Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/NY74CxSfY-U93iVizwBoBwUrbZ0.roa
File: NY74CxSfY-U93iVizwBoBwUrbZ0.roa (raw, json)
Hash identifier: I022wf6SqSVo/bCvIddLC+IjEoSAcZYFN0IuAaplBRs=
Subject key identifier: 35:8E:F8:0B:14:9F:63:E5:3D:DE:25:62:CF:00:68:07:05:2B:6D:9D
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 01856EF439D4542C3AEA52CFEBB0E840EE0F
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/NY74CxSfY-U93iVizwBoBwUrbZ0.roa
Signing time: Sun 01 Jan 2023 20:09:37 +0000
ROA not before: Sun 01 Jan 2023 20:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206818
IP address blocks: 185.158.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:39:d4:54:2c:3a:ea:52:cf:eb:b0:e8:40:ee:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: Jan 1 20:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=358ef80b149f63e53dde2562cf006807052b6d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d5:19:af:4a:d2:f3:99:f9:f6:19:f6:8c:ab:
e5:72:dc:77:0c:28:ea:ba:13:8e:30:34:3e:53:da:
6f:35:bd:30:21:1d:de:42:8a:78:b1:75:7f:b0:19:
a6:fa:a2:e9:6f:85:37:e2:7f:4c:d0:f8:5e:3e:d4:
c4:a7:0e:d2:b7:ce:c7:59:55:8f:4d:46:6b:ff:22:
d7:97:9a:a3:3b:c8:1a:fe:d7:60:5a:8a:b4:bb:34:
38:de:c4:11:0c:08:7a:35:c5:38:eb:81:8d:2c:05:
89:30:a5:09:a3:11:53:43:c4:30:b0:96:4f:bc:c4:
08:72:d1:de:eb:6c:6a:c8:a7:ba:bc:89:ca:8c:ac:
c7:92:b1:c6:51:03:6e:b8:f0:19:51:3d:91:ff:20:
b3:2b:80:ca:5d:8f:cd:7f:fd:2b:68:a2:3b:c1:5e:
05:e3:e8:6d:24:7a:fc:59:be:0c:40:40:81:35:dc:
a8:26:38:8f:73:56:b5:6f:82:89:28:e9:dc:a1:c4:
a7:33:35:46:20:30:20:2b:be:4c:ff:7c:fa:f4:f3:
b4:bc:8d:91:45:22:6e:b4:a2:91:ec:fb:3e:4d:9f:
09:89:55:8e:a4:49:a1:22:ad:de:a4:38:42:52:41:
60:6e:e2:57:00:91:fa:d7:14:cc:a2:db:1c:78:29:
61:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8E:F8:0B:14:9F:63:E5:3D:DE:25:62:CF:00:68:07:05:2B:6D:9D
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/NY74CxSfY-U93iVizwBoBwUrbZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.126.0/24
Signature Algorithm: sha256WithRSAEncryption
95:52:ef:4c:7c:7e:df:a1:4c:8b:96:32:c8:30:b8:13:f7:4e:
9f:b1:c1:93:34:13:e9:fa:2d:a0:99:c4:c3:ac:5f:66:d5:d8:
dd:56:93:97:96:3d:58:c9:ee:0f:6c:85:45:a0:4e:3b:ea:7d:
4c:81:c2:33:a4:72:8c:da:b6:5f:83:3c:22:74:c0:63:8f:63:
1a:7e:85:4f:5f:0d:a4:aa:fd:48:62:ff:84:32:65:11:8d:ac:
b2:56:7c:00:fd:1f:68:bb:ae:0f:d3:05:e9:09:83:9f:55:70:
1a:a9:cf:c8:2b:fe:d0:f3:0a:21:a7:6b:8d:ab:a9:df:80:2f:
95:bb:d4:06:8b:ff:01:6e:3a:06:50:48:d6:01:c1:6a:48:a8:
8d:b5:13:c6:a4:ba:f3:1d:4d:c3:3c:ab:8c:2f:5a:fd:89:44:
0e:b6:e6:78:66:c2:0f:b7:d0:31:83:28:44:69:ad:8a:32:4e:
fb:be:37:3c:2a:f9:56:91:cf:b8:97:f6:a8:04:ee:ac:03:c2:
ea:06:da:8c:d1:dc:a1:15:ba:14:7c:6d:a9:63:66:ab:e1:66:
be:34:58:6b:4d:35:66:2b:b9:23:0b:48:36:4c:a4:55:66:a8:
88:cd:be:30:c8:4a:b4:e0:2c:9f:9b:0c:0f:6a:aa:9e:2b:2c:
7a:10:7d:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu9DnUVCw66lLP67DoQO4PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE4Y2JiMGY5ZDFlNTczNzczZDc5MTEzOGEwMTIyZjI4
YmVjNTYwHhcNMjMwMTAxMjAwOTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNThlZjgwYjE0OWY2M2U1M2RkZTI1NjJjZjAwNjgwNzA1MmI2ZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dUZr0rS85n59hn2jKvlctx3DCjq
uhOOMDQ+U9pvNb0wIR3eQop4sXV/sBmm+qLpb4U34n9M0PhePtTEpw7St87HWVWP
TUZr/yLXl5qjO8ga/tdgWoq0uzQ43sQRDAh6NcU464GNLAWJMKUJoxFTQ8QwsJZP
vMQIctHe62xqyKe6vInKjKzHkrHGUQNuuPAZUT2R/yCzK4DKXY/Nf/0raKI7wV4F
4+htJHr8Wb4MQECBNdyoJjiPc1a1b4KJKOncocSnMzVGIDAgK75M/3z69PO0vI2R
RSJutKKR7Ps+TZ8JiVWOpEmhIq3epDhCUkFgbuJXAJH61xTMotsceClhdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDWO+AsUn2PlPd4lYs8AaAcFK22dMB8GA1UdIwQY
MBaAFAiBjLsPnR5XN3PXkROKASLyi+xWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHTXV3LWRIbGMzYzllUkU0b0JJdktMN0ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yZTA1MzYtNGNhMi00YWZlLTgzZDYt
MzM2ZTg3NGYzZDg3LzEvTlk3NEN4U2ZZLVU5M2lWaXp3Qm9Cd1VyYlowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yZTA1MzYtNGNhMi00YWZlLTgzZDYtMzM2ZTg3NGYzZDg3
LzEvQ0lHTXV3LWRIbGMzYzllUkU0b0JJdktMN0ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ5+MA0G
CSqGSIb3DQEBCwUAA4IBAQCVUu9MfH7foUyLljLIMLgT906fscGTNBPp+i2gmcTD
rF9m1djdVpOXlj1Yye4PbIVFoE476n1MgcIzpHKM2rZfgzwidMBjj2MafoVPXw2k
qv1IYv+EMmURjayyVnwA/R9ou64P0wXpCYOfVXAaqc/IK/7Q8wohp2uNq6nfgC+V
u9QGi/8BbjoGUEjWAcFqSKiNtRPGpLrzHU3DPKuML1r9iUQOtuZ4ZsIPt9AxgyhE
aa2KMk77vjc8KvlWkc+4l/aoBO6sA8LqBtqM0dyhFboUfG2pY2ar4Wa+NFhrTTVm
K7kjC0g2TKRVZqiIzb4wyEq04CyfmwwPaqqeKyx6EH33
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:43 2024 by rpki-client on console-ams.rpki-client.org