Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/c1UFbvVEAL-OFsVgl6NUYv4Zlz4.roa
File: c1UFbvVEAL-OFsVgl6NUYv4Zlz4.roa (raw, json)
Hash identifier: efnCDjJ+eGU0uG3ukNDCRCgb5Naeb6uy7osVVo21kmc=
Subject key identifier: 73:55:05:6E:F5:44:00:BF:8E:16:C5:60:97:A3:54:62:FE:19:97:3E
Certificate issuer: /CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Certificate serial: 01857169D750F73EAA224CD59448ED4B679E
Authority key identifier: CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/c1UFbvVEAL-OFsVgl6NUYv4Zlz4.roa
Signing time: Mon 02 Jan 2023 07:37:19 +0000
ROA not before: Mon 02 Jan 2023 07:37:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60720
IP address blocks: 185.26.195.0/24 maxlen: 24
185.26.194.0/24 maxlen: 24
185.26.193.0/24 maxlen: 24
185.116.202.0/23 maxlen: 23
185.116.200.0/24 maxlen: 24
2a00:8d60::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:d7:50:f7:3e:aa:22:4c:d5:94:48:ed:4b:67:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1d7efd6bacf42f145df4d528b0a8320ffc37b9
Validity
Not Before: Jan 2 07:37:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7355056ef54400bf8e16c56097a35462fe19973e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:a4:88:79:4a:c1:0b:1f:19:74:1b:92:03:
2c:59:aa:e2:ac:bd:f7:70:4d:4f:ff:e8:f3:18:d5:
78:14:3a:b7:9a:a6:bf:b8:9c:f3:e8:55:d6:bd:9c:
20:2a:9c:20:de:37:5d:b4:fe:b6:f5:de:19:f1:09:
ac:87:31:da:62:2c:1c:5e:22:35:2a:c8:a3:32:fb:
ff:3b:59:57:9f:32:08:5b:84:48:ec:bf:af:b4:29:
08:23:d2:9f:93:bd:0f:d0:f6:24:76:bf:8c:0c:67:
94:7b:32:86:8d:d4:8d:24:b7:35:a3:db:d1:ad:21:
9a:51:5b:61:cb:43:a0:29:97:47:50:93:0f:e7:d9:
5c:45:08:05:2d:4f:29:75:1e:67:b4:08:5b:af:33:
07:ca:bd:f7:3d:aa:97:c4:89:a2:58:a0:ac:af:0f:
ce:ae:6a:ed:dc:2d:ef:00:92:c5:63:47:7c:77:90:
00:07:1d:7a:60:d0:66:c4:8d:c9:50:e6:82:49:51:
ad:ea:53:fa:70:f6:63:d5:bf:5c:4b:21:f7:45:cb:
85:d6:2d:2e:3b:6a:34:83:26:3a:5a:0d:1f:4b:90:
ac:94:5f:03:ef:6d:3a:37:8c:e3:90:ca:c2:18:10:
0a:08:90:bf:eb:14:47:ae:a0:a3:65:c1:a4:5c:96:
44:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:55:05:6E:F5:44:00:BF:8E:16:C5:60:97:A3:54:62:FE:19:97:3E
X509v3 Authority Key Identifier:
keyid:CB:1D:7E:FD:6B:AC:F4:2F:14:5D:F4:D5:28:B0:A8:32:0F:FC:37:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yx1-_Wus9C8UXfTVKLCoMg_8N7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/c1UFbvVEAL-OFsVgl6NUYv4Zlz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bad3b5-bd9f-4461-ba87-99f683206388/1/yx1-_Wus9C8UXfTVKLCoMg_8N7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.193.0-185.26.195.255
