Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/IUdkfLWCqdqRDvqXb9Xe5_6CbRQ.roa
File: IUdkfLWCqdqRDvqXb9Xe5_6CbRQ.roa (raw, json)
Hash identifier: k2v89P5tLauEHSaIr+pY/uKnGtz4ZLC/jivjvR5w85w=
Subject key identifier: 21:47:64:7C:B5:82:A9:DA:91:0E:FA:97:6F:D5:DE:E7:FE:82:6D:14
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 01857067184637E95017C6894AB77BE0F928
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/IUdkfLWCqdqRDvqXb9Xe5_6CbRQ.roa
Signing time: Mon 02 Jan 2023 02:54:42 +0000
ROA not before: Mon 02 Jan 2023 02:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15402
IP address blocks: 185.126.18.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:18:46:37:e9:50:17:c6:89:4a:b7:7b:e0:f9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 2 02:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2147647cb582a9da910efa976fd5dee7fe826d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:47:30:0a:8a:b0:c0:57:f1:44:53:08:a3:e0:
35:34:0d:74:28:af:0e:fd:1b:e4:c9:96:f5:a7:c7:
27:df:d3:b5:1e:ca:5e:e4:e0:eb:6c:b8:9a:a0:95:
f4:c2:aa:2d:c0:3d:cc:69:88:dd:44:f3:e2:64:4a:
d5:31:e9:aa:79:67:8f:04:3e:1e:0b:21:1e:e3:60:
aa:4f:48:77:ec:3b:4b:2f:cb:62:3c:5d:21:cf:f4:
6a:f3:60:e1:69:57:ea:48:ec:7f:e4:7c:4b:7f:50:
5d:0d:12:59:4a:6e:01:c0:e0:cc:47:76:b2:63:7a:
8a:4d:2c:9e:9c:85:70:bb:d8:03:0b:c0:0c:88:1d:
ff:4c:0b:24:db:79:6c:9e:39:28:b8:b1:93:9c:f9:
34:58:57:8a:7a:d0:55:51:67:89:6c:72:87:70:ea:
f1:bb:ad:4b:7a:47:82:47:9b:22:bc:38:38:ec:27:
9a:b7:a6:89:50:dc:60:31:31:14:18:b9:22:3d:d6:
e5:52:1c:c3:18:11:21:00:1d:11:b9:f8:5f:3d:08:
3a:ab:92:d8:8f:29:43:bd:32:b8:c4:f7:cd:40:ca:
d4:0a:4a:b0:3a:6e:f1:cc:62:32:e0:f9:4e:d9:1f:
8d:83:4f:57:03:11:b7:79:38:5e:8e:ae:ea:66:48:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:47:64:7C:B5:82:A9:DA:91:0E:FA:97:6F:D5:DE:E7:FE:82:6D:14
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/IUdkfLWCqdqRDvqXb9Xe5_6CbRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.18.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:b4:f2:59:99:29:81:75:03:06:0e:b8:dd:18:64:b1:0a:c6:
b4:ea:be:74:96:a5:95:23:28:b2:23:e4:1f:99:df:63:c8:a8:
96:b3:24:8f:28:1c:51:3e:66:d0:32:b3:59:ab:c9:61:55:9a:
c0:01:b0:3f:7d:ca:db:54:be:42:b7:3c:a8:3e:50:8b:12:09:
82:07:05:bd:dd:13:63:f4:1a:b3:79:46:63:7e:26:b7:56:da:
77:fc:90:48:4f:3c:63:7b:05:16:18:95:f7:eb:53:53:ae:80:
e9:ef:ff:42:e4:ce:e7:35:f6:28:dc:34:64:82:41:a7:40:42:
d4:7b:20:89:4b:f4:14:d8:95:9b:56:75:28:ab:97:84:35:c0:
28:41:4c:5e:40:86:17:fe:28:c4:44:c2:5b:c4:ff:04:bf:4b:
68:94:eb:c3:8c:e6:78:48:3d:12:d8:ff:0b:79:cb:bc:1c:36:
80:58:9d:f2:41:69:b0:da:86:16:5b:93:3a:45:68:bc:04:7c:
24:47:52:7f:d7:09:7d:3d:08:7d:a6:dd:a2:36:c2:03:bb:73:
f6:0f:65:04:e2:a8:a3:58:8c:18:b1:22:23:95:60:79:eb:a1:
43:5d:ef:89:5f:95:01:0e:bd:76:6b:35:74:b8:10:e3:ce:2c:
0c:09:4e:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZxhGN+lQF8aJSrd74PkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1
OTVlYmEwHhcNMjMwMTAyMDI1NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTQ3NjQ3Y2I1ODJhOWRhOTEwZWZhOTc2ZmQ1ZGVlN2ZlODI2ZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkcwCoqwwFfxRFMIo+A1NA10KK8O
/RvkyZb1p8cn39O1Hspe5ODrbLiaoJX0wqotwD3MaYjdRPPiZErVMemqeWePBD4e
CyEe42CqT0h37DtLL8tiPF0hz/Rq82DhaVfqSOx/5HxLf1BdDRJZSm4BwODMR3ay
Y3qKTSyenIVwu9gDC8AMiB3/TAsk23lsnjkouLGTnPk0WFeKetBVUWeJbHKHcOrx
u61LekeCR5sivDg47Ceat6aJUNxgMTEUGLkiPdblUhzDGBEhAB0RufhfPQg6q5LY
jylDvTK4xPfNQMrUCkqwOm7xzGIy4PlO2R+Ng09XAxG3eThejq7qZkjo+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCFHZHy1gqnakQ76l2/V3uf+gm0UMB8GA1UdIwQY
MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt
MTA5ODJlMDQwZDUzLzEvSVVka2ZMV0NxZHFSRHZxWGI5WGU1XzZDYlJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz
LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX4SMA0G
CSqGSIb3DQEBCwUAA4IBAQB7tPJZmSmBdQMGDrjdGGSxCsa06r50lqWVIyiyI+Qf
md9jyKiWsySPKBxRPmbQMrNZq8lhVZrAAbA/fcrbVL5CtzyoPlCLEgmCBwW93RNj
9BqzeUZjfia3Vtp3/JBITzxjewUWGJX361NTroDp7/9C5M7nNfYo3DRkgkGnQELU
eyCJS/QU2JWbVnUoq5eENcAoQUxeQIYX/ijERMJbxP8Ev0tolOvDjOZ4SD0S2P8L
ecu8HDaAWJ3yQWmw2oYWW5M6RWi8BHwkR1J/1wl9PQh9pt2iNsIDu3P2D2UE4qij
WIwYsSIjlWB566FDXe+JX5UBDr12azV0uBDjziwMCU7m
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:33 2024 by rpki-client on console-ams.rpki-client.org