Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/E3gGOTCZO-SN0T-ueW_xLpCSRQs.roa
File: E3gGOTCZO-SN0T-ueW_xLpCSRQs.roa (raw, json)
Hash identifier: KTcixPptV42QAYEzW1IoDph0ZXUZDgTg74yW/2wybDs=
Subject key identifier: 13:78:06:39:30:99:3B:E4:8D:D1:3F:AE:79:6F:F1:2E:90:92:45:0B
Certificate issuer: /CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Certificate serial: 0186FE5BFE97917424D6D27BBF0042588738
Authority key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/E3gGOTCZO-SN0T-ueW_xLpCSRQs.roa
Signing time: Mon 20 Mar 2023 09:31:27 +0000
ROA not before: Mon 20 Mar 2023 09:31:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139660
IP address blocks: 185.186.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:5b:fe:97:91:74:24:d6:d2:7b:bf:00:42:58:87:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Validity
Not Before: Mar 20 09:31:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1378063930993be48dd13fae796ff12e9092450b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:b2:f7:fc:34:bf:db:bc:96:48:66:80:7c:
4b:ac:bc:a0:db:8b:c5:b5:3d:4f:40:ae:40:1e:cb:
08:ba:95:54:0b:74:c4:ac:f9:54:32:fb:4b:18:99:
72:ee:9f:1a:79:b5:76:db:94:d9:3a:75:ed:a0:01:
79:77:f7:94:e5:51:96:96:a7:ff:c0:f0:de:5d:2d:
cb:ba:f1:9f:20:20:f9:a0:7b:1c:47:77:b5:b0:6a:
78:2f:2e:ff:19:ad:93:f1:6b:50:d8:cd:f4:05:01:
a9:51:28:9c:8d:e3:74:94:f0:76:c4:de:8d:d3:94:
dd:a5:71:9e:9d:af:7e:7a:ad:0e:e8:ea:a1:a8:de:
72:2f:6e:ca:74:1c:b3:dc:6e:7b:84:d5:e9:e1:ac:
0f:45:bd:10:a9:99:01:00:02:c4:f0:c3:cb:c9:c0:
dc:74:71:33:5e:9f:03:7f:99:14:9b:d7:bb:6c:37:
e6:17:a1:8e:4b:6e:aa:92:00:20:90:d3:0c:b5:5d:
9f:f6:f6:3d:df:46:04:b6:ba:98:be:39:6c:59:b4:
67:30:f7:a1:55:56:28:ef:df:92:aa:63:37:80:70:
3c:10:43:3f:ac:1f:7e:5d:06:31:5d:0c:a4:d9:92:
d1:77:d6:60:da:a8:fd:d2:1c:60:dc:e4:64:1c:17:
0d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:78:06:39:30:99:3B:E4:8D:D1:3F:AE:79:6F:F1:2E:90:92:45:0B
X509v3 Authority Key Identifier:
keyid:DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/E3gGOTCZO-SN0T-ueW_xLpCSRQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:1a:80:32:23:5b:51:08:02:18:cc:56:15:5a:e2:d5:2b:1a:
10:1f:09:8f:f6:e3:cf:e7:04:3a:6b:60:b2:43:39:3e:73:ef:
16:de:95:c4:b0:75:19:88:5d:e6:ca:e7:c0:1d:1a:a5:ee:60:
c6:46:02:46:c4:94:86:25:c4:e3:b5:cd:68:d6:b2:b7:2b:b3:
f1:35:1f:83:f1:69:d6:ad:ed:98:f8:da:5d:ac:56:db:60:e6:
59:5f:84:00:53:b2:f4:2d:b8:b8:05:01:43:5b:8c:df:13:69:
20:c5:15:4b:8b:1b:51:16:2d:cc:44:ea:37:b8:30:74:83:36:
e8:fc:9c:84:df:b2:fa:e9:77:d6:21:43:54:10:e8:0c:33:6c:
d1:9b:95:4b:01:52:53:b9:b0:05:3c:c2:01:b0:83:48:21:12:
d9:88:29:16:f2:b5:21:70:64:ae:e4:3c:9c:06:74:5a:f9:bc:
12:4a:9b:b9:77:31:34:c9:06:fd:b6:a2:2a:95:52:32:e3:4b:
f0:47:1e:2f:d7:1a:3b:6b:27:97:96:ea:11:59:22:42:7f:08:
35:b1:54:b8:84:ab:ce:dc:28:92:0d:5f:1e:46:82:ac:21:bf:
63:00:cc:4f:41:6f:87:c8:10:37:81:90:48:fd:9e:a5:d4:5c:
79:0b:38:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:31 2023 by rpki-client on console-fra.rpki-client.org