Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/D-L5_RBnWaJxEFVSKiqegM6ixtc.roa
File: D-L5_RBnWaJxEFVSKiqegM6ixtc.roa (raw, json)
Hash identifier: QFEMHZR/wp7kMarKuHTOyb+3Z80aYTmlHgQRJ+uUik0=
Subject key identifier: 0F:E2:F9:FD:10:67:59:A2:71:10:55:52:2A:2A:9E:80:CE:A2:C6:D7
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 018E390B99296C7F4D463609BBD129F454B3
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/D-L5_RBnWaJxEFVSKiqegM6ixtc.roa
Signing time: Wed 13 Mar 2024 18:20:45 +0000
ROA not before: Wed 13 Mar 2024 18:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 185.33.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 09:15:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:39:0b:99:29:6c:7f:4d:46:36:09:bb:d1:29:f4:54:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Mar 13 18:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fe2f9fd106759a2711055522a2a9e80cea2c6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:ac:c9:ba:50:6c:f0:27:48:aa:e1:9f:5f:
d4:77:33:53:e7:4c:7a:c4:6d:87:90:18:d4:c4:b2:
12:8e:7b:dd:98:0b:af:d7:48:5f:be:08:21:cb:b4:
04:c8:bf:2a:72:cc:a1:ec:f0:e6:60:1b:e1:07:6d:
92:be:33:19:33:1a:07:00:1f:3c:dc:c1:a0:b3:d7:
10:79:c8:37:97:f6:46:cc:75:b9:7c:95:08:2e:a9:
90:0f:12:e8:36:34:72:11:be:11:a9:20:82:51:f3:
1d:49:43:97:6f:85:a3:b8:f3:34:d8:85:9e:fe:48:
59:2e:2a:4b:29:71:09:44:70:1a:db:67:30:7f:bb:
ab:7c:fe:95:0d:59:2c:3b:98:12:ba:70:53:4b:b3:
53:d6:20:fd:b8:37:3a:43:0f:14:5f:c7:4c:9c:ca:
92:5d:81:66:0f:de:18:b2:cf:83:42:ec:2d:80:66:
7b:37:12:fd:da:d8:ba:48:6e:4b:84:88:d5:42:54:
c4:a0:f8:9f:1f:d5:72:70:c8:dc:93:7f:7a:8c:95:
11:6b:9c:61:91:99:54:17:55:0e:92:c2:6d:49:7f:
65:a5:00:27:a0:4b:48:ae:23:4d:c7:e4:b5:bf:e5:
4d:6c:2f:3c:97:db:cd:cc:c9:3b:4f:9a:1c:86:bc:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E2:F9:FD:10:67:59:A2:71:10:55:52:2A:2A:9E:80:CE:A2:C6:D7
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/D-L5_RBnWaJxEFVSKiqegM6ixtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.26.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:0b:92:ad:b2:45:c6:ed:b5:39:59:3e:14:42:a4:d3:ca:05:
4f:c3:18:90:db:86:37:69:75:84:88:3d:ba:72:63:da:04:ff:
02:ef:9b:75:b9:e8:43:b3:16:b5:2a:ba:56:6a:21:01:18:69:
19:3a:db:d7:29:6f:66:05:75:26:d0:d3:8f:aa:65:6e:79:99:
aa:56:5b:6d:c1:2d:d5:d5:1a:49:7b:71:3c:17:b9:af:2c:23:
75:69:77:73:3e:63:53:73:46:fa:82:27:ea:e3:c6:49:89:86:
3c:3b:55:40:42:52:36:d9:dc:90:09:d9:59:8b:19:3e:9c:cd:
f3:ea:85:66:42:dd:9d:42:49:14:0a:15:43:5d:07:5b:21:41:
22:ae:75:c9:2e:be:8c:f5:82:51:60:fc:ea:9d:bc:0e:11:58:
72:2c:cc:db:49:80:9a:b6:21:0c:e4:25:a5:02:09:ac:18:01:
1e:b3:a6:14:58:71:b3:fb:a9:78:8c:3a:ab:cc:34:20:f1:8f:
40:40:db:9a:f4:c8:91:23:7b:c4:aa:6b:6e:fe:0d:0f:05:6a:
9f:2d:f6:b2:a4:52:d0:e3:6d:67:bc:bd:c9:e9:b6:4a:08:1c:
af:8a:ea:d8:97:65:44:15:10:b2:10:66:db:57:d2:79:2e:8c:
cb:60:de:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 13:03:54 2024 by rpki-client on console-ams.rpki-client.org