Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/huaLCRcyGhqXZYWgOS6uHsYlrwk.roa
File: huaLCRcyGhqXZYWgOS6uHsYlrwk.roa (raw, json)
Hash identifier: qLxB77pvpiwzWTy5m2UC/paiD7LRP7+AeApA8E/1CVs=
Subject key identifier: 86:E6:8B:09:17:32:1A:1A:97:65:85:A0:39:2E:AE:1E:C6:25:AF:09
Certificate issuer: /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial: 018571032B3A33B3C49AD7F6868DC48841E1
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/huaLCRcyGhqXZYWgOS6uHsYlrwk.roa
Signing time: Mon 02 Jan 2023 05:45:11 +0000
ROA not before: Mon 02 Jan 2023 05:45:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59887
IP address blocks: 185.48.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:2b:3a:33:b3:c4:9a:d7:f6:86:8d:c4:88:41:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Validity
Not Before: Jan 2 05:45:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86e68b0917321a1a976585a0392eae1ec625af09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:07:85:59:47:28:65:d7:fa:69:59:60:11:
40:c4:ef:c1:63:93:1c:a7:5b:99:32:77:69:af:f5:
c3:8f:bd:4c:b2:c5:97:97:38:3b:e6:0f:2c:8f:aa:
2f:4a:a5:98:19:7d:f1:ac:4b:0c:02:fc:01:4c:87:
d3:d9:68:2f:da:37:29:a8:fc:e3:38:dc:48:03:07:
a6:21:50:2d:bf:64:75:33:c8:ec:ae:59:15:78:ec:
0f:a1:1a:62:23:bf:a0:91:66:2d:f0:a3:35:78:28:
d0:02:48:5d:a0:a5:f0:94:f6:88:f0:25:54:85:c8:
dc:db:b6:80:11:dd:d5:0c:d4:d2:bf:cc:10:76:73:
c0:83:24:8b:0a:d7:6e:7b:73:8b:17:70:e4:73:b8:
ae:c0:01:f9:37:ca:0a:fd:33:f6:da:b5:87:03:bb:
22:c0:65:4a:8b:13:38:60:ea:a0:47:b2:ac:f8:39:
0f:fe:4d:10:d4:f0:af:3f:44:36:25:be:bf:55:3d:
d4:60:54:c5:35:b4:3a:f6:cb:fa:cd:8a:a9:6d:7a:
32:bd:22:e3:30:f3:4d:88:d8:61:37:bc:d2:cf:d8:
b2:02:cd:4c:c3:3b:b4:a8:63:48:06:6b:3f:c4:3a:
7f:75:ea:66:b6:3d:34:0b:bd:1e:e2:49:ed:7d:68:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E6:8B:09:17:32:1A:1A:97:65:85:A0:39:2E:AE:1E:C6:25:AF:09
X509v3 Authority Key Identifier:
keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/huaLCRcyGhqXZYWgOS6uHsYlrwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.26.0/24
Signature Algorithm: sha256WithRSAEncryption
60:f0:9f:b2:75:46:d8:f6:57:56:1f:12:9e:11:86:1d:fd:f1:
0c:0c:39:ea:ef:a5:98:47:0d:23:fe:07:d9:c7:a5:a4:e2:c7:
17:0c:22:63:40:a3:60:f0:f7:16:87:ee:bb:e8:81:19:7a:42:
cc:e6:5f:c6:21:e8:d8:9f:37:ad:c9:7f:cf:4c:fe:b6:68:3e:
e9:5c:e6:75:5b:07:4d:ab:8a:77:09:47:44:1b:f2:c8:a0:a3:
3f:5a:ef:99:35:6d:dc:1d:43:3c:4f:a3:c2:c6:57:3a:9b:20:
60:90:00:e2:3b:42:52:e2:29:2e:4c:6c:79:38:11:80:1b:10:
b3:37:ac:2b:29:a7:90:6b:16:d0:63:82:6f:cc:83:3c:0b:a1:
46:cb:43:d9:9c:f6:ff:de:3b:a3:3e:5a:1d:8c:b2:18:13:53:
0b:14:31:93:87:7e:ee:4e:79:f8:70:d9:9c:54:7d:9e:ac:4c:
ab:8b:97:55:68:a3:55:5d:f8:31:ce:0b:b7:dd:af:32:b9:4b:
e4:75:af:05:7d:fd:96:78:fa:99:6c:cd:94:c6:af:31:ce:e9:
6c:b9:16:1d:d8:e8:98:7e:66:e0:75:e2:a3:53:6f:a1:b7:c6:
82:dc:0c:99:de:22:38:29:f0:95:1c:30:c8:10:5a:68:69:d0:
0a:11:9e:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxAys6M7PEmtf2ho3EiEHhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNmVkMDU3OWMzZmQyNTM1OTdlYzgyZjA5MzkxMTFiYTlk
OGM4OGQwHhcNMjMwMTAyMDU0NTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmU2OGIwOTE3MzIxYTFhOTc2NTg1YTAzOTJlYWUxZWM2MjVhZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0UHhVlHKGXX+mlZYBFAxO/BY5Mc
p1uZMndpr/XDj71MssWXlzg75g8sj6ovSqWYGX3xrEsMAvwBTIfT2Wgv2jcpqPzj
ONxIAwemIVAtv2R1M8jsrlkVeOwPoRpiI7+gkWYt8KM1eCjQAkhdoKXwlPaI8CVU
hcjc27aAEd3VDNTSv8wQdnPAgySLCtdue3OLF3Dkc7iuwAH5N8oK/TP22rWHA7si
wGVKixM4YOqgR7Ks+DkP/k0Q1PCvP0Q2Jb6/VT3UYFTFNbQ69sv6zYqpbXoyvSLj
MPNNiNhhN7zSz9iyAs1Mwzu0qGNIBms/xDp/depmtj00C70e4kntfWg88wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIbmiwkXMhoal2WFoDkurh7GJa8JMB8GA1UdIwQY
MBaAFN5u0FecP9JTWX7ILwk5ERup2MiNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAt
ODM4NmU3MGJkYzU4LzEvaHVhTENSY3lHaHFYWllXZ09TNnVIc1lscndrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9mMTNmOTgtNGU3YS00MzVkLWIxYjAtODM4NmU3MGJkYzU4
LzEvM203UVY1d18wbE5aZnNndkNUa1JHNm5ZeUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTAaMA0G
CSqGSIb3DQEBCwUAA4IBAQBg8J+ydUbY9ldWHxKeEYYd/fEMDDnq76WYRw0j/gfZ
x6Wk4scXDCJjQKNg8PcWh+676IEZekLM5l/GIejYnzetyX/PTP62aD7pXOZ1WwdN
q4p3CUdEG/LIoKM/Wu+ZNW3cHUM8T6PCxlc6myBgkADiO0JS4ikuTGx5OBGAGxCz
N6wrKaeQaxbQY4JvzIM8C6FGy0PZnPb/3jujPlodjLIYE1MLFDGTh37uTnn4cNmc
VH2erEyri5dVaKNVXfgxzgu33a8yuUvkda8Fff2WePqZbM2Uxq8xzulsuRYd2OiY
fmbgdeKjU2+ht8aC3AyZ3iI4KfCVHDDIEFpoadAKEZ4c
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:27 2024 by rpki-client on console-ams.rpki-client.org