c6:56:22:93:2a:bd:24:4b:9d:e8:36:08:46:37:b1:
99:b7:d9:7e:e5:11:e9:7a:f3:8c:74:1f:b2:f2:01:
8f:5c:54:97:08:03:ee:3d:86:7e:da:b1:3b:a3:e9:
9f:ae:4c:32:0a:87:64:84:c6:05:8f:38:d5:63:c0:
5e:77:17:7d:17:99:b9:c3:b8:23:71:50:a4:20:a4:
a6:d4:66:61:b2:dc:90:5d:cb:be:90:4d:7c:2a:91:
96:e9:4b:d9:e1:bb:86:19:fd:ea:dd:db:18:14:1f:
d5:1b:51:43:38:88:64:49:c4:ca:7a:be:ca:c6:66:
a7:78:69:52:c6:67:3e:10:da:28:42:93:bb:1f:b5:
5a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:55:AE:94:C5:D9:65:95:A9:FA:19:A8:80:34:02:E1:43:AF:13:0E
X509v3 Authority Key Identifier:
keyid:E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/BVWulMXZZZWp-hmogDQC4UOvEw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.138.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:7d:b9:65:27:97:52:65:29:48:b2:71:13:64:4b:3f:4c:1b:
ca:39:fa:7e:9e:40:7e:8f:f6:3b:17:d9:77:a2:20:70:fb:7b:
34:37:9c:d4:af:dc:66:1c:38:7c:f3:77:34:a1:a7:42:83:dc:
24:ac:9b:c4:69:07:c4:43:fe:6f:ef:61:d2:bc:18:e5:a5:b7:
10:c3:72:15:96:82:6d:cb:18:47:22:ec:6d:cc:bc:f9:aa:79:
e9:d0:20:32:fb:38:3f:21:a2:2d:86:67:bb:6e:36:7f:62:66:
bf:d9:c3:b5:17:7b:f1:13:49:ec:64:a9:24:5f:dc:fe:a8:6d:
92:da:80:ae:7e:7c:60:fe:f1:e8:ab:e0:5e:3a:f8:cf:87:ba:
b8:b1:b4:20:7e:d3:1c:21:37:3c:b8:22:c2:6e:35:b9:d6:df:
de:0e:2f:7f:35:e0:3c:1a:f1:54:73:95:f5:2f:9f:67:a3:95:
7b:a4:58:2a:9a:d4:fd:16:2e:00:a7:ec:b4:5e:ed:bb:08:76:
27:70:9f:a4:e9:85:e4:0f:74:e3:3c:d7:4a:c3:fd:ee:76:4a:
c2:3a:5c:88:2b:c5:3e:41:13:e9:c7:09:0e:fb:9d:f2:fe:c4:
39:5a:e9:9a:8c:ae:03:f1:b7:35:cc:b6:05:8a:7f:09:bd:63:
81:a2:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:58 2024 by rpki-client on console-fra.rpki-client.org