Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/jaLlgv8FnJ7zw6Mb6hFoUxyF_7U.roa
File: jaLlgv8FnJ7zw6Mb6hFoUxyF_7U.roa (raw, json)
Hash identifier: c1TIQeuw4qr9siruoQWbnchZDyfdYdzfvLfyroNuSDU=
Subject key identifier: 8D:A2:E5:82:FF:05:9C:9E:F3:C3:A3:1B:EA:11:68:53:1C:85:FF:B5
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 018AED3AFBD9081BE2E4A37037FDC456ADAA
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/jaLlgv8FnJ7zw6Mb6hFoUxyF_7U.roa
Signing time: Sun 01 Oct 2023 21:53:00 +0000
ROA not before: Sun 01 Oct 2023 21:53:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52073
IP address blocks: 185.33.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ed:3a:fb:d9:08:1b:e2:e4:a3:70:37:fd:c4:56:ad:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Oct 1 21:53:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8da2e582ff059c9ef3c3a31bea1168531c85ffb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:41:e0:b6:12:0e:e5:c3:d1:56:94:02:fb:54:
d4:6d:55:26:ff:b2:6f:d3:7d:41:d0:fc:94:a1:e6:
ea:ad:08:fe:87:08:64:fa:cd:af:ad:2f:2b:40:3b:
93:15:59:e7:f2:6d:25:18:84:b2:80:26:fd:cf:16:
08:9b:7f:6b:04:c3:93:bf:5a:da:c5:dd:17:35:49:
90:36:4d:35:c7:91:d7:53:48:a8:21:f9:59:cc:ca:
fa:eb:e2:5b:3d:22:f4:30:1f:04:48:48:be:e2:e5:
e9:8b:49:d6:26:b2:f3:00:2e:eb:b3:0a:25:3d:ce:
3b:0d:ba:47:1e:e8:e4:af:10:e6:6c:ac:e4:92:99:
c5:35:67:a6:9f:65:64:7f:84:7b:76:fc:ad:2b:5b:
8d:ca:da:44:72:fc:07:97:94:66:49:16:d1:83:20:
aa:f8:9c:d1:d3:5d:1d:a2:82:cd:07:7b:9b:2c:3b:
74:4c:90:d3:bc:f8:16:87:09:10:c0:3c:47:81:92:
7e:ca:02:13:15:7e:58:29:83:98:b6:c6:a9:db:82:
91:76:47:cf:eb:bc:ca:33:8c:d7:ee:a2:97:dd:75:
4a:21:65:50:bc:96:7d:83:c2:2f:bd:7a:da:df:c8:
7b:be:52:3a:7b:aa:1d:ed:37:33:e6:1a:e3:19:d4:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A2:E5:82:FF:05:9C:9E:F3:C3:A3:1B:EA:11:68:53:1C:85:FF:B5
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/jaLlgv8FnJ7zw6Mb6hFoUxyF_7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.26.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a1:40:3f:5f:8b:80:c8:07:0a:a0:ff:8e:c2:da:bd:41:1b:
52:68:b0:c4:a3:67:a6:4d:7d:bc:6e:6e:b6:59:c2:a6:97:4f:
85:19:ad:73:cc:6a:f6:b5:ab:71:7f:e0:d4:ee:f7:15:c1:00:
66:ec:f8:43:d4:10:cd:9f:7d:08:bf:7b:27:11:23:50:2a:0a:
2d:22:90:61:aa:9d:f5:c2:70:f6:e6:5c:30:45:0c:a7:de:ad:
65:77:8d:87:03:c4:03:fa:33:16:1d:b2:99:e0:ce:c4:68:3a:
ba:ff:58:df:e1:ea:c8:52:f0:1e:ac:7e:c8:8d:64:23:f1:3a:
45:d5:ae:9c:9e:20:c3:a7:23:9d:64:63:f7:5e:39:d4:30:b6:
a5:64:ee:86:55:e1:05:c4:26:d3:a6:31:00:f6:19:c1:05:36:
e9:4f:e7:f1:a3:78:07:c6:26:95:0c:a1:45:bd:ef:ce:6f:00:
ee:57:02:f0:61:67:76:b8:e4:65:1b:79:6f:fe:1b:bb:ca:67:
28:06:55:0a:de:e2:7e:95:5c:a9:78:d6:2c:41:ef:d6:58:99:
45:cb:63:b5:03:fe:ae:36:95:22:b7:44:57:92:66:60:6d:85:
ee:50:08:41:e3:3c:a9:88:6c:ec:f6:b8:5e:35:ea:ad:63:10:
bd:3d:d9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 19:01:41 2023 by rpki-client on console-ams.rpki-client.org