Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/70ts11pcyNmcBHUIqadXewAlHHI.roa
File: 70ts11pcyNmcBHUIqadXewAlHHI.roa (raw, json)
Hash identifier: xaymb4PWfooIJl6sUwTYONvv26iNqs63hqi5wE4wmHs=
Subject key identifier: EF:4B:6C:D7:5A:5C:C8:D9:9C:04:75:08:A9:A7:57:7B:00:25:1C:72
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 018CC8010BD9B8DB86785F99C6E864A82AAC
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/70ts11pcyNmcBHUIqadXewAlHHI.roa
Signing time: Tue 02 Jan 2024 02:29:20 +0000
ROA not before: Tue 02 Jan 2024 02:29:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199749
IP address blocks: 185.47.81.0/24 maxlen: 24
185.47.83.0/24 maxlen: 24
185.47.80.0/24 maxlen: 24
185.47.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 16:37:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0b:d9:b8:db:86:78:5f:99:c6:e8:64:a8:2a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Jan 2 02:29:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef4b6cd75a5cc8d99c047508a9a7577b00251c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:15:e7:49:76:47:84:c5:50:30:cd:f1:25:14:
6e:27:f3:de:a7:23:b0:66:52:9c:a1:68:84:c2:c8:
21:99:39:5e:3d:d4:49:12:2f:a1:21:60:f2:2c:7b:
03:56:43:8b:2c:e3:ab:c6:90:ec:c8:15:1c:6e:0d:
e1:c7:cb:1b:38:1d:7f:66:4b:6e:bb:4d:5b:fa:87:
d5:58:16:d9:48:83:0e:09:9e:8a:44:ac:98:4d:f2:
2a:29:b4:d3:15:1a:ec:0f:1e:8d:4b:a1:7a:e1:11:
a8:0c:0e:18:cc:92:36:bd:64:31:eb:4d:ed:0f:e8:
f3:7c:a6:83:09:de:d9:81:5c:4c:39:eb:9d:3d:f3:
02:0d:37:2f:fb:60:12:86:a6:ea:ad:f8:ae:d7:0e:
5e:c6:83:c4:fc:97:23:f9:9a:a3:86:76:ac:c2:b8:
3c:18:25:ac:98:87:2b:5e:b8:1a:4a:34:a3:7f:a5:
03:78:83:86:45:c0:1c:d8:f0:e6:5c:51:fa:eb:c9:
14:c0:58:b4:47:55:24:e7:7a:30:8f:86:81:6d:bd:
98:11:c7:7c:b6:be:68:bc:35:54:18:db:f3:87:36:
72:2f:c4:d9:7a:ca:cf:39:ba:5c:e7:2a:44:13:98:
74:d0:3f:ff:c2:ba:da:f8:02:ef:74:b5:c2:c2:f9:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4B:6C:D7:5A:5C:C8:D9:9C:04:75:08:A9:A7:57:7B:00:25:1C:72
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/70ts11pcyNmcBHUIqadXewAlHHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.80.0/22
Signature Algorithm: sha256WithRSAEncryption
71:24:eb:02:8d:e8:eb:d0:d8:51:0d:64:dc:b8:aa:98:f9:3e:
c8:ed:40:ae:dc:b0:ca:04:d6:5d:b9:2a:ae:fd:39:1b:5f:58:
d4:f5:12:ae:37:99:27:f0:ff:2e:6a:48:36:de:6b:70:60:c4:
2c:ae:df:47:03:ee:5a:3d:ee:c4:32:e5:bd:2a:62:27:61:1b:
be:70:2c:9b:97:92:7a:11:c2:f3:47:22:e8:97:3b:fd:66:fc:
71:bf:e0:51:3d:35:b9:02:82:09:7d:a7:67:47:0f:51:aa:a1:
e5:65:01:ad:e6:28:66:37:c0:38:fc:41:59:a5:97:c0:a1:7c:
00:cd:17:98:6b:89:af:5e:c5:2d:a3:3e:ff:88:79:7b:d0:ca:
36:6d:fd:da:d7:60:38:b8:91:88:37:a6:22:7b:9c:a8:77:98:
47:2b:d2:d7:2f:99:c8:88:8e:9e:2e:ad:45:58:c3:a7:f8:4b:
1c:91:78:ee:5f:66:d3:73:93:ec:b8:b5:86:74:23:a6:f2:29:
61:6e:d1:cc:96:4f:1e:6d:37:42:0f:7b:f9:5b:9d:6f:84:c9:
b4:98:3f:46:9c:fe:17:74:d5:a3:f2:0e:27:27:f1:3e:3b:65:
33:a0:fd:ec:5c:5c:90:5f:d1:f4:8c:8b:fd:c6:ac:48:32:0c:
b7:61:5b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 12 20:04:46 2024 by rpki-client on console-ams.rpki-client.org