Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/R9-bcLLDoMEOGHaowKtB5INrfsc.roa
File: R9-bcLLDoMEOGHaowKtB5INrfsc.roa (raw, json)
Hash identifier: LG9tor2UbNVKNrR/Au6EN2K1hgZtTW6+3rEIKuEKdDw=
Subject key identifier: 47:DF:9B:70:B2:C3:A0:C1:0E:18:76:A8:C0:AB:41:E4:83:6B:7E:C7
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 01857395F2510BA8C29983460A96377CD05E
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/R9-bcLLDoMEOGHaowKtB5INrfsc.roa
Signing time: Mon 02 Jan 2023 17:44:44 +0000
ROA not before: Mon 02 Jan 2023 17:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 185.193.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 May 2023 00:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:95:f2:51:0b:a8:c2:99:83:46:0a:96:37:7c:d0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Jan 2 17:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47df9b70b2c3a0c10e1876a8c0ab41e4836b7ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2c:c5:a1:06:50:36:89:84:ee:e5:ae:f8:f6:
4b:27:5f:6f:40:5a:8d:f4:bc:92:13:97:64:c2:d8:
4c:11:7b:59:80:2d:86:2b:e7:49:a6:ae:a5:64:59:
36:8f:a2:15:c9:1e:6a:38:a7:dc:ff:58:44:64:bb:
b7:31:ba:9e:93:07:90:9f:cc:7f:24:e5:cb:a4:98:
48:60:ae:79:ea:d2:15:25:c7:60:02:56:25:aa:06:
e2:4e:4b:cb:bf:93:9c:87:9f:ed:12:03:94:25:dc:
e5:38:f1:d9:c7:bf:30:7b:0e:44:8e:b9:54:93:43:
7f:cf:88:58:5c:02:af:5a:f1:5e:5e:9d:68:87:9e:
47:fa:4b:34:f3:aa:03:01:0e:60:c7:ab:0d:b9:f0:
d8:b2:a1:ac:95:f9:8e:40:17:c1:4c:aa:b3:fc:89:
83:53:85:96:78:bb:39:94:06:46:db:5c:db:bd:a3:
78:c9:15:5f:04:a9:6e:f9:51:30:ff:ba:d9:bf:84:
e5:db:6d:1e:13:9b:05:b9:20:ee:cc:0a:75:4b:db:
6c:97:54:a2:a6:3a:d7:7e:c3:bd:62:f2:ee:02:f0:
02:89:68:22:91:29:9a:90:28:e9:85:6f:d3:08:1a:
7c:f4:8f:ef:76:73:c0:5c:cc:58:19:6e:c0:0c:ca:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DF:9B:70:B2:C3:A0:C1:0E:18:76:A8:C0:AB:41:E4:83:6B:7E:C7
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/R9-bcLLDoMEOGHaowKtB5INrfsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.167.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d8:11:ad:48:4f:92:80:be:f1:a0:94:2c:ef:6d:f0:31:4b:
41:5d:cb:d6:35:99:b8:5b:f4:80:d5:27:8d:59:86:d4:0c:77:
8a:ba:82:48:27:f8:15:93:0a:91:3a:14:65:b1:4e:fa:3b:3e:
b9:1f:d9:90:4e:34:c8:a6:c1:b0:9f:9e:b6:39:dc:de:63:4b:
25:90:81:3a:a2:e3:8c:85:fc:ca:97:eb:a9:6e:03:a4:56:ab:
1a:78:4d:8b:5e:41:78:1e:2f:52:50:3a:e1:4c:da:2d:78:00:
2e:7f:07:a3:e8:2f:2d:70:f2:15:50:89:f7:0c:f4:02:c8:fb:
b3:db:42:4d:c0:5e:cd:ab:c1:35:14:af:70:f8:d3:ff:02:f5:
55:52:c5:9f:bc:56:3e:93:e8:0a:42:2d:98:5f:6d:9f:0f:c3:
2d:8e:aa:23:a0:f4:da:b1:db:fc:b0:ce:75:65:80:22:95:20:
03:d6:9f:ca:db:f0:98:36:03:58:12:f5:cd:e9:cd:b7:ac:66:
23:6f:47:dd:31:14:78:9f:d7:eb:4d:54:f4:db:ef:2b:42:a6:
df:a3:de:f7:73:93:19:10:c1:b5:ef:30:10:53:93:ab:af:b4:
9b:95:f3:14:46:84:97:3a:87:ce:4b:08:af:8d:8d:6e:52:4a:
8f:6d:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:41 2024 by rpki-client on console-ams.rpki-client.org