Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/rQGbRpk1KuZn2_KAC5yQWImz5Kc.roa
File: rQGbRpk1KuZn2_KAC5yQWImz5Kc.roa (raw, json)
Hash identifier: wTUA4KB3ulLw8SGMVg4BzYJrNDS6KgJF0ashNSlD6o8=
Subject key identifier: AD:01:9B:46:99:35:2A:E6:67:DB:F2:80:0B:9C:90:58:89:B3:E4:A7
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 018570151DEEF39C31B400627B152CDEF83D
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/rQGbRpk1KuZn2_KAC5yQWImz5Kc.roa
Signing time: Mon 02 Jan 2023 01:25:10 +0000
ROA not before: Mon 02 Jan 2023 01:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62047
IP address blocks: 185.48.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Jan 2023 14:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:1d:ee:f3:9c:31:b4:00:62:7b:15:2c:de:f8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Jan 2 01:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad019b4699352ae667dbf2800b9c905889b3e4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:91:41:f3:d9:0f:49:7b:3a:bc:81:18:02:
12:39:af:fa:2d:f1:d5:87:64:5a:c7:86:12:64:b8:
c0:53:3f:ab:a7:dd:ca:60:b6:ab:58:66:24:98:13:
42:bd:1f:6b:f0:45:cd:e3:2f:d1:ba:8f:4c:44:71:
f4:6a:03:e7:f2:06:24:12:a0:71:04:ef:fe:b5:ff:
3a:b6:b9:f6:0a:33:7e:91:d3:02:c7:bb:56:e0:21:
ed:9d:ad:3d:66:a3:a5:7e:bd:e7:42:8f:a3:db:19:
9e:77:09:b7:08:75:3b:c3:32:32:d4:ea:9b:a9:12:
e7:d7:24:66:c2:35:7c:e2:96:ef:00:b7:b7:fe:51:
87:67:37:c4:1d:38:b5:7c:87:a9:90:72:a2:27:69:
34:cc:3b:12:46:71:ec:b4:65:20:e5:e5:5b:62:01:
55:00:05:33:ea:33:0d:1e:ae:07:84:78:18:08:98:
9e:f8:85:d5:2f:be:c4:98:fd:bb:db:9a:d0:1a:8c:
25:cd:8c:d8:db:fe:eb:ab:fb:ec:8d:bf:a1:bf:72:
5d:4b:19:c1:e9:37:59:55:5f:09:47:a9:3e:98:8a:
e6:ba:cb:c2:04:0f:2d:4e:94:c6:9f:e8:61:50:f8:
e8:27:8d:2b:cd:31:9d:a3:40:e2:e0:0f:0f:8d:fe:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:01:9B:46:99:35:2A:E6:67:DB:F2:80:0B:9C:90:58:89:B3:E4:A7
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/rQGbRpk1KuZn2_KAC5yQWImz5Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.9.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a8:6e:68:ce:36:e3:46:45:ae:a0:64:48:60:87:17:8c:2c:
54:f8:59:20:0d:50:05:ec:36:92:c0:f9:8a:e4:eb:85:be:c8:
49:26:da:5d:1d:f6:a5:4f:75:f9:90:4a:76:54:67:f8:2e:26:
6d:8f:95:a4:d2:65:c2:da:5f:f0:27:6b:a9:12:80:42:a6:e6:
21:4b:d0:d4:dc:2e:a5:8c:67:fa:88:df:1e:a1:18:b5:ef:a7:
7b:46:ec:5c:ef:25:dd:43:85:da:69:4b:b0:a5:d4:28:8f:28:
fb:84:92:06:6f:8a:7a:ba:89:dc:a8:c5:8d:40:d4:39:4a:c9:
9b:31:69:b7:f8:5d:08:86:52:98:ff:47:55:22:7d:73:ff:48:
49:bc:b3:52:28:ed:81:80:b0:c9:1b:51:9f:52:61:6f:e5:70:
46:80:13:2f:41:40:16:76:29:9a:0c:7b:7e:ac:db:59:e5:0c:
30:25:2f:f7:3e:8e:7c:61:65:1e:57:fd:ef:de:3c:6c:67:44:
ef:1f:43:68:19:f7:86:88:ba:74:91:9c:9f:74:65:61:77:be:
a0:7c:03:c1:8f:78:01:45:2d:5e:e0:4d:89:5f:04:78:35:0a:
f1:6b:64:b5:85:94:ff:2b:56:4b:8a:09:fa:17:0e:13:ce:a7:
65:da:2c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:11 2024 by rpki-client on console-fra.rpki-client.org