Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/nqN-QVZcgCb8geqFWB6MVmfn6Eg.roa
File: nqN-QVZcgCb8geqFWB6MVmfn6Eg.roa (raw, json)
Hash identifier: o3nEioe9pUAURDR7fLiQnEE2DJn7Labp7dCyeRS8soI=
Subject key identifier: 9E:A3:7E:41:56:5C:80:26:FC:81:EA:85:58:1E:8C:56:67:E7:E8:48
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 018DCD9B5F8307DF0C05B573CB4D7F53A8B9
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/nqN-QVZcgCb8geqFWB6MVmfn6Eg.roa
Signing time: Wed 21 Feb 2024 21:38:48 +0000
ROA not before: Wed 21 Feb 2024 21:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.33.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Mar 2024 13:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cd:9b:5f:83:07:df:0c:05:b5:73:cb:4d:7f:53:a8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Feb 21 21:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ea37e41565c8026fc81ea85581e8c5667e7e848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:c1:53:38:6e:70:4a:33:c5:b8:60:30:10:
dc:25:df:7d:47:67:4f:6c:56:38:cb:02:a5:7f:a9:
14:b0:b5:de:5f:13:e1:c6:7d:7c:37:87:49:cc:bc:
ff:71:41:f9:a8:b2:a9:34:49:cd:d5:d0:ed:1a:bc:
92:ff:ad:7c:a3:00:ca:15:d0:4b:8b:f3:fb:ed:88:
c0:63:d7:f1:a9:88:7f:76:7a:7f:03:96:0a:19:e4:
ca:15:6d:fa:81:7b:5d:a7:ee:d1:79:ae:59:da:0c:
5c:b5:82:29:83:e9:e1:a9:d3:f0:44:08:a3:9e:f6:
75:43:5c:5e:18:19:37:8f:c3:41:d6:e9:16:5b:1d:
4b:f2:98:40:b1:51:a8:01:39:e3:ff:94:29:ee:1c:
bd:e2:20:5b:cb:3d:33:43:14:57:f3:06:e0:b7:67:
d6:3c:51:4b:bd:7d:7d:45:df:d7:bd:00:35:b1:4f:
21:1f:b4:ca:9e:0e:1b:81:b2:95:f9:9c:d4:af:a1:
28:67:b8:53:8d:6a:b4:8c:6d:5c:74:6f:6c:d5:7d:
20:ba:e4:94:2c:ed:8d:a2:74:eb:38:8a:f0:ed:13:
ec:b9:76:07:c7:7f:79:fc:da:06:a9:ba:8f:e5:77:
c8:02:83:73:cb:88:d8:a4:16:9d:df:6c:e5:b4:6c:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A3:7E:41:56:5C:80:26:FC:81:EA:85:58:1E:8C:56:67:E7:E8:48
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/nqN-QVZcgCb8geqFWB6MVmfn6Eg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.26.0/24
Signature Algorithm: sha256WithRSAEncryption
65:7f:3a:33:bb:81:5f:f8:65:db:8c:00:51:b1:64:6f:c1:2b:
a8:d7:b5:22:66:38:f8:02:d6:c9:92:83:3c:e0:f8:05:52:e0:
26:fc:ac:c0:31:6c:25:20:48:94:fe:b2:14:bc:bf:22:3c:60:
c6:9b:10:b3:02:ee:6b:b7:8e:3b:6d:fc:62:ac:33:9d:6f:9d:
48:52:6c:bd:68:65:8e:89:36:db:27:74:a3:5d:c7:72:bb:a9:
67:20:68:a6:0e:85:fa:dd:50:25:28:c9:6e:18:75:65:9f:35:
d9:91:31:c0:83:e5:9d:52:90:e3:06:bc:bb:3e:f6:df:57:53:
6c:89:17:8d:e4:14:33:31:0e:1d:f5:c7:27:ba:c5:f0:b1:3a:
00:60:bc:7b:2d:6d:48:36:30:01:bc:df:13:1c:39:64:70:ef:
5c:72:26:6c:01:89:b2:cd:9f:79:a5:e3:a6:00:78:b6:69:8a:
08:b6:32:e0:ae:44:86:a7:ad:16:bb:03:20:63:cf:ae:9a:4d:
18:53:ab:c9:8a:ae:ae:93:d8:2f:73:25:c8:9d:70:f4:65:d6:
6c:c5:42:56:5d:87:a1:f1:e8:12:35:fe:00:ac:8f:e5:e9:22:
d0:9d:ed:11:9b:cd:63:70:69:0a:ed:75:7f:4f:25:89:57:1c:
58:3d:47:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 9 17:14:16 2024 by rpki-client on console-ams.rpki-client.org