Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/8MDlDv6EccZGM4F0xNA0VKZMph4.roa
File: 8MDlDv6EccZGM4F0xNA0VKZMph4.roa (raw, json)
Hash identifier: 1MrTD3FNvczuf79yw0Acq1qBl2nnRu0TyYvos5YFqnU=
Subject key identifier: F0:C0:E5:0E:FE:84:71:C6:46:33:81:74:C4:D0:34:54:A6:4C:A6:1E
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 01856B93680DF4B49DA078703C89AA953277
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/8MDlDv6EccZGM4F0xNA0VKZMph4.roa
Signing time: Sun 01 Jan 2023 04:25:00 +0000
ROA not before: Sun 01 Jan 2023 04:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60706
IP address blocks: 185.26.197.0/24 maxlen: 24
185.26.196.0/24 maxlen: 24
2a00:8c60:a::/48 maxlen: 48
2a00:8c60:b::/48 maxlen: 48
2a00:8c60:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:68:0d:f4:b4:9d:a0:78:70:3c:89:aa:95:32:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Jan 1 04:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0c0e50efe8471c646338174c4d03454a64ca61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:45:fd:1e:44:5c:48:5b:a2:c8:3a:ed:e7:
a4:b8:5e:16:f4:42:cd:b5:e2:df:62:5a:f8:90:10:
a0:78:11:a6:9c:99:4e:87:21:3b:3b:b9:78:5a:a8:
45:3a:ac:7b:e8:f4:68:80:bd:82:86:2c:cb:e2:2a:
20:42:c0:3a:e9:fb:fb:5e:7e:80:e5:67:92:47:4a:
03:23:89:69:20:a1:36:db:df:2e:40:9d:20:87:70:
ac:cf:41:0c:7f:c4:cc:4a:e3:82:94:91:aa:5a:20:
5c:a5:39:7b:9b:f8:bd:ba:6e:fd:b6:e5:bd:4a:0e:
2e:71:32:d1:61:5a:56:4a:82:e6:f0:81:bc:35:fd:
e3:e6:e3:d8:76:1f:b6:03:74:ba:b3:65:f2:24:7d:
de:80:91:a4:e5:17:d2:da:3c:59:60:b7:49:76:8b:
f2:16:b4:2f:eb:88:ea:5b:e4:53:32:72:99:c5:07:
94:86:23:66:f9:00:08:ce:1d:fe:0a:c9:6a:4c:19:
51:9f:47:32:43:75:af:d8:2a:a6:91:a1:0b:df:1a:
0a:dd:ae:e2:dc:a6:0e:9f:ac:41:65:b5:d6:02:1b:
87:c3:a1:34:8a:2e:be:6e:57:3f:9d:fc:78:21:6a:
ec:4e:b1:88:65:2b:c8:1c:38:c3:26:69:21:a5:df:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C0:E5:0E:FE:84:71:C6:46:33:81:74:C4:D0:34:54:A6:4C:A6:1E
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/8MDlDv6EccZGM4F0xNA0VKZMph4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.196.0/23
IPv6:
2a00:8c60:1::/48
2a00:8c60:a::/47
Signature Algorithm: sha256WithRSAEncryption
85:8b:74:4c:77:4c:ac:f3:c4:32:5e:a8:d2:5e:56:2e:72:1b:
0c:24:1f:a6:ca:43:17:5c:6d:7d:18:58:d9:56:52:af:a5:13:
82:1d:a3:ec:e0:c2:1b:5f:30:8a:b7:08:45:3d:e3:70:6a:53:
aa:fd:de:0f:ce:95:cf:20:14:5e:07:b0:64:3c:b1:14:76:07:
63:3f:b4:20:cb:3d:ba:cb:3b:08:d3:99:b3:6d:95:ff:1f:d1:
91:c2:ae:1b:08:34:5b:3b:98:fc:49:95:87:ab:97:cc:13:08:
c2:06:2d:08:88:0d:53:43:d8:ac:eb:d4:2b:24:02:32:37:a3:
b2:da:42:76:ed:ed:25:5d:87:74:78:d3:ff:3a:98:81:5d:4f:
40:29:10:f0:3c:ff:38:af:7f:2a:da:0c:d1:d6:5f:5e:ba:5a:
ec:20:bb:2f:d3:26:ef:4c:6b:7d:b2:2c:03:41:3f:22:cd:d3:
12:46:6c:6f:04:2f:92:25:39:09:bc:98:14:1e:ac:d6:a8:d4:
a6:e4:24:37:6f:63:0f:ee:f2:51:bb:ec:5e:95:34:85:1d:e9:
7d:b4:c3:94:69:e8:ae:bc:fa:ef:6d:d6:d7:f2:80:d7:e6:79:
84:b3:7d:23:53:78:6e:fb:8f:4d:8c:77:63:6f:9e:cd:c2:7d:
7b:22:a8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:14 2024 by rpki-client on console-fra.rpki-client.org