Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/guBCxuAjcs1_KA9l5RcoFD1228c.roa
File: guBCxuAjcs1_KA9l5RcoFD1228c.roa (raw, json)
Hash identifier: WhnOkMWwmh6tFXXvJGCjk8RUe6s0iPiRdT0ZokinuBc=
Subject key identifier: 82:E0:42:C6:E0:23:72:CD:7F:28:0F:65:E5:17:28:14:3D:76:DB:C7
Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial: 018CC42507D17AE3FB66E72F7D90D620E24A
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/guBCxuAjcs1_KA9l5RcoFD1228c.roa
Signing time: Mon 01 Jan 2024 08:30:10 +0000
ROA not before: Mon 01 Jan 2024 08:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59887
IP address blocks: 185.48.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:07:d1:7a:e3:fb:66:e7:2f:7d:90:d6:20:e2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Validity
Not Before: Jan 1 08:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82e042c6e02372cd7f280f65e51728143d76dbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:06:58:e0:92:1a:2a:4b:a8:37:9f:18:e5:83:
55:42:66:a7:38:75:27:89:ea:65:dd:60:a6:58:5d:
78:14:ea:67:e2:92:fb:d8:e0:65:c4:31:7e:e9:a7:
1b:41:28:9f:ae:7a:06:dc:ac:99:e4:52:cc:a4:f3:
b5:c4:04:46:64:4a:39:f6:7c:e4:0b:b2:5c:75:da:
ed:28:82:76:c1:af:91:77:82:c8:97:33:66:ca:64:
c9:8d:61:6d:c0:b5:20:64:e1:7a:5a:68:20:25:9e:
7b:4c:4d:f5:70:5a:91:1c:91:05:5e:d0:7d:0e:f4:
ef:ae:15:1b:b9:c9:75:f2:8e:77:d3:ee:15:1b:7d:
d4:62:b7:c4:4e:6d:55:dc:45:cc:eb:37:e4:10:db:
15:a6:31:d2:5c:5f:0c:61:58:33:7e:96:ec:9d:02:
b2:88:58:ed:74:e3:e5:b7:9f:6e:60:69:6c:39:79:
2f:56:9c:c5:f9:5a:cc:80:7b:c1:03:37:10:bd:17:
bf:6b:92:fb:40:57:3c:ad:9f:c3:4c:92:18:b2:6d:
f7:87:0f:27:e1:a7:01:03:11:22:c1:77:28:77:4a:
a5:56:58:e1:22:be:1a:b5:77:d8:e2:f0:cc:ef:36:
be:92:db:24:83:a3:12:f0:be:37:ac:17:da:b9:4e:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E0:42:C6:E0:23:72:CD:7F:28:0F:65:E5:17:28:14:3D:76:DB:C7
X509v3 Authority Key Identifier:
keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/guBCxuAjcs1_KA9l5RcoFD1228c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d2:45:fd:73:08:aa:0d:4e:33:a0:6e:3d:5d:6e:27:ff:e5:
ad:30:72:d9:a7:86:50:df:89:3d:8e:ca:f8:af:67:3d:b1:05:
af:dc:fb:1d:21:1c:1a:23:10:a4:e0:71:f9:a9:d3:f2:8e:ed:
ac:af:e9:f1:c5:4a:a3:2f:78:45:73:5b:83:bc:3e:0c:df:e4:
a8:15:2a:a4:01:a0:3c:7b:49:1f:d2:7e:05:af:72:c5:eb:f7:
87:7a:90:79:84:1c:51:0f:12:e5:a2:7a:df:d0:c6:99:bf:6f:
96:2f:a7:15:f5:f8:6d:11:5d:13:6f:94:2b:3c:d3:89:6b:57:
10:ec:8a:2b:9e:3c:0e:75:6b:33:bd:8e:88:b3:bb:68:20:46:
ec:9e:33:55:3c:d1:01:30:5b:d2:72:63:4d:64:d1:2c:64:97:
f2:4c:a3:51:a6:c5:95:be:56:ac:45:95:23:05:63:3e:d1:e3:
09:57:8e:45:60:8a:c6:46:a4:a4:17:65:26:48:33:f9:99:89:
db:72:30:0e:b9:c0:a7:e5:86:88:b4:8c:25:86:16:56:75:8d:
a7:25:d2:01:e1:ae:e6:39:9c:1a:b8:d6:7f:26:37:2c:36:57:
17:7c:25:3d:9d:50:50:db:d9:62:f7:b1:3a:af:ea:19:78:26:
4c:67:13:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:14 2025 by rpki-client