Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/TBAVBBkNCTWkM_R1Siwc9j2n1pw.roa
File: TBAVBBkNCTWkM_R1Siwc9j2n1pw.roa (raw, json)
Hash identifier: jci6QZ7RLEbIkCSukBU63Pmrzt3YswwvN6gIIsSNvZg=
Subject key identifier: 4C:10:15:04:19:0D:09:35:A4:33:F4:75:4A:2C:1C:F6:3D:A7:D6:9C
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 0185A14224B0FCB8ACD94F4F4F4FEFF1710C
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/TBAVBBkNCTWkM_R1Siwc9j2n1pw.roa
Signing time: Wed 11 Jan 2023 14:35:44 +0000
ROA not before: Wed 11 Jan 2023 14:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62047
IP address blocks: 185.48.9.0/24 maxlen: 26
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:42:24:b0:fc:b8:ac:d9:4f:4f:4f:4f:ef:f1:71:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Jan 11 14:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c101504190d0935a433f4754a2c1cf63da7d69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d7:61:a6:bb:32:b2:07:78:15:09:b8:d2:67:
62:3f:27:f1:50:d8:ad:b6:a1:4c:26:6f:7a:34:76:
cf:47:c3:91:d8:37:bc:af:6d:84:0a:04:71:d7:ef:
f7:a7:bc:da:c5:25:5e:cc:d0:2b:70:2f:56:5d:b6:
3d:fd:eb:17:9b:e3:18:ed:86:e6:e3:88:60:1d:86:
00:f6:94:d4:38:1a:98:d9:cd:7f:30:09:67:7b:07:
01:27:22:f1:ab:97:7a:51:0f:cc:2c:34:01:fe:d9:
fb:80:3e:b5:dc:c7:03:52:f1:fe:ff:d6:81:e9:90:
61:ef:55:25:1d:53:a7:ea:c8:d0:d5:ff:97:c1:46:
02:3f:3b:f4:42:fe:b8:64:c5:f3:39:ee:b8:5f:24:
83:c9:82:55:80:02:b2:86:42:19:28:74:a2:7d:ca:
c3:15:82:cc:78:5d:a9:3c:4c:a5:1a:0c:3f:c9:2f:
31:16:61:8d:da:fb:2d:aa:ff:79:49:3e:6d:04:22:
f6:90:63:95:0c:14:28:d7:d5:ef:f5:1b:37:9c:50:
38:2e:d2:78:0c:56:a5:a0:c7:92:b1:a1:fd:eb:5f:
fb:6b:66:57:87:40:72:95:a9:ac:08:80:ad:e0:af:
d3:a9:1c:79:23:7c:b8:18:29:0e:10:9f:bd:4e:56:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:10:15:04:19:0D:09:35:A4:33:F4:75:4A:2C:1C:F6:3D:A7:D6:9C
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/TBAVBBkNCTWkM_R1Siwc9j2n1pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.9.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:57:8f:9d:db:fa:47:af:ad:5a:d3:8e:67:5e:e1:13:cd:f3:
4b:40:b1:f1:d5:9e:ff:8d:85:73:c9:5d:f6:48:93:e8:74:24:
35:7a:3c:e7:c6:f3:a8:85:f8:18:fc:12:bb:e7:67:74:66:ad:
3c:a6:b8:02:0e:4b:18:cd:81:40:7f:e7:17:5b:5b:60:ce:8d:
86:f3:5d:0f:08:81:89:51:92:58:38:55:bf:92:31:40:b6:c3:
90:35:0c:f1:37:9d:b9:13:e5:b2:39:4a:b9:34:21:8c:43:f9:
fc:1f:55:30:e5:86:49:a8:a2:86:46:65:53:92:9a:d2:db:8c:
79:e4:3b:84:9d:d8:2f:14:f6:be:40:12:c4:1e:c2:6d:86:1c:
e1:a1:06:16:75:fb:32:ee:11:08:1b:1d:07:0c:c5:9e:77:02:
e1:b5:24:b3:20:dd:c5:5b:b2:07:97:81:63:41:56:12:77:fc:
eb:ef:5e:01:c7:0a:c2:42:05:e5:ff:b0:11:3e:f7:18:02:34:
54:8c:ed:28:ca:90:92:fe:ce:20:df:76:ce:cf:70:f7:d2:68:
85:f4:16:e8:2d:ab:fa:b2:15:b4:c6:68:cb:97:20:1e:cc:e4:
18:f2:56:8c:db:43:0b:ef:75:b4:4a:c1:b3:9c:33:ec:fa:eb:
56:38:69:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:11 2024 by rpki-client on console-fra.rpki-client.org