Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/s75r_raga05and0yZySFzm1IXWA.roa
File: s75r_raga05and0yZySFzm1IXWA.roa (raw, json)
Hash identifier: ORsuA/xbcg5cy//sRLSM/jfvCMOZBxpR70JkmyqS9Ss=
Subject key identifier: B3:BE:6B:FE:B6:A0:6B:4E:5A:9D:DD:32:67:24:85:CE:6D:48:5D:60
Certificate issuer: /CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Certificate serial: 0188EDC69DE0B104BA001D9FF6E4064E1597
Authority key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/s75r_raga05and0yZySFzm1IXWA.roa
Signing time: Sat 24 Jun 2023 14:19:56 +0000
ROA not before: Sat 24 Jun 2023 14:19:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.186.26.0/24 maxlen: 24
185.186.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ed:c6:9d:e0:b1:04:ba:00:1d:9f:f6:e4:06:4e:15:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Validity
Not Before: Jun 24 14:19:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3be6bfeb6a06b4e5a9ddd32672485ce6d485d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:aa:e3:b7:d4:25:3a:73:b3:f0:24:2c:b7:28:
93:f8:cd:a3:10:6a:40:1f:d8:47:e7:c7:f4:c5:d3:
6c:c9:20:95:5e:46:8a:ba:36:79:52:16:78:d1:ed:
90:3c:fb:8d:bc:0a:e5:74:9c:a3:f8:75:57:45:78:
29:99:f5:ca:7f:38:b7:f4:35:31:17:02:e0:aa:59:
4a:d2:e8:ba:5f:6e:23:0d:d5:60:d3:82:45:71:60:
cf:37:a3:0d:d5:e3:e3:65:32:9c:7d:ac:77:82:2c:
d0:37:07:f6:a6:6d:d4:67:0e:92:ff:68:21:ef:6b:
bd:4a:4a:82:ef:35:36:91:f3:cb:35:29:93:e5:fa:
cb:2c:d1:f8:a7:be:4b:cf:c9:6b:94:25:d5:34:e4:
14:82:f4:28:5d:9c:4a:52:cf:97:cc:80:f1:1b:58:
cf:f0:c0:62:5f:5f:b8:74:d7:95:b6:99:dc:6e:b2:
92:e9:bb:46:a0:cd:bd:ab:2f:bb:8e:46:57:ed:ed:
34:ff:0b:c8:90:3c:33:83:a0:82:68:73:52:33:87:
c8:25:7d:56:a9:07:a3:d2:e2:de:a3:72:73:c6:dd:
2f:81:4b:c8:2e:60:60:f5:c0:0c:58:ed:ca:99:7b:
b1:87:07:41:1b:46:20:88:9a:64:9d:b9:53:53:3f:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BE:6B:FE:B6:A0:6B:4E:5A:9D:DD:32:67:24:85:CE:6D:48:5D:60
X509v3 Authority Key Identifier:
keyid:DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/s75r_raga05and0yZySFzm1IXWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.25.0-185.186.26.255
Signature Algorithm: sha256WithRSAEncryption
9a:d1:75:ee:b3:bd:70:b7:3c:a6:dd:be:8f:ab:ae:6a:56:94:
c5:e5:64:b3:5d:ea:29:02:2f:1b:93:81:56:84:15:a4:84:d1:
03:7e:82:8c:f5:7c:e2:4c:4d:0b:a4:4f:63:88:e9:2c:d0:0e:
39:8e:46:33:60:9d:46:61:6d:f7:0d:a0:31:26:7f:21:13:84:
5c:cd:8d:34:38:c1:8c:da:08:8b:b8:96:fe:36:6c:a2:bf:ef:
81:2e:96:d9:f8:59:50:80:37:21:35:3f:01:23:b8:c4:00:2e:
86:b8:dc:e6:ac:9a:2b:08:0d:10:df:e0:00:38:99:f8:cd:36:
7c:51:d7:da:0e:e1:48:66:86:dd:a6:e3:07:63:62:06:da:ea:
51:94:98:be:5e:20:a3:98:45:1a:1f:16:c8:c5:24:51:0b:b6:
89:fe:be:06:4b:ee:38:d0:a9:d5:f9:7d:2a:d8:e3:7b:70:77:
32:0d:d8:63:5a:da:af:a7:34:b8:20:18:a0:63:cd:0d:a9:73:
f1:5c:32:7c:37:fd:29:56:e1:7a:14:11:bc:f6:5e:48:47:6f:
c1:f7:16:f4:4e:fe:a2:0b:60:19:9a:41:17:58:72:15:b5:f4:
22:79:5d:84:ef:2a:74:af:de:2c:44:60:c4:7a:3c:09:b1:66:
6a:fc:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 11:08:52 2023 by rpki-client on console-fra.rpki-client.org