Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/6rTaGnYPwaByMgBjfmHE8WuY1fc.roa
File: 6rTaGnYPwaByMgBjfmHE8WuY1fc.roa (raw, json)
Hash identifier: OAHstgDu2Ht9aryapMDvn28XUNorrTDRjKynmYmMXrU=
Subject key identifier: EA:B4:DA:1A:76:0F:C1:A0:72:32:00:63:7E:61:C4:F1:6B:98:D5:F7
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 018CC94D9946229C6FD04C27C19F2A9D17B3
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/6rTaGnYPwaByMgBjfmHE8WuY1fc.roa
Signing time: Tue 02 Jan 2024 08:32:35 +0000
ROA not before: Tue 02 Jan 2024 08:32:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208871
IP address blocks: 185.156.26.0/24 maxlen: 24
185.156.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 20:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:99:46:22:9c:6f:d0:4c:27:c1:9f:2a:9d:17:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Jan 2 08:32:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eab4da1a760fc1a0723200637e61c4f16b98d5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8a:63:e5:66:e8:cb:28:d2:33:2f:fc:b9:e1:
b6:39:57:5b:7f:b3:03:87:de:a4:94:7f:a7:66:71:
0e:54:d3:a8:1e:74:d6:fb:10:49:d9:25:08:86:9b:
fc:06:c0:12:35:00:51:0d:32:1e:4d:ca:50:c1:21:
78:c7:db:4a:de:53:fb:99:35:69:5c:cc:ed:e7:9f:
42:99:a1:0b:fc:fe:b5:af:8f:8c:4b:d8:d3:db:42:
6d:eb:f6:7d:25:e7:e6:35:b0:06:01:16:3e:7f:9d:
22:46:64:59:b2:20:f5:40:fa:66:29:7c:10:63:d9:
19:34:47:bf:24:3e:00:d5:f2:39:9b:20:39:59:32:
64:7c:d9:87:f3:b9:28:27:e2:8f:a7:22:48:40:a7:
dc:59:3d:17:af:d6:d4:07:37:26:d7:02:ce:c5:31:
81:ef:b2:44:a8:6e:a4:a9:9c:db:5f:83:50:5b:39:
d8:2f:bd:d5:2c:14:fb:39:f0:b5:9e:19:8b:51:13:
f4:dc:3d:a3:85:66:db:6d:c2:12:cd:e4:de:0f:f8:
47:60:e5:eb:b0:19:70:dd:e6:87:ad:23:95:31:ef:
12:64:9d:35:75:3e:68:54:39:69:89:0e:b8:54:2d:
d9:2b:7d:0c:92:a6:8b:3e:30:af:11:3d:78:8d:8b:
93:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B4:DA:1A:76:0F:C1:A0:72:32:00:63:7E:61:C4:F1:6B:98:D5:F7
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/6rTaGnYPwaByMgBjfmHE8WuY1fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.25.0-185.156.26.255
Signature Algorithm: sha256WithRSAEncryption
5c:4c:4f:fc:27:b1:ed:91:39:20:e1:ec:ef:ce:79:34:5d:74:
6e:09:05:e6:bc:7e:01:b8:ca:dc:03:65:a0:58:84:43:41:bc:
cb:ca:10:bd:e7:5e:69:2e:eb:3c:1f:a7:bd:15:44:97:c1:b2:
45:03:e6:06:9d:12:0d:6f:29:b7:dd:e1:0c:db:fe:0d:12:6a:
34:e9:01:53:e8:b7:3c:b1:9d:e5:37:e6:8d:d3:16:89:75:34:
e8:1f:2e:85:8a:45:62:d7:c2:af:74:55:53:e5:7a:8b:23:b1:
71:4a:5f:5e:b7:c6:d0:8a:a1:f6:5d:95:f4:aa:98:f6:05:cc:
31:64:31:1c:25:71:82:f9:9c:c2:c3:1d:df:d3:fc:16:01:20:
31:93:26:d1:00:d9:3d:71:cb:0d:ee:e8:13:11:1a:4c:d0:59:
4c:0e:82:ee:e4:ae:31:7f:14:32:fb:3b:0e:54:4a:1b:33:c3:
16:3e:24:b0:d9:c1:86:7c:4b:22:be:17:ab:5b:8d:fb:62:bd:
32:d7:72:9f:57:9c:ee:91:46:ff:8f:80:d7:2b:2b:a8:8b:bb:
28:51:03:b8:32:99:81:2c:d0:20:db:be:17:9a:2d:d1:0b:5a:
7e:58:67:e3:e1:cb:d8:33:37:4a:e0:9d:86:9e:9a:93:a6:0c:
cb:a2:f5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:17 2024 by rpki-client on console-fra.rpki-client.org