Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/ukOOOEtSCwee98dX5edTfVOYOls.roa
File: ukOOOEtSCwee98dX5edTfVOYOls.roa (raw, json)
Hash identifier: hw4kmmWZGDH5cGk7zIXBtsC3xSHNHA9attUL6YgCRpM=
Subject key identifier: BA:43:8E:38:4B:52:0B:07:9E:F7:C7:57:E5:E7:53:7D:53:98:3A:5B
Certificate issuer: /CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Certificate serial: 0186F0AA95F1A5B0BD199AFB22593A57E27D
Authority key identifier: 0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/ukOOOEtSCwee98dX5edTfVOYOls.roa
Signing time: Fri 17 Mar 2023 17:42:36 +0000
ROA not before: Fri 17 Mar 2023 17:42:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199834
IP address blocks: 185.141.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f0:aa:95:f1:a5:b0:bd:19:9a:fb:22:59:3a:57:e2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a70202c312dd2c7a6ffc317aa86e4e2069249a6
Validity
Not Before: Mar 17 17:42:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba438e384b520b079ef7c757e5e7537d53983a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:78:9c:39:77:ef:d2:aa:bb:ee:81:dd:5e:
f6:c7:50:c5:59:74:cb:ad:ed:72:91:b0:e0:80:a8:
2a:3a:e1:a6:e1:4a:a0:ea:ec:56:86:b0:9e:65:b0:
90:01:46:61:61:a9:84:05:03:2e:15:e4:f6:e2:ef:
08:10:30:3f:6c:4c:be:0b:53:04:88:34:6d:f2:14:
d2:01:df:75:11:52:d6:c1:ed:a8:81:df:ce:43:67:
75:6c:21:7c:fb:41:01:de:d1:33:3d:24:00:d5:93:
50:88:5f:90:26:fc:8e:75:3a:40:04:c8:f7:cd:f5:
1b:96:c9:3f:e6:10:4a:c3:c2:b9:40:ca:7e:8e:3e:
0e:09:2b:39:28:87:0e:d4:eb:69:63:1f:e6:65:9b:
a5:b2:d9:5a:0b:cb:6e:f9:24:77:ed:af:06:06:70:
98:dd:9a:ee:e7:52:18:30:2d:46:2a:b0:ac:3c:91:
65:ae:3a:06:c2:ad:2d:86:19:5e:66:40:a2:a5:d9:
01:ec:ec:5f:14:0f:03:71:a3:e2:d5:fe:c8:ff:8e:
a8:eb:34:b1:ee:96:a9:04:59:42:6d:44:94:29:55:
32:31:90:2f:d8:2b:86:90:fb:d9:0c:4d:f9:57:b3:
50:53:91:6e:64:5c:c5:2e:a9:05:72:61:f9:ce:a1:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:43:8E:38:4B:52:0B:07:9E:F7:C7:57:E5:E7:53:7D:53:98:3A:5B
X509v3 Authority Key Identifier:
keyid:0A:70:20:2C:31:2D:D2:C7:A6:FF:C3:17:AA:86:E4:E2:06:92:49:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnAgLDEt0sem_8MXqobk4gaSSaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/ukOOOEtSCwee98dX5edTfVOYOls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8ff697-57fc-40ff-8a53-68c849277d73/1/CnAgLDEt0sem_8MXqobk4gaSSaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.26.0/24
Signature Algorithm: sha256WithRSAEncryption
56:00:0a:88:d6:37:c4:a8:ac:b2:ae:80:51:59:ee:26:86:a7:
de:23:8f:96:17:b6:83:3f:21:b0:25:f4:4e:e4:5f:21:26:65:
8f:47:1b:c7:2b:a3:6a:63:1c:6b:35:79:61:e5:9e:52:a4:8f:
87:7c:23:12:26:7c:ed:00:7d:ac:8b:56:c6:a1:d5:a2:bb:d2:
c3:c6:41:74:6d:45:60:a5:29:82:33:e8:f7:6f:97:1c:82:25:
41:d5:39:ab:7f:d8:01:c0:9c:d8:05:cb:c3:ac:62:ba:d7:9d:
2a:df:75:41:5d:a3:b2:d5:bf:9a:9a:8b:a9:04:6e:4a:e3:ea:
7f:0d:1e:75:14:45:44:84:d1:05:2d:c4:53:d1:b2:97:17:77:
1c:36:a5:09:e3:25:ea:e7:ce:12:60:8d:f7:3b:5c:11:83:ed:
a0:69:83:5a:15:8c:e9:86:36:fc:dc:b1:ea:e6:71:d5:26:17:
9e:22:d5:c7:1b:ac:1d:6b:43:9e:7e:3e:3b:89:ff:a0:9c:32:
a2:ab:35:63:f2:14:fb:13:ca:7c:66:45:d4:4a:ea:3e:d0:1e:
25:7c:42:b3:34:de:8d:0a:21:a4:56:86:a4:db:a6:28:44:4d:
e7:b6:ae:b5:2a:0d:12:f7:92:7b:0a:f1:cc:5f:f3:bb:63:7b:
30:f2:52:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:11 2024 by rpki-client on console-ams.rpki-client.org