Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/R5N9XN_0NdtzkF6wUwur4rPPVHs.roa
File: R5N9XN_0NdtzkF6wUwur4rPPVHs.roa (raw, json)
Hash identifier: izpZRDY930ODKJocKPQfyToTY89XsJbrVtEsEc5d7h0=
Subject key identifier: 47:93:7D:5C:DF:F4:35:DB:73:90:5E:B0:53:0B:AB:E2:B3:CF:54:7B
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0185700291E19C092F7BD187EBE6ADBFFED4
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/R5N9XN_0NdtzkF6wUwur4rPPVHs.roa
Signing time: Mon 02 Jan 2023 01:04:54 +0000
ROA not before: Mon 02 Jan 2023 01:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205953
IP address blocks: 188.132.161.0/24 maxlen: 24
78.135.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Jan 2023 22:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:91:e1:9c:09:2f:7b:d1:87:eb:e6:ad:bf:fe:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 01:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47937d5cdff435db73905eb0530babe2b3cf547b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:09:15:b7:2c:d2:75:83:33:d1:9c:ac:5a:c1:
3f:0c:e3:14:47:88:c0:3a:52:a3:0b:2a:18:e6:2f:
9b:f6:72:0f:30:ec:b8:ff:0a:f1:70:57:d5:9f:f0:
d0:92:45:a7:80:44:da:68:3d:9f:ff:b5:5d:0e:f9:
64:72:68:ff:b2:39:85:06:8d:d6:c0:78:3e:02:ca:
dd:c9:63:a4:ba:61:cd:f1:21:e6:c3:7e:7a:8c:29:
f3:ca:69:d5:72:8e:79:2d:91:b7:13:33:de:fa:0b:
5d:b0:01:3c:e2:11:01:3c:cb:ec:a4:58:a9:3d:bb:
09:67:98:70:3d:02:23:33:ad:a8:39:b3:b3:33:84:
bb:35:0c:d1:69:c7:8d:40:f7:94:77:ae:3b:04:49:
f0:1b:69:5a:00:75:c5:ff:d3:34:e4:51:bb:c7:30:
fd:96:47:c7:38:b2:c4:e8:89:cf:e4:ab:48:9b:78:
e9:47:5a:0d:0c:17:e7:be:50:df:24:38:66:fb:fe:
7c:51:31:7c:21:2d:7c:46:25:bc:23:e7:be:ba:4b:
f4:1e:45:f8:2f:1d:81:08:45:0e:fd:c3:db:62:3f:
bb:cc:e0:51:6e:b8:c1:55:14:49:3f:41:88:85:2b:
74:f7:be:9d:f9:f6:d6:26:33:74:42:03:27:3e:5c:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:93:7D:5C:DF:F4:35:DB:73:90:5E:B0:53:0B:AB:E2:B3:CF:54:7B
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/R5N9XN_0NdtzkF6wUwur4rPPVHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.69.0/24
188.132.161.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ff:c4:38:0b:1c:9c:00:cd:ca:6a:d4:74:50:ab:d1:7f:1b:
34:b1:3d:2c:17:98:9f:e5:96:6b:be:25:b2:50:cf:a5:28:9e:
c0:2b:43:37:7e:c6:00:9c:e6:04:90:c9:0e:cb:49:38:e3:21:
b0:64:22:0c:72:2c:80:4e:d8:f0:a9:9e:f7:03:79:42:85:1e:
ca:d2:6a:cf:e7:f1:72:e0:88:24:6c:8c:b8:0a:6b:44:4a:d2:
53:2d:a7:be:77:e2:3b:7f:ae:26:76:8e:a6:43:41:a5:ae:9d:
a0:3d:e1:35:70:c2:3b:96:b9:50:0b:3f:09:c6:e6:c9:0e:82:
c4:e4:6e:ae:39:9c:06:21:0b:7a:c2:4b:a5:df:d9:11:99:7b:
a7:f7:b3:29:dd:1b:13:21:c1:e5:1b:74:ee:5e:4e:fb:c8:96:
cf:c7:40:78:34:07:3d:17:10:01:b4:3e:23:1f:a8:e7:22:d3:
3a:5d:5e:bd:c1:20:f2:d5:1d:e1:86:75:1d:12:e2:c0:5f:ba:
85:01:c3:17:9f:fa:c2:14:78:93:ad:80:b0:57:0c:b9:56:56:
93:c7:65:47:07:95:40:49:2d:b4:43:89:4b:c4:30:a2:7f:92:
57:44:ab:5a:64:6b:1c:25:f6:90:be:b7:6e:a4:c9:12:79:bc:
51:47:88:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org