Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/_GnC0aDFG1hj_NPeTJcYo3loJ9Q.roa
File: _GnC0aDFG1hj_NPeTJcYo3loJ9Q.roa (raw, json)
Hash identifier: WstaH+zh01YMPVJNy2nzPZ8L/38zFrDUGNsV1e0eH/8=
Subject key identifier: FC:69:C2:D1:A0:C5:1B:58:63:FC:D3:DE:4C:97:18:A3:79:68:27:D4
Certificate issuer: /CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Certificate serial: 018C821AD6C15848B6ED47D61D9A78D0445B
Authority key identifier: C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/_GnC0aDFG1hj_NPeTJcYo3loJ9Q.roa
Signing time: Tue 19 Dec 2023 12:44:06 +0000
ROA not before: Tue 19 Dec 2023 12:44:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206959
IP address blocks: 185.170.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:1a:d6:c1:58:48:b6:ed:47:d6:1d:9a:78:d0:44:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9f23c9b7b3ea0549142b701597706fc7a6385e7
Validity
Not Before: Dec 19 12:44:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc69c2d1a0c51b5863fcd3de4c9718a3796827d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c9:f5:78:0b:35:0d:8c:b9:b5:41:ab:74:85:
46:16:79:50:44:01:e8:b6:70:4a:56:96:11:19:ba:
8e:a4:19:8d:58:98:3e:23:b9:4d:ec:b8:77:21:c3:
52:e9:53:c5:4c:c4:19:b9:47:fe:05:91:52:42:c3:
61:17:fe:93:e6:32:b7:4c:ae:0c:7c:11:53:8d:94:
4e:57:90:b1:56:82:c7:39:ef:9f:9b:c0:8e:47:9c:
c8:2c:7e:fc:45:e3:9a:fc:66:e7:ac:53:9f:42:af:
1f:72:6e:19:d7:b1:71:7b:21:4e:ff:c6:89:59:3c:
86:84:da:f4:f0:e3:eb:90:99:c1:60:45:d5:49:9d:
96:5a:33:6c:15:2f:6e:8b:36:86:41:e3:01:44:af:
e1:d0:4d:14:17:34:78:77:45:86:89:af:ec:f8:f6:
be:74:fe:93:67:a7:9d:92:a1:3d:11:c1:32:86:72:
3b:85:d7:81:34:5f:b2:54:fd:55:56:e2:cf:a5:ef:
c2:b5:85:ab:4e:2a:18:35:50:d6:4e:29:4c:98:5a:
21:ad:69:bc:92:9e:59:3b:64:0a:5c:03:d4:82:b7:
6b:41:45:d9:10:6b:c7:6b:40:5b:d3:0c:75:84:b7:
44:ed:73:d1:97:08:9f:dc:97:48:fa:bf:90:34:5c:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:69:C2:D1:A0:C5:1B:58:63:FC:D3:DE:4C:97:18:A3:79:68:27:D4
X509v3 Authority Key Identifier:
keyid:C9:F2:3C:9B:7B:3E:A0:54:91:42:B7:01:59:77:06:FC:7A:63:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yfI8m3s-oFSRQrcBWXcG_Hpjhec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/_GnC0aDFG1hj_NPeTJcYo3loJ9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/ccc73b-9c87-45d5-81c4-3f922b40168a/1/yfI8m3s-oFSRQrcBWXcG_Hpjhec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.174.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:62:7d:87:e5:05:c1:f7:ab:ca:07:e4:a6:71:0c:50:99:af:
ef:c5:7f:b8:55:07:67:11:5a:27:f5:67:d7:73:83:6c:02:82:
2e:d8:32:91:6e:6c:32:73:44:49:d3:ea:25:9c:85:a2:a6:da:
99:db:c4:75:57:cf:c3:b0:b3:7d:0f:0d:94:05:4e:53:74:3e:
cd:75:17:8b:72:3e:cc:ab:db:8b:8f:6d:f3:f8:67:30:15:a7:
80:b3:a7:79:c0:71:42:ac:f5:02:fd:a6:ae:85:76:fe:8a:11:
b4:df:e6:93:bb:85:57:73:bf:88:19:d1:56:94:d2:a7:30:6b:
6b:69:53:fb:78:a6:ad:ac:9d:ea:1b:46:53:b5:fc:79:3b:d7:
88:5c:b1:c6:d7:d6:f5:d8:ae:ed:8a:2f:c6:ad:59:b6:f1:37:
5d:d9:ae:d7:67:27:2d:b2:0b:fb:3d:25:26:aa:4d:b3:3f:de:
ef:31:2f:3e:78:f7:81:de:e6:d7:a0:a3:c8:f9:3d:02:ca:3d:
56:c0:d4:c1:cd:cc:c2:e4:30:5f:c9:a7:0e:0d:81:d1:0b:7e:
ae:a3:2d:43:0c:74:f0:b1:80:a4:ad:56:ae:80:bd:7c:5c:e4:
22:6b:2a:2c:b0:fa:7d:45:77:bf:e1:e6:b3:8b:e3:e5:13:6d:
a1:d1:6d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:02 2024 by rpki-client on console-fra.rpki-client.org