Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/gAaa2U2UPhX9YgI0yv7imJGdQ9Y.roa
File: gAaa2U2UPhX9YgI0yv7imJGdQ9Y.roa (raw, json)
Hash identifier: YNf63WEFVOF3CLT91tJhldAd46/ype3AM+jDmnYOMzg=
Subject key identifier: 80:06:9A:D9:4D:94:3E:15:FD:62:02:34:CA:FE:E2:98:91:9D:43:D6
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 01856D5CEE8C1C9AB33D7841881F84A053DC
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/gAaa2U2UPhX9YgI0yv7imJGdQ9Y.roa
Signing time: Sun 01 Jan 2023 12:44:44 +0000
ROA not before: Sun 01 Jan 2023 12:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49198
IP address blocks: 185.47.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:ee:8c:1c:9a:b3:3d:78:41:88:1f:84:a0:53:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Jan 1 12:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80069ad94d943e15fd620234cafee298919d43d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:05:24:4e:d3:e1:3f:5f:56:ea:a2:69:0d:83:
80:e3:6d:c4:19:a8:7f:d4:24:2a:9a:8f:a2:73:ad:
fd:3e:64:cb:4f:4a:0b:e5:07:28:22:33:b1:3d:ba:
b9:d2:b9:be:16:14:c8:6c:0c:a9:97:47:99:00:3a:
54:3b:a1:e0:5a:26:0c:b0:b9:4c:9a:98:1b:ea:dc:
12:11:eb:e6:c3:28:45:ed:17:91:5c:70:bc:e3:a5:
88:d9:31:83:d8:19:fe:af:d2:5f:7a:90:7a:6d:06:
7f:1a:c0:11:3a:80:59:e6:59:f6:94:5d:d7:55:24:
47:4f:66:19:aa:a5:cd:1f:67:9c:ac:e7:83:7c:fe:
43:6e:34:4e:3b:15:be:02:70:56:b5:da:06:dc:b4:
b6:ab:18:2d:38:18:52:41:95:96:4b:09:fb:f0:fc:
1a:cd:bf:74:39:70:0e:7b:b2:86:a1:e3:77:65:55:
90:39:37:4f:93:e3:1d:74:57:34:88:48:68:d9:ca:
b0:27:04:94:3c:8b:ee:ac:c5:4b:3b:19:4a:40:db:
03:30:03:5e:51:e9:ae:b6:a0:17:9e:e6:e8:02:0f:
ee:aa:29:9e:e2:da:1f:16:59:2a:96:7c:55:78:ba:
d8:c3:a2:35:89:94:81:47:20:fe:1e:50:ad:86:d6:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:06:9A:D9:4D:94:3E:15:FD:62:02:34:CA:FE:E2:98:91:9D:43:D6
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/gAaa2U2UPhX9YgI0yv7imJGdQ9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.209.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c5:99:b1:d9:41:b5:72:ae:53:a3:34:71:1b:41:2b:a4:54:
55:5c:99:7f:2b:97:0c:11:59:22:36:7d:fd:ef:3e:d2:eb:46:
da:93:5b:1a:ee:8c:d5:eb:56:47:41:01:d4:8c:fa:c6:13:a4:
aa:41:94:4a:c6:63:3d:5a:30:d5:fd:96:5a:75:f7:db:2a:96:
d0:41:b6:bb:d0:62:4b:90:94:08:3e:24:3e:8d:d1:5d:04:d7:
59:b0:db:77:b4:b4:7c:a5:6c:e6:48:5b:a9:be:45:22:66:73:
15:f7:35:6f:c3:02:be:5b:9b:f4:1d:92:02:cd:9c:9a:2d:ab:
38:76:0a:f5:ee:cf:a0:05:92:b2:5e:21:d3:c3:cc:ce:9f:5c:
d4:ed:31:22:73:25:83:e8:3c:73:3a:c8:02:bf:77:8d:51:35:
af:ce:26:c2:88:0c:ef:6f:11:56:62:6c:6b:ed:7d:28:e2:c7:
40:d1:0e:63:e7:3f:54:a4:ce:29:23:53:2f:fe:36:0b:f3:32:
08:9d:5d:92:6d:e4:3b:41:c0:53:76:65:a2:50:0f:3b:01:a7:
1d:a0:d3:c7:ef:9e:5c:ae:7e:64:e2:01:9c:f4:53:55:06:4c:
b6:f4:f2:b1:77:83:70:c3:ea:46:32:03:2a:fc:8a:64:47:e0:
31:56:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:19 2024 by rpki-client on console-ams.rpki-client.org