Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/au6FGGPikXzIEyAT16oeYm15LQI.roa
File: au6FGGPikXzIEyAT16oeYm15LQI.roa (raw, json)
Hash identifier: 5Ml3/zCvjuRbmxGRVmhWP3hvT5r1xdff48x1v8j5scM=
Subject key identifier: 6A:EE:85:18:63:E2:91:7C:C8:13:20:13:D7:AA:1E:62:6D:79:2D:02
Certificate issuer: /CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Certificate serial: 01857130A1C47C1EEE93E97BBAA193D43D09
Authority key identifier: E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/au6FGGPikXzIEyAT16oeYm15LQI.roa
Signing time: Mon 02 Jan 2023 06:34:50 +0000
ROA not before: Mon 02 Jan 2023 06:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202005
IP address blocks: 185.26.136.0/24 maxlen: 24
185.26.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a1:c4:7c:1e:ee:93:e9:7b:ba:a1:93:d4:3d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e60bbe0be77c4e2f05791786eadcc8276b261b8c
Validity
Not Before: Jan 2 06:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6aee851863e2917cc8132013d7aa1e626d792d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:a3:f2:4e:8f:0a:99:82:5e:39:21:0f:1a:
d3:81:17:06:64:4e:d4:f2:c5:47:17:f5:24:2b:8f:
3b:da:e0:8c:dd:6a:b6:4b:bc:7b:9c:00:cb:4e:c0:
46:55:59:52:63:d2:c4:d2:c2:e6:a8:b5:54:0b:37:
af:1d:fb:61:b5:1d:0c:df:bb:79:3e:55:59:6d:83:
8f:52:08:9b:a8:9a:2e:1b:93:11:6d:bd:66:8c:4b:
4a:d2:58:62:4c:ee:ba:8e:24:80:80:0c:5e:0f:44:
52:6c:57:fa:a2:9c:47:1c:d9:61:71:40:86:42:68:
a8:e7:86:b8:73:ca:87:75:15:b9:b9:70:ed:e7:83:
47:a6:54:e1:bd:d2:eb:ed:fe:e4:c1:00:17:c4:4c:
03:76:b4:cb:b8:79:a1:ea:76:f7:16:40:6d:b8:c5:
19:91:6b:da:38:16:3f:6a:68:a6:0f:2d:38:e1:a7:
1e:2a:35:a6:ca:b1:2b:54:33:f8:be:22:71:cf:78:
6d:c3:d7:13:b6:fc:83:ca:ff:47:41:6c:d3:7e:7e:
6b:b8:14:8b:89:f9:93:70:5a:b4:06:87:0b:17:b4:
c5:82:ec:f2:3e:d0:7b:e0:19:6e:2a:e9:de:ae:68:
1c:07:b6:ab:fa:06:0c:0e:7f:0a:a8:3a:8a:91:39:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EE:85:18:63:E2:91:7C:C8:13:20:13:D7:AA:1E:62:6D:79:2D:02
X509v3 Authority Key Identifier:
keyid:E6:0B:BE:0B:E7:7C:4E:2F:05:79:17:86:EA:DC:C8:27:6B:26:1B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gu-C-d8Ti8FeReG6tzIJ2smG4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/au6FGGPikXzIEyAT16oeYm15LQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/be4a4c-f8c6-485d-a328-a3ce99643947/1/5gu-C-d8Ti8FeReG6tzIJ2smG4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.136.0/23
Signature Algorithm: sha256WithRSAEncryption
59:47:a7:a5:b0:43:6f:3b:41:e9:97:48:6f:b1:59:fc:1c:fd:
92:b4:fc:5d:75:75:58:ff:d0:db:ec:55:76:ce:c7:a2:f4:e1:
a4:56:91:55:b1:a7:fe:0b:44:3d:33:eb:06:4d:8d:c9:04:a4:
92:ac:7a:de:45:62:64:76:70:54:93:84:47:9a:d5:ad:a2:9d:
1a:60:22:f6:3a:47:cf:9f:79:eb:64:0b:69:c7:59:19:27:45:
dd:32:f6:63:47:73:8a:ea:52:b3:aa:32:1e:b3:ec:db:9e:53:
39:42:3a:48:c6:08:8f:18:19:9a:e2:e9:89:bc:bf:2f:7b:07:
16:42:24:fa:ed:10:0b:c2:0a:f6:eb:a3:39:29:68:7d:7a:62:
9f:5d:b8:1a:14:a3:ab:6e:66:2b:45:18:88:4a:b8:48:b7:ba:
66:e7:57:d8:32:5d:df:50:78:1b:65:ce:d2:44:54:2c:82:11:
87:25:6c:9e:b8:2c:f2:a5:0e:64:bc:77:41:a0:2f:e4:4c:3e:
74:08:14:06:d8:97:fa:de:4c:40:48:81:d0:b7:60:15:7e:fa:
3d:a5:76:0b:ec:02:d5:bc:1f:93:48:76:28:27:31:67:ee:54:
f3:73:6c:14:8f:1f:2f:6f:36:86:6b:a0:83:87:3a:8c:02:55:
e3:0d:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 18:21:46 2024 by rpki-client on console-ams.rpki-client.org