Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/_ujy9R-WtWnVJELfhz0Q6DOrx2U.roa
File: _ujy9R-WtWnVJELfhz0Q6DOrx2U.roa (raw, json)
Hash identifier: j+vjk8DwCJqDmCqL2ARCx7+IR+7o+XYeFTyG86K7bNg=
Subject key identifier: FE:E8:F2:F5:1F:96:B5:69:D5:24:42:DF:87:3D:10:E8:33:AB:C7:65
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 018BCDEC9AF36B547D0C254ECC0E8EE436CF
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/_ujy9R-WtWnVJELfhz0Q6DOrx2U.roa
Signing time: Tue 14 Nov 2023 13:01:57 +0000
ROA not before: Tue 14 Nov 2023 13:01:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203510
IP address blocks: 185.9.185.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:ec:9a:f3:6b:54:7d:0c:25:4e:cc:0e:8e:e4:36:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Nov 14 13:01:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fee8f2f51f96b569d52442df873d10e833abc765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:30:ba:6c:82:18:a4:ca:67:e5:eb:14:c6:
3a:9c:0d:7b:c0:7c:56:53:ac:ed:dc:c6:a4:bd:0f:
e2:88:40:08:c4:c8:2c:a6:83:01:35:02:3d:6f:33:
2e:75:93:a5:f8:a4:ac:a2:28:f9:46:45:91:a8:f5:
3d:94:96:b8:4e:a6:36:56:da:0a:ae:27:32:e9:de:
a7:d5:c0:6e:94:28:a7:55:e0:d2:0c:a9:b9:6f:2d:
1a:da:bc:94:1e:3a:97:88:fb:46:b0:f4:1c:e9:97:
28:55:aa:8a:89:b5:79:2b:8f:d1:55:ad:bf:81:4c:
6e:2c:b3:91:be:1a:0b:b7:34:e9:f0:cd:41:4c:7a:
b2:19:89:bf:0c:d1:2f:c2:a4:12:9b:f3:f1:1f:a3:
93:4c:ad:7a:e0:e2:4d:76:e0:67:ab:ee:c4:18:f8:
44:28:2c:b0:5f:38:42:f0:0d:66:18:6c:f1:8a:4a:
a3:64:8f:91:2a:12:d7:f7:71:f1:00:89:21:2a:4d:
9c:c0:fd:1c:dd:16:94:0a:bc:b3:fd:04:e6:41:eb:
51:39:c3:d5:5d:80:a3:9e:da:18:fd:90:c2:fb:21:
5f:d6:f3:a6:98:08:78:4a:ad:90:ba:35:be:96:2c:
dd:87:32:3e:2c:d3:db:d4:2e:aa:2a:1e:9a:72:2c:
e0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E8:F2:F5:1F:96:B5:69:D5:24:42:DF:87:3D:10:E8:33:AB:C7:65
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/_ujy9R-WtWnVJELfhz0Q6DOrx2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.185.0/24
Signature Algorithm: sha256WithRSAEncryption
54:8c:5a:63:63:c8:bc:68:96:d7:87:85:f6:2b:88:4e:12:38:
ee:f7:c8:a3:fd:36:26:be:a2:60:6b:3c:69:65:6e:50:de:29:
71:98:44:db:12:e8:fa:1c:ee:f8:48:cb:ae:02:ca:42:ff:19:
8f:13:65:03:9d:cf:b9:d1:7c:7f:47:d0:30:a3:29:07:e9:d7:
09:08:15:bb:34:65:99:16:09:97:bb:24:0a:a1:53:ef:60:f4:
fa:62:0c:f0:fe:8f:7a:ef:1d:f2:89:3c:50:93:09:fc:9b:07:
b6:0c:2f:fe:ea:01:9b:1d:70:99:f8:b1:0d:2e:6b:2e:21:d4:
56:62:d9:c4:85:b7:91:6b:ee:a7:12:af:1f:0e:ce:97:8d:95:
0e:f0:ef:36:4e:70:0f:6c:e3:85:e8:fa:12:bd:9a:d5:a3:ea:
51:e6:ef:d7:5d:0e:52:13:3e:bc:d7:af:0e:79:5b:a6:f4:6e:
eb:80:bc:82:e4:73:3f:2d:b6:78:04:96:d6:c6:72:38:6a:8d:
79:13:81:f0:55:58:58:00:3b:23:c4:6c:9a:2a:cf:78:d9:12:
7c:ab:e1:4e:7f:52:c5:15:c9:db:af:23:c8:07:a0:bc:7a:7a:
68:41:f7:30:81:12:4c:bd:b1:f1:8b:a3:b3:10:cf:24:9f:f9:
9c:ba:ea:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org