Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/mQ6hpnvl5rmtFYgyTrn_o-Gfpgs.roa
File: mQ6hpnvl5rmtFYgyTrn_o-Gfpgs.roa (raw, json)
Hash identifier: jd5HNFwAObZcvbLuXrXwxOmoBhoLDBfmV8/CTjA6rUY=
Subject key identifier: 99:0E:A1:A6:7B:E5:E6:B9:AD:15:88:32:4E:B9:FF:A3:E1:9F:A6:0B
Certificate issuer: /CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Certificate serial: 01856B936743EBEED48086CFF16309D3BF05
Authority key identifier: CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/mQ6hpnvl5rmtFYgyTrn_o-Gfpgs.roa
Signing time: Sun 01 Jan 2023 04:25:00 +0000
ROA not before: Sun 01 Jan 2023 04:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60432
IP address blocks: 185.26.199.0/24 maxlen: 24
185.26.198.0/23 maxlen: 23
185.26.198.0/24 maxlen: 24
2a00:8c60:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:67:43:eb:ee:d4:80:86:cf:f1:63:09:d3:bf:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddb6f10030e276f8316276f40b3d4a4184d94dd
Validity
Not Before: Jan 1 04:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=990ea1a67be5e6b9ad1588324eb9ffa3e19fa60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:25:7d:8f:3b:ce:fc:15:69:82:1b:c7:bf:16:
4c:b2:24:26:6e:9b:56:f5:4b:3c:52:97:62:6e:3e:
4f:3f:b6:1d:da:ef:60:f2:20:f6:14:49:8f:d3:37:
3e:ba:0c:6e:68:9f:e0:61:39:0f:d4:c5:33:20:35:
5c:5e:27:53:78:7b:40:f7:49:6d:d6:c0:60:32:f9:
ab:64:5c:51:ea:69:39:ca:1a:7b:00:2a:fa:a7:50:
9d:43:c8:93:ce:d3:4d:b2:de:1c:d3:7d:95:e5:bb:
61:f7:d7:f2:cb:34:ca:fe:49:ad:72:7d:c1:6e:03:
34:ce:28:47:e6:82:a9:ee:b6:60:de:6d:b4:f1:f7:
07:d7:a1:13:5f:28:7e:b3:76:6d:24:28:7a:b5:d5:
11:6b:e1:42:93:7d:83:16:d2:fd:20:8f:45:f2:9e:
c8:0d:1c:37:b5:2c:cd:4b:7f:0e:78:3c:79:69:ec:
ed:a2:31:9a:59:a6:9e:46:02:f2:41:2a:29:06:96:
e7:ce:17:dc:f9:89:fb:0d:2e:ed:c6:4f:0f:9a:85:
e7:70:d0:eb:08:64:53:5d:ab:67:a5:49:b1:82:49:
3f:e1:24:c6:3b:19:35:c2:f9:18:f0:8f:21:50:5d:
11:45:73:09:be:20:d3:e2:9e:fb:d9:0c:d1:ba:91:
7f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0E:A1:A6:7B:E5:E6:B9:AD:15:88:32:4E:B9:FF:A3:E1:9F:A6:0B
X509v3 Authority Key Identifier:
keyid:CD:DB:6F:10:03:0E:27:6F:83:16:27:6F:40:B3:D4:A4:18:4D:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdtvEAMOJ2-DFidvQLPUpBhNlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/mQ6hpnvl5rmtFYgyTrn_o-Gfpgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b5cb19-a27a-44a7-a33e-80b2d25bf9c8/1/zdtvEAMOJ2-DFidvQLPUpBhNlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.198.0/23
IPv6:
2a00:8c60:2::/48
Signature Algorithm: sha256WithRSAEncryption
8f:b2:dc:2f:7a:4b:0a:92:26:14:89:67:64:21:d7:a3:65:70:
65:b0:f4:7c:b4:18:8e:38:de:63:74:76:1e:c5:3e:ad:0f:90:
47:f0:1d:66:19:2a:e2:ae:e0:a0:58:07:cb:52:b9:28:fe:bf:
9f:50:be:14:c7:df:35:7f:de:86:30:0b:aa:6e:2c:9c:9b:c6:
37:06:4f:46:96:f7:6a:27:d1:69:a3:78:c9:ee:21:6f:09:8f:
da:11:78:e2:e9:c1:ef:ab:74:0a:8a:dc:12:b6:f2:0e:fa:d4:
e0:cb:c8:c5:02:ff:c2:ce:47:79:84:89:d3:43:f3:2d:47:f7:
72:50:ae:01:fe:ac:7b:5e:a6:1d:3a:b6:4c:5b:f2:2b:0f:43:
5d:cd:5e:ec:a7:c9:12:19:01:ad:b3:2d:25:77:62:72:40:96:
0a:08:79:43:05:99:d3:e8:2c:f3:4d:13:a6:40:f4:4f:2c:ba:
2a:f8:7a:ae:0f:02:18:f0:0e:7c:d3:0a:ac:17:05:e6:bd:1e:
b0:cd:6d:d2:0e:d3:4d:55:6d:88:8a:00:77:d5:1e:ac:6a:f2:
a7:a8:8a:ca:ca:28:cb:3a:37:ee:e4:60:26:96:2f:29:fb:b2:
3c:e9:d8:cd:91:e7:fc:96:77:aa:ba:db:23:36:36:1a:d0:09:
2d:79:c4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:28 2024 by rpki-client on console-ams.rpki-client.org