Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/abv3bVbUPV59wnyiuv5zNNF_8hM.roa
File: abv3bVbUPV59wnyiuv5zNNF_8hM.roa (raw, json)
Hash identifier: 2ViKa2FSLctDsMGpr7BScrCROjHr0IOiplDEfffmwcc=
Subject key identifier: 69:BB:F7:6D:56:D4:3D:5E:7D:C2:7C:A2:BA:FE:73:34:D1:7F:F2:13
Certificate issuer: /CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Certificate serial: 0191D5BC42A16DE8A8725E36A40C2735586E
Authority key identifier: FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/abv3bVbUPV59wnyiuv5zNNF_8hM.roa
Signing time: Mon 09 Sep 2024 07:42:50 +0000
ROA not before: Mon 09 Sep 2024 07:42:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199659
IP address blocks: 185.26.240.0/22 maxlen: 22
2a02:d540::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 14 Sep 2024 10:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d5:bc:42:a1:6d:e8:a8:72:5e:36:a4:0c:27:35:58:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffff0fa51e6939d01dcaa2bb3d5dcaa6d0043da2
Validity
Not Before: Sep 9 07:42:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69bbf76d56d43d5e7dc27ca2bafe7334d17ff213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:97:0f:e3:d0:99:bb:77:04:af:fd:51:03:f3:
6a:7b:d2:2d:5a:6b:86:66:6c:d2:9b:07:f3:cd:c9:
e4:20:c6:63:8b:6c:65:c8:11:bf:f3:28:2a:d6:28:
8a:09:b2:58:a2:53:8d:99:79:54:2f:d2:cc:f2:de:
8c:3c:5c:5d:0d:ce:0d:75:ce:c1:40:7f:8f:81:da:
c7:a1:da:c9:2b:fd:c4:c5:69:f2:95:ec:ae:7b:3a:
f7:a0:e6:fd:99:38:7c:98:4e:12:ac:38:43:1a:db:
34:2b:ae:5a:34:c1:1b:c7:9f:90:b8:b8:fb:e8:d1:
9f:73:c9:b9:c5:0a:0b:96:10:9c:96:58:36:b4:14:
8d:7f:dc:b6:d0:27:e8:9a:ca:03:8b:d3:5c:b3:0d:
a0:ec:b8:6a:e1:a2:f6:fc:38:3b:38:5a:8f:75:68:
ef:65:dc:cf:53:89:ea:e8:61:af:57:c8:de:c7:b2:
1a:de:17:f0:1a:b8:7c:d9:72:ff:93:03:23:be:09:
69:ab:37:16:60:54:27:fd:4e:37:ab:0b:c8:55:e1:
77:e7:71:1e:46:68:4c:65:f4:a6:68:48:66:af:3c:
05:2a:eb:94:bf:af:38:0f:43:4b:91:ef:01:01:ab:
dc:68:32:5f:62:b4:c4:38:2b:8e:ec:b6:08:94:05:
11:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BB:F7:6D:56:D4:3D:5E:7D:C2:7C:A2:BA:FE:73:34:D1:7F:F2:13
X509v3 Authority Key Identifier:
keyid:FF:FF:0F:A5:1E:69:39:D0:1D:CA:A2:BB:3D:5D:CA:A6:D0:04:3D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__8PpR5pOdAdyqK7PV3KptAEPaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/abv3bVbUPV59wnyiuv5zNNF_8hM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/9cb6b5-7a53-406f-af7a-17c38d9c3768/1/__8PpR5pOdAdyqK7PV3KptAEPaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.240.0/22
IPv6:
2a02:d540::/29
Signature Algorithm: sha256WithRSAEncryption
b0:4a:e2:54:9d:df:d0:27:29:82:64:68:5f:12:28:f4:42:39:
2f:8f:e6:a6:7e:ce:7b:ff:2d:d6:bb:1a:7d:41:e8:c7:94:91:
91:ee:3b:59:47:6e:f4:52:7c:a7:ea:07:4c:6b:89:83:2b:87:
12:2f:03:c8:d9:95:94:b6:c8:a7:02:e8:99:d2:3c:4a:fb:fc:
7f:be:93:2a:54:4a:2b:54:54:27:df:dd:c2:6a:03:81:3b:86:
a9:d4:bf:64:56:d0:05:b3:35:6a:3b:ea:5a:f1:9a:dc:fd:6e:
17:73:45:b3:54:e9:89:18:7c:11:66:36:b7:a1:a6:2a:46:51:
bf:75:32:e8:4b:b4:f9:7a:b6:51:48:47:8e:ac:03:9e:ac:79:
3e:e1:81:14:a4:b4:67:99:da:cf:7b:cf:34:08:df:e6:88:f7:
8a:83:85:6c:3d:15:b7:1a:24:96:5e:aa:4a:39:0f:dd:bf:95:
f0:30:44:7b:22:e5:15:b9:a6:b1:68:3c:41:8f:31:1d:b1:ed:
4b:6f:b0:66:0d:e7:c7:94:fd:1c:0b:1a:21:86:47:63:5f:c7:
a3:30:2c:80:14:11:c1:41:a2:14:b4:59:27:04:74:e8:6b:2f:
9f:ef:11:0d:c5:fd:37:90:cf:a0:62:96:a4:63:81:5e:c0:12:
70:af:45:df
-----BEGIN CERTIFICATE-----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 at Sat Sep 14 13:24:43 2024 by rpki-client on console-ams.rpki-client.org