Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/e9PCuikJre0Xhr9V9RhlCrppQnM.roa
File: e9PCuikJre0Xhr9V9RhlCrppQnM.roa (raw, json)
Hash identifier: /yEvsi5n377m3Sd3bRyyPV7JSNLoheSYGEySArDd3+A=
Subject key identifier: 7B:D3:C2:BA:29:09:AD:ED:17:86:BF:55:F5:18:65:0A:BA:69:42:73
Certificate issuer: /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial: 01856CC1694558290B2A8C379A347F4C34D4
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/e9PCuikJre0Xhr9V9RhlCrppQnM.roa
Signing time: Sun 01 Jan 2023 09:54:52 +0000
ROA not before: Sun 01 Jan 2023 09:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49544
IP address blocks: 185.70.47.0/24 maxlen: 24
2a05:2606::/32 maxlen: 32
2a05:2605::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:69:45:58:29:0b:2a:8c:37:9a:34:7f:4c:34:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Validity
Not Before: Jan 1 09:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bd3c2ba2909aded1786bf55f518650aba694273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:db:b4:55:bd:cc:fb:8f:4f:3f:18:1c:0d:
48:33:e7:63:73:15:57:de:3d:e5:8b:03:16:e9:cb:
60:b6:bf:57:dc:5c:82:f2:dc:b7:d0:00:9b:a3:47:
16:aa:02:43:be:b3:83:44:0a:ed:29:55:4b:e6:54:
0f:bf:aa:61:31:be:f8:7c:e2:02:d6:b4:dd:04:20:
c4:e0:88:6c:47:18:30:e2:4a:08:00:e2:62:dd:2e:
c1:04:52:39:c2:4c:62:20:17:46:0f:6d:55:0a:48:
d3:c8:be:53:67:7a:33:1c:20:d9:0e:b0:15:af:ff:
9a:b0:e2:6c:86:d5:79:cd:04:ed:3c:6b:0f:9c:83:
d2:d5:a5:48:b9:fd:44:e4:ba:66:d5:fd:25:7f:9e:
aa:7f:2f:7a:19:4d:6b:68:55:f8:a4:1a:b5:43:c2:
38:00:5a:d0:ef:08:e8:8f:7a:f6:af:56:87:22:57:
b6:80:77:a2:8c:4b:b3:dd:0f:ea:29:84:86:83:a6:
46:d7:ca:b6:fc:a5:a4:ea:35:a2:5c:00:73:61:37:
62:da:18:b8:b3:bf:a0:a8:32:20:9b:aa:69:55:93:
15:63:19:9a:f1:e4:70:9f:df:d9:3f:26:af:1a:ac:
36:53:01:ce:aa:15:d1:3c:c0:65:35:4c:cb:e5:41:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D3:C2:BA:29:09:AD:ED:17:86:BF:55:F5:18:65:0A:BA:69:42:73
X509v3 Authority Key Identifier:
keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/e9PCuikJre0Xhr9V9RhlCrppQnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.47.0/24
IPv6:
2a05:2605::-2a05:2606:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7e:51:48:d2:97:ca:c3:a9:58:ce:dd:f3:ff:23:3d:06:f8:0c:
93:c6:c1:80:aa:ec:0d:dd:b6:87:63:19:80:8f:6f:c2:f0:05:
bf:49:e7:92:57:69:88:20:a1:b1:4a:4b:b6:d2:7f:4d:8c:59:
e9:65:2b:ca:6c:4b:b7:7e:bd:61:2b:c4:ce:70:d8:14:b0:5a:
bf:e6:60:0c:2e:50:a9:20:ab:f1:59:50:08:3b:1a:95:8c:f9:
49:0e:0b:70:42:2c:47:a7:56:8f:f4:d8:31:f1:de:f7:25:6e:
9d:07:f9:dd:7d:27:7f:6d:35:93:80:8e:29:84:e0:b3:13:d3:
8d:d7:58:12:00:09:e6:7d:1b:da:f8:b7:85:0f:0a:cb:25:75:
42:d7:39:29:cd:b4:77:14:a7:1c:55:da:2b:d3:b5:49:d5:fa:
18:5c:ba:a7:d0:d8:0d:d3:86:06:5b:ad:5d:c7:e2:b3:aa:38:
17:ab:ac:3c:21:80:ab:38:f7:39:45:14:49:14:8d:82:bc:d3:
3e:07:5f:42:fe:3b:3a:58:31:e1:ac:6c:d5:e3:6f:e0:ec:1a:
e8:a7:94:da:c9:dd:6c:f7:d8:ec:ca:0c:dd:d1:80:20:9d:a6:
1b:6e:96:f6:bf:9b:19:85:7a:af:82:b0:85:7f:e4:9d:6b:2b:
9b:7f:69:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org