185.116.200.0/24
185.116.202.0/23
IPv6:
2a00:8d60::/32
Signature Algorithm: sha256WithRSAEncryption
19:27:23:d7:f2:24:8f:66:ad:fe:a9:5e:83:b0:aa:ea:c8:02:
66:54:bd:72:14:1f:ef:d2:59:5f:a4:a4:e8:8c:65:7c:2b:e8:
03:87:92:8e:07:c3:5a:b0:be:bd:16:9b:f1:a8:82:49:b3:de:
bd:fd:34:b9:6b:b9:98:c8:d7:b4:89:69:61:aa:e2:ff:93:50:
d3:fc:48:8c:9f:9d:4a:22:34:0f:d6:a3:4c:75:01:f2:95:a5:
63:3a:77:da:59:8b:fb:8c:35:53:7f:1e:c2:cd:2d:60:6b:06:
02:d0:b2:a4:d6:15:5c:61:be:f7:fc:3c:64:cb:ef:4c:c0:af:
ed:b7:79:50:cb:56:60:e9:ce:00:51:e4:71:62:10:9f:40:61:
96:c7:41:ec:0b:2c:ce:8a:9d:6d:95:94:d9:da:59:b1:77:e4:
b6:fb:4f:12:01:b1:a9:c8:e3:ae:2f:cf:79:3c:01:98:ee:25:
b4:f0:03:75:25:f2:28:80:ec:57:d7:78:59:cd:42:1d:a7:a2:
82:b1:5f:2f:da:d9:03:e6:e0:3f:14:e3:40:1d:21:c7:43:9a:
2a:39:f1:c6:81:ce:12:56:0d:30:70:52:8d:68:da:88:b9:42:
d5:71:a2:24:41:72:a2:e4:b7:82:a6:c9:6a:91:da:2b:a0:f2:
17:4e:74:06
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYVxaddQ9z6qIkzVlEjtS2eeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWQ3ZWZkNmJhY2Y0MmYxNDVkZjRkNTI4YjBhODMyMGZm
YzM3YjkwHhcNMjMwMTAyMDczNzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzU1MDU2ZWY1NDQwMGJmOGUxNmM1NjA5N2EzNTQ2MmZlMTk5NzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4akiHlKwQsfGXQbkgMsWarirL33
cE1P/+jzGNV4FDq3mqa/uJzz6FXWvZwgKpwg3jddtP629d4Z8QmshzHaYiwcXiI1
KsijMvv/O1lXnzIIW4RI7L+vtCkII9Kfk70P0PYkdr+MDGeUezKGjdSNJLc1o9vR
rSGaUVthy0OgKZdHUJMP59lcRQgFLU8pdR5ntAhbrzMHyr33PaqXxImiWKCsrw/O
rmrt3C3vAJLFY0d8d5AABx16YNBmxI3JUOaCSVGt6lP6cPZj1b9cSyH3RcuF1i0u
O2o0gyY6Wg0fS5CslF8D7206N4zjkMrCGBAKCJC/6xRHrqCjZcGkXJZEvwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFHNVBW71RAC/jhbFYJejVGL+GZc+MB8GA1UdIwQY
MBaAFMsdfv1rrPQvFF301SiwqDIP/De5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODct
OTlmNjgzMjA2Mzg4LzEvYzFVRmJ2VkVBTC1PRnNWZ2w2TlVZdjRabHo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iYWQzYjUtYmQ5Zi00NDYxLWJhODctOTlmNjgzMjA2Mzg4
LzEveXgxLV9XdXM5QzhVWGZUVktMQ29NZ184TjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAC5GsED
BAK5GsADBAC5dMgDBAG5dMowDQQCAAIwBwMFACoAjWAwDQYJKoZIhvcNAQELBQAD
ggEBABknI9fyJI9mrf6pXoOwqurIAmZUvXIUH+/SWV+kpOiMZXwr6AOHko4Hw1qw
vr0Wm/Gogkmz3r39NLlruZjI17SJaWGq4v+TUNP8SIyfnUoiNA/Wo0x1AfKVpWM6
d9pZi/uMNVN/HsLNLWBrBgLQsqTWFVxhvvf8PGTL70zAr+23eVDLVmDpzgBR5HFi
EJ9AYZbHQewLLM6KnW2VlNnaWbF35Lb7TxIBsanI464vz3k8AZjuJbTwA3Ul8iiA
7FfXeFnNQh2nooKxXy/a2QPm4D8U40AdIcdDmio58caBzhJWDTBwUo1o2oi5QtVx
oiRBcqLkt4KmyWqR2iug8hdOdAY=
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:49 2024 by rpki-client on console-fra.rpki-client.org