Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/_tEahRg-o039D_DSLtsuMQYgzNM.roa
File: _tEahRg-o039D_DSLtsuMQYgzNM.roa (raw, json)
Hash identifier: yGJVOskRgyeMSI7qJ6cFuXlBM6mX/7UZ1tqx+5byTg8=
Subject key identifier: FE:D1:1A:85:18:3E:A3:4D:FD:0F:F0:D2:2E:DB:2E:31:06:20:CC:D3
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 0188C87275B980EC640FD4E2A30E823B5EC8
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/_tEahRg-o039D_DSLtsuMQYgzNM.roa
Signing time: Sat 17 Jun 2023 08:22:04 +0000
ROA not before: Sat 17 Jun 2023 08:22:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34918
IP address blocks: 185.126.2.0/24 maxlen: 24
185.126.0.0/20 maxlen: 20
185.126.1.0/24 maxlen: 24
185.126.0.0/21 maxlen: 21
185.126.8.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c8:72:75:b9:80:ec:64:0f:d4:e2:a3:0e:82:3b:5e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jun 17 08:22:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fed11a85183ea34dfd0ff0d22edb2e310620ccd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:57:e0:bf:34:f2:72:0c:89:4f:9e:bb:fa:0b:
c9:05:06:6c:4d:68:05:6c:a0:f1:87:df:3a:4e:7c:
a5:8c:a2:18:72:65:a5:06:23:89:89:00:00:5b:0a:
3e:0e:2f:29:30:2e:35:a5:be:e1:d4:5f:9b:76:f4:
d8:f7:20:63:95:32:0b:07:f5:a9:7d:66:34:27:5d:
11:5c:d4:ba:49:8f:5a:86:6f:1a:84:45:c1:a0:3f:
a1:ce:e3:df:d9:8d:e1:4c:7c:d7:eb:da:49:25:ca:
38:e1:43:45:bb:ed:22:56:0f:1b:5b:58:86:71:3c:
57:d4:57:37:f2:b4:d8:41:43:46:5a:f1:45:e8:96:
be:2c:4d:c8:a9:44:c3:63:92:c0:e9:da:37:27:f5:
e6:b5:04:a6:58:d2:05:15:78:47:ee:17:d6:10:d5:
e5:36:d6:85:68:67:cb:52:bc:b2:7b:9d:de:55:7d:
6d:f2:42:13:c5:7f:d1:2c:42:36:4f:cf:9b:28:3d:
04:13:3b:64:7d:16:6a:4e:51:fc:01:94:2b:e1:e9:
bd:d5:76:c5:46:65:ad:13:0d:50:1b:bb:be:05:59:
dc:73:f1:3b:af:1a:74:51:b7:83:12:32:52:71:29:
2f:ae:f9:a0:dc:8b:98:57:61:7e:96:99:37:03:31:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D1:1A:85:18:3E:A3:4D:FD:0F:F0:D2:2E:DB:2E:31:06:20:CC:D3
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/_tEahRg-o039D_DSLtsuMQYgzNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.0.0/20
Signature Algorithm: sha256WithRSAEncryption
85:98:8f:30:61:e3:37:57:ba:d1:09:6d:cd:1f:77:cb:2a:4b:
35:c9:cb:3e:b8:b2:1e:d4:5b:dd:75:56:cc:d5:46:cc:de:c3:
6d:fe:c7:74:be:d5:6d:02:d0:c4:ce:a8:43:eb:5e:31:82:16:
1d:ad:a4:85:87:57:98:e0:d8:4f:08:e5:04:fa:86:79:f4:3c:
fa:76:a0:60:c5:19:96:23:cd:75:1e:de:20:d3:db:bc:7c:66:
5c:3a:a3:f6:8d:19:4c:27:8a:60:c8:cf:f7:b9:77:9a:c9:da:
99:af:41:4b:26:61:33:55:8d:7e:27:a6:49:33:6f:a3:73:03:
d4:1f:a2:5d:0f:7a:a5:e6:44:1e:6c:3d:d2:04:dc:48:b2:9d:
57:bb:ec:8f:65:d0:c8:fb:cc:87:9f:ca:93:12:90:95:16:c2:
15:cd:6a:f4:2b:15:2d:29:1c:38:fd:70:62:03:1b:84:93:73:
e3:3a:0a:53:ef:84:68:b5:de:a7:ec:80:18:3f:b7:78:d9:5c:
5b:e7:c2:1b:81:f4:62:d6:5f:66:55:a4:e2:f9:b1:39:8b:f7:
18:42:6c:38:9c:ae:50:84:52:3b:60:02:64:23:34:a6:49:02:
e8:4b:45:63:3d:71:4a:b5:23:94:b2:ef:03:c6:fc:82:d5:dd:
8e:9f:9f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:54 2023 by rpki-client on console-fra.rpki-client.org