Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/yZkZsX1AwxGvIQKZUKiIRbCFEZI.roa
File: yZkZsX1AwxGvIQKZUKiIRbCFEZI.roa (raw, json)
Hash identifier: 7goq/jp7FAJhGrYYzkw3DC6jGORCbSC7jAyFiTPd9c0=
Subject key identifier: C9:99:19:B1:7D:40:C3:11:AF:21:02:99:50:A8:88:45:B0:85:11:92
Certificate issuer: /CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Certificate serial: 018BC8B79A64FBA6DA59B516C1B25DA64034
Authority key identifier: DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/yZkZsX1AwxGvIQKZUKiIRbCFEZI.roa
Signing time: Mon 13 Nov 2023 12:45:57 +0000
ROA not before: Mon 13 Nov 2023 12:45:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.186.26.0/24 maxlen: 24
185.186.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:b7:9a:64:fb:a6:da:59:b5:16:c1:b2:5d:a6:40:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dca0adb1a8b797020f0ec7a29a9b5abad40b653e
Validity
Not Before: Nov 13 12:45:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c99919b17d40c311af21029950a88845b0851192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:81:a2:4b:0c:11:12:91:d6:80:8f:4a:fc:
fc:b9:98:97:d5:d2:17:f3:ae:b2:f0:cd:c6:c7:2b:
2e:a6:3a:85:28:80:af:de:5c:c4:cf:e2:e6:16:85:
3b:30:65:9a:67:9b:e0:74:fd:c3:db:d1:ae:5c:ec:
99:2c:fe:f1:a4:46:bf:74:48:d1:03:d6:55:95:55:
4b:80:3a:02:65:f3:fe:f2:a3:c7:62:71:33:ad:35:
39:33:9f:da:9a:49:f7:ea:07:d5:78:24:ca:66:59:
dd:17:4f:3b:a2:4a:e1:23:42:88:e0:aa:a8:41:f6:
12:65:ce:1e:8c:00:d5:91:86:51:67:ee:ad:c3:51:
51:3d:fe:e9:6f:61:b1:a0:4c:ee:09:02:64:39:f1:
4b:bb:78:c1:d6:d8:ee:96:b3:63:58:f3:13:88:2d:
73:0f:b5:86:a8:0f:da:81:48:3a:14:b1:55:e6:c7:
0e:df:d4:bf:d1:da:81:cf:5e:59:02:de:ed:a2:a3:
7e:4f:cf:f5:c3:82:19:32:d8:f0:50:d3:9b:da:b1:
3e:52:88:d2:c8:3b:5e:ae:32:a7:9d:ec:d3:c0:b5:
83:4e:34:ad:01:ab:8e:03:a2:b3:71:af:c9:d8:af:
3d:a5:fe:5c:0b:32:0b:38:28:d5:3e:30:e0:09:b4:
8e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:99:19:B1:7D:40:C3:11:AF:21:02:99:50:A8:88:45:B0:85:11:92
X509v3 Authority Key Identifier:
keyid:DC:A0:AD:B1:A8:B7:97:02:0F:0E:C7:A2:9A:9B:5A:BA:D4:0B:65:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KCtsai3lwIPDseimptautQLZT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/yZkZsX1AwxGvIQKZUKiIRbCFEZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/846bd3-0373-4190-adff-3e36ca9a2d69/1/3KCtsai3lwIPDseimptautQLZT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.25.0-185.186.26.255
Signature Algorithm: sha256WithRSAEncryption
65:fb:4c:19:7c:9d:cc:a3:fd:3a:3e:d3:65:cc:92:31:1b:52:
23:a1:8e:56:0a:0a:c9:8a:f3:11:4b:cd:f1:e2:c2:70:a1:a2:
1f:49:95:12:f7:6d:36:02:2f:93:43:f6:24:6f:ab:48:9d:24:
24:6e:92:0a:8c:f4:5c:10:78:2f:24:5e:f8:bf:11:e9:5a:5a:
a1:3b:b9:a9:68:c5:8a:c1:66:32:6c:44:84:6a:fb:10:59:11:
63:f1:f2:88:68:15:d3:fd:8c:09:7c:68:81:94:a0:6f:31:57:
2d:32:a5:f5:c8:2c:97:3e:b2:68:2b:9a:53:71:97:83:61:58:
be:a2:0e:56:fd:20:3f:6e:35:2d:6f:5a:68:ee:f9:7e:ce:b3:
89:ec:b1:92:11:88:5e:3e:83:0f:a7:67:ba:96:80:e4:71:c4:
f0:18:8f:2b:e0:aa:26:c9:d4:0b:61:e6:fa:fe:b0:ab:63:a6:
55:0d:d0:b0:4e:7d:35:1d:3c:62:80:85:73:43:bd:9b:da:87:
dc:1f:52:77:52:54:5b:e6:17:98:99:ff:4a:c1:4b:13:11:9f:
d5:a4:96:08:e7:4b:1a:32:73:b2:18:9a:e5:38:6e:47:2b:f8:
a1:9c:f4:68:21:7a:b4:7f:68:45:be:03:5a:6d:f7:e6:f5:7c:
66:c9:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:26 2023 by rpki-client on console.sobornost.net