Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/cGFtuEwmqfrKZRuxDuEgL4ffQ8E.roa
File: cGFtuEwmqfrKZRuxDuEgL4ffQ8E.roa (raw, json)
Hash identifier: vlxpsT0045Jw4e7Fdthl0/T2syou8U8figrL5oW6e4I=
Subject key identifier: 70:61:6D:B8:4C:26:A9:FA:CA:65:1B:B1:0E:E1:20:2F:87:DF:43:C1
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 018B71A2CB05DD98420072E7BEFCCBCA028C
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/cGFtuEwmqfrKZRuxDuEgL4ffQ8E.roa
Signing time: Fri 27 Oct 2023 14:56:16 +0000
ROA not before: Fri 27 Oct 2023 14:56:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398355
IP address blocks: 185.193.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:a2:cb:05:dd:98:42:00:72:e7:be:fc:cb:ca:02:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Oct 27 14:56:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70616db84c26a9faca651bb10ee1202f87df43c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:ce:09:11:5c:d7:96:56:0f:dc:e9:bf:07:
ae:73:d7:4b:30:1c:81:b7:62:36:25:c9:21:00:9e:
8e:30:de:aa:6d:a3:ee:e0:80:b5:be:8c:6f:6c:dc:
5e:77:80:69:1b:c3:c9:40:bf:c3:c2:0d:ff:26:86:
62:b6:c2:c4:9d:43:e8:79:d9:52:7c:70:75:6c:66:
1d:de:36:56:07:dc:a4:c8:ae:28:05:33:a7:e5:6a:
c3:89:db:54:f6:db:41:af:04:40:68:73:9a:49:b0:
50:bf:d1:71:f0:0c:ea:0b:19:35:59:d9:11:1a:32:
32:b9:f2:6a:86:41:de:0e:40:d7:a0:51:96:94:3e:
82:61:8f:07:7b:de:c5:46:2e:23:ce:e7:6d:18:1e:
26:60:d7:60:89:09:7b:4e:67:84:1e:02:c9:6e:82:
d6:93:4b:15:3b:f3:d7:f9:bd:14:24:50:55:d6:f1:
e0:b3:26:de:e7:66:f3:35:70:c8:d0:c3:7f:6d:84:
e9:e2:a4:d4:40:1c:54:aa:94:69:2e:d2:d9:33:78:
f0:a5:0c:93:a7:33:67:dc:2a:02:73:da:6c:d6:69:
12:31:85:f3:95:12:20:ad:07:d9:6b:9e:3f:92:d7:
9e:52:9d:ee:ca:55:f7:5b:ee:f1:c4:99:c8:bc:a4:
b8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:61:6D:B8:4C:26:A9:FA:CA:65:1B:B1:0E:E1:20:2F:87:DF:43:C1
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/cGFtuEwmqfrKZRuxDuEgL4ffQ8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.166.0/24
Signature Algorithm: sha256WithRSAEncryption
81:84:0f:64:00:e2:c2:56:41:48:60:40:c5:0a:83:1a:0a:6e:
3e:23:79:c0:34:d7:94:70:a6:c0:9d:d3:71:f3:c6:7c:42:01:
f0:9c:10:70:11:83:18:42:47:2b:82:af:e4:74:ba:86:b7:dc:
00:8d:18:53:84:3c:0d:03:6a:3f:ce:b1:c8:7d:d3:e2:13:7b:
69:5f:31:8a:79:57:42:54:e1:ce:92:3b:74:0e:b8:a1:ed:c3:
d6:43:da:db:9b:24:34:93:be:9e:4f:00:40:9c:87:f8:08:44:
54:2e:bb:c3:68:17:4b:5a:cf:89:e8:05:5d:b6:35:a6:52:29:
cb:17:c4:76:fc:9f:79:bb:c2:89:d0:8c:83:08:6d:67:16:a4:
0d:73:7a:91:e4:1d:b2:28:fc:a1:02:8d:4c:8e:9f:5a:31:4e:
57:90:07:fc:35:13:0d:0c:76:e8:72:b8:83:78:51:f8:63:76:
ff:ff:9a:c0:f0:aa:18:65:41:af:3e:b6:93:b9:24:f5:5a:68:
df:d1:49:29:5f:ad:85:23:3b:03:b2:87:09:50:bc:e5:d1:f2:
8f:14:74:f1:c9:17:dd:7d:8b:53:85:77:f4:00:c4:fc:47:f4:
d5:7e:22:96:8a:b0:00:b2:18:3a:de:2c:12:66:59:31:77:76:
37:b4:54:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:21 2024 by rpki-client on console-ams.rpki-client.org