Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/dX-qh0Xcom5URny0XjcaBjlSlcw.roa
File: dX-qh0Xcom5URny0XjcaBjlSlcw.roa (raw, json)
Hash identifier: PYtymu/SA1P2yA9f+Kbp8wNR16/zl6rd3KJDrJxtD5g=
Subject key identifier: 75:7F:AA:87:45:DC:A2:6E:54:46:7C:B4:5E:37:1A:06:39:52:95:CC
Certificate issuer: /CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Certificate serial: 0189D4BB6785DAF7549C7152CD3811C5512D
Authority key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/dX-qh0Xcom5URny0XjcaBjlSlcw.roa
Signing time: Tue 08 Aug 2023 10:39:58 +0000
ROA not before: Tue 08 Aug 2023 10:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 185.186.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:bb:67:85:da:f7:54:9c:71:52:cd:38:11:c5:51:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Validity
Not Before: Aug 8 10:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=757faa8745dca26e54467cb45e371a06395295cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:bc:0b:5a:99:90:00:c4:07:df:f4:90:52:
cd:f0:8e:2b:cc:09:17:56:5e:0f:4f:ed:dd:71:7f:
9b:df:d6:f1:6a:ad:b0:eb:cd:c2:1b:fb:e3:4f:b0:
ff:5b:fb:4a:42:42:2d:f8:ac:07:c6:c8:0c:de:91:
ca:a9:ac:d3:31:b6:a9:2f:34:2b:2b:e8:e8:32:34:
52:2a:90:93:83:7d:3e:64:d0:53:79:89:2d:16:9d:
7c:ed:8a:85:5a:fb:53:bc:2c:2f:46:7f:88:51:69:
97:3c:40:43:1e:46:98:97:4c:49:5d:a3:9c:0d:d1:
45:fb:64:89:13:cc:19:05:67:81:9b:08:f9:f0:38:
71:78:53:e1:a7:67:54:2d:4b:2b:0c:cf:5b:76:ee:
63:d1:84:37:6e:87:1a:b8:39:53:f1:0e:02:56:3c:
f9:18:3e:70:4f:4c:cb:35:6a:ef:44:df:e1:f2:23:
12:0c:32:21:d7:1f:68:77:10:36:ac:60:1b:40:6d:
c3:a7:cc:cd:2a:98:ad:27:42:d9:a9:0a:b4:ad:f0:
a6:fd:be:64:1a:5d:bf:66:9d:54:eb:c4:05:10:d7:
09:db:31:31:06:33:2f:46:03:60:9e:e8:55:3a:d8:
b5:39:21:80:a7:16:0f:31:5c:8e:8c:84:bf:00:f4:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7F:AA:87:45:DC:A2:6E:54:46:7C:B4:5E:37:1A:06:39:52:95:CC
X509v3 Authority Key Identifier:
keyid:DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/dX-qh0Xcom5URny0XjcaBjlSlcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.26.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8e:a3:83:cc:9e:da:8f:10:54:b2:9d:47:4a:48:43:fb:6e:
87:62:cc:a2:81:78:93:e8:96:ea:bd:4c:63:04:bb:11:a8:ac:
4e:fb:3f:c6:08:ad:a9:b4:6c:12:27:0e:01:26:2d:80:ef:cf:
d3:04:30:c5:a6:81:b4:8c:b2:01:a2:c9:75:10:c3:3a:ae:46:
80:77:99:4d:51:d5:a5:bf:55:06:b4:61:27:63:f2:19:34:17:
5c:d4:40:f9:96:fe:fb:53:5f:6a:f5:46:c3:1f:01:f5:e0:6e:
04:14:36:5b:5a:fd:34:2d:5f:a5:b5:db:a8:dd:48:b5:99:6b:
3a:7d:c0:54:7c:88:b4:94:8c:fa:fb:e0:52:fa:1b:ec:a6:df:
b9:94:24:46:f9:5d:f5:93:33:aa:89:72:9d:43:4a:4a:89:85:
0d:5f:95:e1:80:1f:7b:fe:4e:3c:af:33:19:da:ce:aa:c4:52:
b3:8f:b1:66:3f:e9:a6:aa:f4:bd:54:6f:29:63:b1:06:e4:98:
e9:e1:54:4e:9b:53:75:ed:6b:d2:5d:b6:de:83:f5:e7:79:67:
bb:0b:e3:3a:e2:41:e3:27:44:ea:08:78:a4:01:50:bf:aa:b4:
97:89:f2:3d:7d:e2:1f:a5:f6:b6:68:6e:9e:a4:81:22:4d:e6:
3b:86:ea:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnUu2eF2vdUnHFSzTgRxVEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYTBhZGIxYThiNzk3MDIwZjBlYzdhMjlhOWI1YWJhZDQw
YjY1M2UwHhcNMjMwODA4MTAzOTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTdmYWE4NzQ1ZGNhMjZlNTQ0NjdjYjQ1ZTM3MWEwNjM5NTI5NWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWq8C1qZkADEB9/0kFLN8I4rzAkX
Vl4PT+3dcX+b39bxaq2w683CG/vjT7D/W/tKQkIt+KwHxsgM3pHKqazTMbapLzQr
K+joMjRSKpCTg30+ZNBTeYktFp187YqFWvtTvCwvRn+IUWmXPEBDHkaYl0xJXaOc
DdFF+2SJE8wZBWeBmwj58DhxeFPhp2dULUsrDM9bdu5j0YQ3bocauDlT8Q4CVjz5
GD5wT0zLNWrvRN/h8iMSDDIh1x9odxA2rGAbQG3Dp8zNKpitJ0LZqQq0rfCm/b5k
Gl2/Zp1U68QFENcJ2zExBjMvRgNgnuhVOti1OSGApxYPMVyOjIS/APRnOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHV/qodF3KJuVEZ8tF43GgY5UpXMMB8GA1UdIwQY
MBaAFNygrbGot5cCDw7HopqbWrrUC2U+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0tDdHNhaTNsd0lQRHNlaW1wdGF1dFFMWlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84NDZiZDMtMDM3My00MTkwLWFkZmYt
M2UzNmNhOWEyZDY5LzEvZFgtcWgwWGNvbTVVUm55MFhqY2FCamxTbGN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC84NDZiZDMtMDM3My00MTkwLWFkZmYtM2UzNmNhOWEyZDY5
LzEvM0tDdHNhaTNsd0lQRHNlaW1wdGF1dFFMWlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuboaMA0G
CSqGSIb3DQEBCwUAA4IBAQABjqODzJ7ajxBUsp1HSkhD+26HYsyigXiT6JbqvUxj
BLsRqKxO+z/GCK2ptGwSJw4BJi2A78/TBDDFpoG0jLIBosl1EMM6rkaAd5lNUdWl
v1UGtGEnY/IZNBdc1ED5lv77U19q9UbDHwH14G4EFDZbWv00LV+ltduo3Ui1mWs6
fcBUfIi0lIz6++BS+hvspt+5lCRG+V31kzOqiXKdQ0pKiYUNX5XhgB97/k48rzMZ
2s6qxFKzj7FmP+mmqvS9VG8pY7EG5Jjp4VROm1N17WvSXbbeg/XneWe7C+M64kHj
J0TqCHikAVC/qrSXifI9feIfpfa2aG6epIEiTeY7hur1
-----END CERTIFICATE-----
Generated at Mon Nov 13 13:13:24 2023 by rpki-client on console-ams.rpki-client.org