Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/nYFCoW9Psbi6-DBWSYq_OW_YsDY.roa
File: nYFCoW9Psbi6-DBWSYq_OW_YsDY.roa (raw, json)
Hash identifier: IK9qPksYQRZSBb8qJwLqJxA5t6Vu0p1pHZcp1fQcbKQ=
Subject key identifier: 9D:81:42:A1:6F:4F:B1:B8:BA:F8:30:56:49:8A:BF:39:6F:D8:B0:36
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018573900CE6EB2B1D2BB0849875A891D2CA
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/nYFCoW9Psbi6-DBWSYq_OW_YsDY.roa
Signing time: Mon 02 Jan 2023 17:38:18 +0000
ROA not before: Mon 02 Jan 2023 17:38:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211617
IP address blocks: 185.186.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:0c:e6:eb:2b:1d:2b:b0:84:98:75:a8:91:d2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d8142a16f4fb1b8baf83056498abf396fd8b036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:f0:86:03:37:d3:fd:96:c6:fb:9d:2f:be:
7a:c6:f6:c0:c4:3c:84:4b:4e:b9:94:68:ec:dd:dc:
52:dc:8a:06:21:c1:ca:d7:6b:fc:bc:a9:5a:42:ce:
2c:d4:96:bf:b1:40:f8:5d:58:25:65:83:07:07:b1:
21:da:d3:48:36:e5:57:73:d5:4d:4e:72:f2:cd:b9:
5a:af:8c:e3:66:f5:1e:8f:26:db:c7:7f:a9:f1:61:
07:9b:21:00:4c:e8:d7:b5:bb:a0:2e:36:d0:dd:95:
87:ad:15:1e:16:3c:85:bd:6b:d5:5d:20:f9:93:10:
dc:95:a0:cd:a9:79:41:47:e1:d9:3f:91:23:1b:e7:
0c:ed:3b:86:fb:af:0c:93:1a:83:7b:73:88:8f:c8:
32:ef:d9:d1:e2:99:85:ff:98:e1:ef:7a:01:43:7c:
ee:bc:1e:e6:36:d2:60:11:0f:a4:96:42:79:57:81:
cf:53:17:dd:2f:d4:27:58:70:59:9d:62:44:55:85:
36:b9:e8:f4:ef:0f:98:da:ec:62:d2:78:45:44:e4:
dc:97:d5:d6:0b:3b:76:93:26:51:d3:2f:a8:12:eb:
22:45:0e:76:90:03:09:5b:f4:f5:85:f4:05:e2:fb:
2c:2e:eb:f3:7d:b3:2a:58:6c:88:8c:9a:cc:3b:7b:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:42:A1:6F:4F:B1:B8:BA:F8:30:56:49:8A:BF:39:6F:D8:B0:36
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/nYFCoW9Psbi6-DBWSYq_OW_YsDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.67.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c6:25:d2:e8:2d:44:c5:dc:db:98:97:ed:1a:aa:3c:8f:e1:
b2:a4:48:f4:45:95:6b:e7:b7:15:d5:3a:e8:09:df:47:c5:0c:
06:93:a2:2b:bc:57:ea:56:5b:c0:9e:eb:5a:ed:a3:83:11:75:
3b:22:ce:86:e9:76:f1:59:68:be:e1:db:c7:57:4f:e5:76:9f:
56:d4:5b:18:a7:38:e1:83:87:de:d2:c7:08:6e:74:97:3b:65:
72:19:96:e9:68:80:f4:7e:b0:00:ed:3c:a3:ea:e7:23:a9:ba:
ca:37:a2:0a:22:41:25:01:c1:9b:c8:66:9b:15:7a:ec:5e:17:
88:05:d2:49:dc:bd:1c:1e:ae:41:f0:99:9d:cf:43:79:b7:c6:
d6:2d:60:e1:99:49:d0:ba:e2:cf:0c:c8:3f:d6:62:f2:d1:db:
d1:6d:f9:12:3f:9d:99:53:11:a3:53:fd:c3:73:5e:12:21:27:
f9:3c:96:ef:42:d0:0e:59:d7:c1:45:5a:fc:f3:f7:c9:2e:ef:
69:38:00:f5:ea:3e:bc:af:6c:4f:04:f4:7c:8b:ad:07:de:4a:
ef:f3:08:66:d3:59:2a:ac:f8:94:f6:34:39:43:9a:64:98:91:
37:20:cd:69:87:82:87:ae:a7:6e:0e:28:a0:b7:d2:d3:09:0b:
aa:ef:cf:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:40 2024 by rpki-client on console-ams.rpki-client.org