Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/S1gy3k7ZD3EvX9AjjfinkI0pxUo.roa
File: S1gy3k7ZD3EvX9AjjfinkI0pxUo.roa (raw, json)
Hash identifier: 3H3xEOBxR9r3osL9SZZUcDTq3cm4+QSm7gReRA/QJ3c=
Subject key identifier: 4B:58:32:DE:4E:D9:0F:71:2F:5F:D0:23:8D:F8:A7:90:8D:29:C5:4A
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 01857395F30F6CD0859074EBBBCECFFF56AF
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/S1gy3k7ZD3EvX9AjjfinkI0pxUo.roa
Signing time: Mon 02 Jan 2023 17:44:44 +0000
ROA not before: Mon 02 Jan 2023 17:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 185.193.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:95:f3:0f:6c:d0:85:90:74:eb:bb:ce:cf:ff:56:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Jan 2 17:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b5832de4ed90f712f5fd0238df8a7908d29c54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:36:c7:f1:2a:ca:76:d0:fe:2a:76:f9:bf:
09:39:53:0b:ca:9c:a2:0e:e2:60:63:97:23:3f:58:
79:38:13:49:7e:24:07:0a:69:00:77:f1:84:14:8e:
31:19:78:93:e9:cd:0e:08:00:5c:62:37:5b:0b:22:
7c:af:86:c0:ec:e4:34:0f:fd:38:1a:e3:c6:cd:fc:
55:7a:aa:b7:cb:51:92:c3:21:1b:6a:4f:23:d9:fd:
81:e6:19:33:d6:3b:f9:20:74:70:e5:57:86:b6:dd:
b1:fc:52:b1:c7:52:ee:57:47:f8:c2:a9:08:05:c1:
0d:1e:89:43:b2:65:66:b6:f7:02:0b:25:d2:ee:e5:
22:03:a1:c1:a2:64:da:63:0a:43:43:5c:a3:98:b8:
e7:90:29:c9:94:ed:c8:5b:27:6b:6a:cd:42:7b:be:
c1:55:90:88:a8:24:bd:7d:f8:e8:8a:f0:52:6c:6d:
45:17:4d:cf:2d:91:d6:08:a1:61:11:97:b3:b8:f6:
ea:a4:8a:77:04:7e:32:7a:b3:21:d6:bb:90:bb:31:
63:f6:87:66:db:3d:72:d4:a3:f2:1d:7d:7d:d6:7c:
4e:06:88:76:28:ae:60:8c:a6:6c:64:c3:ad:ad:47:
4c:ff:80:c4:33:02:48:eb:43:49:f6:c4:ad:26:70:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:58:32:DE:4E:D9:0F:71:2F:5F:D0:23:8D:F8:A7:90:8D:29:C5:4A
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/S1gy3k7ZD3EvX9AjjfinkI0pxUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.165.0/24
Signature Algorithm: sha256WithRSAEncryption
de:fa:e0:72:a3:7c:4c:71:34:e4:4b:65:ee:31:92:d7:8f:ac:
04:80:ef:2b:0b:2b:10:92:e5:01:fb:92:0d:2f:74:32:66:42:
03:c7:8f:00:da:5a:c9:88:7c:90:a0:68:83:04:e1:de:35:09:
d9:29:b4:1c:d7:54:d2:da:73:62:11:41:f1:07:a2:6f:8b:59:
ca:eb:da:27:52:1d:98:cd:cc:39:a1:36:29:2f:87:cd:bd:6f:
06:3c:f9:ec:ed:94:b0:1a:78:33:8f:aa:81:ff:3a:65:1c:80:
12:4e:c5:74:8a:74:c0:f3:aa:42:eb:fa:6d:82:4f:9f:2b:eb:
56:e5:83:52:39:6f:39:68:14:74:7e:2b:ca:0b:a8:23:bd:ff:
4f:9d:c6:d3:d9:2d:e5:d8:3f:22:a2:81:c2:92:c0:44:3e:59:
a8:db:59:16:18:89:8b:f1:d7:28:da:9f:5d:03:22:cc:c0:9f:
bc:13:bc:8f:6a:36:f4:23:48:e5:ae:c4:a6:0f:43:f3:cb:85:
d9:78:45:53:e8:29:0d:2e:4b:ca:bc:cc:9a:99:61:f9:d0:9a:
72:1b:38:99:4e:f6:0c:8a:07:56:05:53:11:91:f7:ed:8b:c2:
68:bd:19:2a:f6:2f:9a:8c:29:b7:52:b1:9d:92:75:92:16:63:
11:a3:06:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:30 2024 by rpki-client on console-fra.rpki-client.org