Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/9SsuW6sCCpxD4YljtlhYDIQ9TTU.roa
File: 9SsuW6sCCpxD4YljtlhYDIQ9TTU.roa (raw, json)
Hash identifier: p7tt3vN6IG1PdvFc+mHpYYzprNhGcgRB+i2QFtAtvUQ=
Subject key identifier: F5:2B:2E:5B:AB:02:0A:9C:43:E1:89:63:B6:58:58:0C:84:3D:4D:35
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 018CC492340F838760632DB2A815F919036C
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/9SsuW6sCCpxD4YljtlhYDIQ9TTU.roa
Signing time: Mon 01 Jan 2024 10:29:25 +0000
ROA not before: Mon 01 Jan 2024 10:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60432
IP address blocks: 185.26.199.0/24 maxlen: 24
185.26.198.0/23 maxlen: 23
185.26.198.0/24 maxlen: 24
2a00:8c60:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 May 2024 17:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:34:0f:83:87:60:63:2d:b2:a8:15:f9:19:03:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Jan 1 10:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f52b2e5bab020a9c43e18963b658580c843d4d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:77:17:86:50:73:3c:e3:6e:ee:fc:96:3c:
22:31:e3:fc:4e:cf:db:ab:4a:6f:27:2d:39:3c:77:
78:74:91:13:58:8e:f9:3f:89:04:f2:1f:07:ba:cf:
25:62:59:4e:3f:36:17:a1:6e:69:72:a5:a6:9f:b3:
b0:cb:dc:a6:9b:6f:58:7f:54:b7:7e:16:65:ab:6d:
00:56:11:53:4d:2f:ea:be:70:d9:65:c7:9b:99:96:
19:6b:74:49:ef:f5:41:1a:dc:97:c9:de:a4:5b:f4:
ea:5c:ce:8f:b7:33:08:a2:5e:d5:49:c1:28:ec:b5:
4f:a8:0b:af:00:64:9f:14:fa:32:de:ac:a6:db:8f:
71:10:4e:e0:47:eb:13:01:03:a1:ce:01:7c:1b:3a:
ab:af:f3:0b:8a:8c:40:b3:c2:2c:10:f6:c9:e3:d5:
ed:4f:63:6c:70:fc:ac:0f:9a:85:68:6d:a7:80:3d:
98:52:b1:e8:ae:10:18:08:28:ae:c6:38:5c:bd:5e:
67:8e:6d:27:48:a0:08:b9:ba:20:bc:f5:4a:56:ce:
5d:a3:b8:a4:a9:dd:c4:99:e0:54:c1:c1:22:ba:e1:
0f:fd:4b:de:af:85:03:27:c1:36:7f:81:61:95:7a:
86:04:2b:57:b9:fb:7c:f2:df:81:6e:4f:0e:d5:db:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2B:2E:5B:AB:02:0A:9C:43:E1:89:63:B6:58:58:0C:84:3D:4D:35
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/9SsuW6sCCpxD4YljtlhYDIQ9TTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.198.0/23
IPv6:
2a00:8c60:2::/48
Signature Algorithm: sha256WithRSAEncryption
22:29:aa:d0:22:b0:17:02:f3:8f:69:61:f5:79:fb:f1:8d:59:
14:45:0a:05:9a:30:79:8a:32:6b:cd:4d:b3:e3:e1:3a:6c:30:
78:38:cd:23:68:0d:f1:42:7b:71:7c:4e:c3:54:51:4b:4d:15:
18:84:a6:4a:32:17:84:e7:3d:1c:4f:3d:ec:77:e5:8e:37:53:
5e:24:1a:b3:de:b5:e3:2b:b6:78:c4:4e:ca:7e:38:f1:ea:1e:
ee:78:01:12:4b:48:8e:3b:d9:b7:1e:bc:0d:ff:1d:50:79:a7:
ea:f8:2f:3e:d3:32:d6:20:cb:11:a4:41:eb:16:3f:77:5f:e0:
06:d3:c7:8d:b0:50:40:b7:9a:9c:84:7a:c8:d5:6b:5e:bb:6c:
57:61:f4:49:f4:89:6d:4b:35:9e:12:1c:18:ca:9a:2a:c4:dc:
10:dd:70:a9:a4:21:52:62:a1:ad:26:cc:cd:47:6e:c3:25:bd:
f1:eb:c2:7f:81:b3:d9:3d:34:7a:36:48:a7:86:3b:20:d5:6e:
1b:08:e9:39:11:02:22:ff:4e:f8:ea:7d:7a:3e:aa:ba:03:27:
c3:ef:e6:77:e6:e9:b5:5e:13:f5:79:0f:3f:b6:e0:8b:c6:9c:
3c:6e:ea:a6:53:4c:f7:21:e2:e6:3f:e0:9d:f7:c8:17:96:b3:
64:10:21:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:28 2024 by rpki-client on console-ams.rpki-client.org