Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/pL3GJclp7PbCLJH01ji_YWsTf5Q.roa
File: pL3GJclp7PbCLJH01ji_YWsTf5Q.roa (raw, json)
Hash identifier: yUXTaU7KtNNjnYG+J40lA/KCjokLlKDgzWUdG3KPaRs=
Subject key identifier: A4:BD:C6:25:C9:69:EC:F6:C2:2C:91:F4:D6:38:BF:61:6B:13:7F:94
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 018EC419DB721B3F209829E1F82D50F92C86
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/pL3GJclp7PbCLJH01ji_YWsTf5Q.roa
Signing time: Tue 09 Apr 2024 18:23:32 +0000
ROA not before: Tue 09 Apr 2024 18:23:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 185.193.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 09:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c4:19:db:72:1b:3f:20:98:29:e1:f8:2d:50:f9:2c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Apr 9 18:23:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4bdc625c969ecf6c22c91f4d638bf616b137f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:4e:30:30:ca:e9:c7:88:f0:63:87:53:e4:
9f:c1:20:3e:76:66:6a:2e:cc:4b:cc:c8:a3:2d:1a:
fa:c3:75:10:b3:d9:5e:df:44:71:b7:66:60:7b:77:
e3:18:5f:b8:74:d2:7d:12:77:cc:51:8c:33:08:b3:
ef:32:e5:c5:9b:20:53:8a:d9:5b:07:10:d9:ae:de:
19:e1:13:b8:15:8b:2d:69:0c:1e:80:ca:62:b8:83:
0e:82:11:b1:ee:69:06:0b:ba:78:2f:45:68:11:e7:
93:99:c6:37:22:5c:3a:62:52:b9:9c:b3:85:17:55:
cf:b3:e4:83:b7:47:c4:cf:99:e4:44:15:82:b1:7e:
55:aa:54:9d:6f:9a:00:80:81:ae:fa:fa:58:8e:4c:
53:fb:fa:fb:37:2c:5b:40:52:c2:0e:38:f6:63:4b:
3a:2b:94:23:d0:2e:bf:1e:0f:19:68:af:10:26:8e:
c0:60:89:1e:79:f3:43:b5:3b:e8:42:05:d2:bb:8c:
d6:42:8b:35:2b:d7:f0:67:a0:06:6a:55:01:98:17:
96:5c:f5:60:42:6f:87:2f:be:bb:30:87:69:9f:32:
70:03:ba:53:cc:01:29:43:1b:56:31:4f:0d:1f:46:
77:99:cb:37:b6:6b:16:b9:87:4e:b9:7e:0a:ec:eb:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BD:C6:25:C9:69:EC:F6:C2:2C:91:F4:D6:38:BF:61:6B:13:7F:94
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/pL3GJclp7PbCLJH01ji_YWsTf5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.167.0/24
Signature Algorithm: sha256WithRSAEncryption
28:44:16:3b:e8:50:7f:9d:3a:33:75:b9:ca:ec:bc:88:3f:32:
f4:12:a7:42:ab:9c:7a:9b:ce:97:16:97:4d:c6:ce:42:96:19:
bb:44:b8:2d:46:d0:8b:97:3a:6d:ec:17:4c:19:aa:f4:b3:ea:
4d:1e:31:2f:0f:8a:af:2c:58:78:b2:45:08:61:6a:b5:3c:89:
fa:a0:00:d1:0f:bb:0b:1b:58:7b:b3:18:c3:0c:b4:1f:05:9d:
41:67:ff:ae:07:ac:1f:ad:d6:a7:90:f2:d2:49:18:84:59:b3:
6d:df:93:a7:46:61:70:93:fd:8f:19:29:91:a7:0b:9a:3c:b1:
2e:9a:a0:c5:1c:a9:4f:79:92:81:de:37:ad:4e:f1:9b:6e:d7:
4a:62:aa:f1:d8:0c:f5:63:af:e8:d7:2a:28:28:72:ec:d8:03:
cd:82:6f:b4:b1:16:4e:d0:73:f0:3f:fa:62:03:18:c7:1a:91:
ad:de:74:b8:01:11:87:6d:eb:6a:88:5d:29:49:3a:4c:55:6a:
30:71:9e:61:c7:48:0b:a6:2e:e0:81:40:2e:55:99:61:c0:27:
6f:16:3b:3a:5a:47:a2:10:99:06:df:14:4b:23:cf:9f:3c:72:
a3:d0:0c:6b:96:d4:7f:3f:ae:81:98:2e:fe:05:af:44:28:fa:
9d:87:6b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:30 2024 by rpki-client on console-fra.rpki-client.org