Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/i9GpvJ8KzreQmOy-vsCvBPDr-54.roa
File: i9GpvJ8KzreQmOy-vsCvBPDr-54.roa (raw, json)
Hash identifier: 5e9Rn8nWK6ZH/XvL7Q53RMQshjHUgRmC2Ac5KSHA7vM=
Subject key identifier: 8B:D1:A9:BC:9F:0A:CE:B7:90:98:EC:BE:BE:C0:AF:04:F0:EB:FB:9E
Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial: 018570D54ACB2BD3D90BBFC5986E166B2712
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/i9GpvJ8KzreQmOy-vsCvBPDr-54.roa
Signing time: Mon 02 Jan 2023 04:55:04 +0000
ROA not before: Mon 02 Jan 2023 04:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.36.216.0/22 maxlen: 24
194.247.26.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:4a:cb:2b:d3:d9:0b:bf:c5:98:6e:16:6b:27:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Validity
Not Before: Jan 2 04:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bd1a9bc9f0aceb79098ecbebec0af04f0ebfb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:d1:15:5e:14:f9:31:bc:31:03:d3:59:ef:
be:4f:d9:bf:33:e3:b1:12:d7:fe:38:b4:93:c2:c0:
74:f2:6e:72:33:2e:a9:56:f7:f8:89:e5:82:f2:8f:
fc:56:27:a8:30:68:9b:b0:67:ee:f5:ab:42:63:a0:
ae:de:e6:7e:63:d1:62:21:f6:33:a6:65:88:a2:33:
a2:74:9f:53:cb:9a:6b:3f:ac:28:2f:4d:09:39:b8:
8d:e5:88:78:84:6c:ff:95:d8:83:8d:d4:6d:a2:f8:
d2:7a:47:9c:ba:38:de:09:c0:14:78:10:ec:c0:f7:
75:06:92:a8:6f:4e:aa:36:8f:bb:da:26:62:dc:b2:
a6:a6:09:19:9c:95:c1:54:15:3f:ec:b1:dc:a4:80:
ae:94:d5:ba:9b:c0:10:1e:19:d8:06:d0:35:4d:bb:
7c:34:21:8d:6d:20:06:a2:5c:41:b1:fd:22:12:d6:
82:51:01:dd:6c:8d:75:d8:ff:22:b4:70:07:28:45:
45:df:0a:b9:0a:65:cd:cb:01:d4:de:07:23:14:4d:
e2:cf:e6:32:e9:cf:91:49:37:02:06:97:0b:2e:20:
9f:8b:e4:64:f2:d0:c9:17:11:a3:09:89:d9:b9:79:
ab:70:80:e7:f7:62:6f:ae:ab:ad:21:cd:08:81:7d:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D1:A9:BC:9F:0A:CE:B7:90:98:EC:BE:BE:C0:AF:04:F0:EB:FB:9E
X509v3 Authority Key Identifier:
keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/i9GpvJ8KzreQmOy-vsCvBPDr-54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.216.0/22
194.247.26.0/23
Signature Algorithm: sha256WithRSAEncryption
86:03:f2:95:85:a4:38:c2:12:59:b4:2f:ef:b0:95:5b:50:26:
b7:88:3f:1d:a4:01:21:28:6a:d3:8b:ea:a8:99:99:91:f6:0b:
0a:6d:48:6f:e4:50:b0:96:e0:59:fc:df:f9:e8:51:a6:92:70:
47:5b:5f:70:ca:bc:68:95:0a:64:b8:7e:ea:1e:c2:31:9c:c3:
3f:02:87:3f:ce:c0:06:d6:8e:c0:bc:a3:df:41:43:e7:81:83:
aa:d9:eb:25:87:ec:c7:8f:8f:56:0b:29:ab:9f:3b:55:93:4d:
bf:64:af:75:29:28:4a:48:5d:7c:65:95:75:9a:67:ed:8d:b8:
12:f2:b4:11:ad:66:cd:3a:fb:d1:70:c8:5b:8b:a8:98:05:25:
67:01:5a:88:a0:89:bb:36:29:f6:af:f8:30:73:65:4e:3d:17:
39:53:a6:cb:a7:3c:75:7f:aa:8e:12:93:dd:af:5b:5a:80:aa:
76:c0:f4:20:3f:94:5e:16:65:02:7e:0a:e0:eb:cb:4f:58:55:
f2:2a:94:5a:bf:6d:c4:41:45:49:2a:7f:42:ac:03:2d:4c:ed:
13:f6:4f:43:9d:05:0e:8d:54:10:e5:60:2e:60:fd:1a:bb:0b:
a6:90:c4:3f:ee:fa:06:c9:ca:21:a0:40:0e:b3:00:fc:ee:af:
7a:9e:28:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:36 2024 by rpki-client on console-ams.rpki-client.org