Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/9RiabB3V7sV5ECVl5BQpfx0wZ74.roa
File: 9RiabB3V7sV5ECVl5BQpfx0wZ74.roa (raw, json)
Hash identifier: rjnQOiRKsBaEDK/i21Q9sVlAX30pedOE9p9UQgkVECU=
Subject key identifier: F5:18:9A:6C:1D:D5:EE:C5:79:10:25:65:E4:14:29:7F:1D:30:67:BE
Certificate issuer: /CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a
Certificate serial: 01856E268A71F229A08E8D8D0E4F0F4385DC
Authority key identifier: 6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/9RiabB3V7sV5ECVl5BQpfx0wZ74.roa
Signing time: Sun 01 Jan 2023 16:24:57 +0000
ROA not before: Sun 01 Jan 2023 16:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59834
IP address blocks: 185.69.149.0/24 maxlen: 24
185.69.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:8a:71:f2:29:a0:8e:8d:8d:0e:4f:0f:43:85:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a736cbd0011da31d29b061e5ff4d63842da2a4a
Validity
Not Before: Jan 1 16:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5189a6c1dd5eec579102565e414297f1d3067be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:f2:04:88:6e:29:ae:bb:ff:26:d0:3d:fc:
d2:14:70:c9:57:92:4a:cc:7f:2b:1d:43:f5:32:1a:
d9:c3:72:08:9d:7b:be:57:f9:7c:f4:d0:f1:92:41:
6e:0b:44:b9:87:97:a0:74:00:29:12:7a:91:e2:1a:
33:de:a7:0b:1a:5a:b3:11:5d:bf:3e:26:4a:be:a5:
78:7d:0e:e7:91:e8:c3:5d:27:d0:5f:40:8c:ca:c2:
5c:22:48:34:34:8c:c4:8b:0d:57:02:d0:ba:b0:77:
f9:80:c1:86:fe:78:c0:f0:2d:cd:57:56:bf:39:40:
b5:45:8b:90:2c:51:52:6d:91:cb:3e:61:18:68:ad:
d6:8c:64:16:95:61:57:a8:37:d3:d2:a9:52:d5:c5:
26:5f:a2:bf:62:ea:c5:52:7e:8f:19:66:82:9b:97:
f0:30:24:30:81:74:61:aa:e6:bd:1f:6b:be:53:4a:
99:90:3a:a9:3b:72:a6:c9:98:13:a8:6d:87:04:2e:
b6:78:2a:34:cc:ad:88:30:2e:4f:cc:cb:9c:d6:c0:
97:f0:ad:15:b5:fa:5e:3c:5e:4a:27:8d:7e:59:ff:
34:61:08:8e:9c:0a:1a:f2:89:32:e2:c6:73:c7:30:
cd:80:3a:6d:30:8d:ee:20:29:cd:dd:60:2a:bd:40:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:18:9A:6C:1D:D5:EE:C5:79:10:25:65:E4:14:29:7F:1D:30:67:BE
X509v3 Authority Key Identifier:
keyid:6A:73:6C:BD:00:11:DA:31:D2:9B:06:1E:5F:F4:D6:38:42:DA:2A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anNsvQAR2jHSmwYeX_TWOELaKko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/9RiabB3V7sV5ECVl5BQpfx0wZ74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7e4332-5358-43a9-b5bf-4ea12513cc6f/1/anNsvQAR2jHSmwYeX_TWOELaKko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.148.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:bb:64:31:bc:00:70:73:fa:79:63:a1:8d:d0:51:c2:e8:6a:
85:31:3d:e0:b7:81:32:13:33:9a:95:1d:87:92:03:c8:6f:a9:
c2:2e:3a:e8:00:1a:20:e3:c4:c1:a2:eb:16:08:68:bd:61:b8:
9e:ce:a8:cb:0e:03:ab:60:64:41:4f:fb:a7:b8:3a:d0:2b:af:
54:c6:2e:10:d0:f4:8b:67:db:f2:17:ef:92:6b:f1:0a:1c:a2:
d9:c5:b8:cc:b1:24:8c:3d:2a:8e:2e:dd:34:85:03:20:8a:a2:
0e:e2:af:be:03:51:0b:2c:94:5c:6a:a3:50:30:43:97:39:eb:
85:5a:23:3d:fc:cd:e3:0e:90:1c:90:b3:31:7c:48:cb:6c:79:
57:87:f1:13:78:e0:7c:6a:c2:05:0a:ba:b3:10:93:9a:f1:52:
8b:4e:bf:51:f1:b0:bf:0c:74:bd:cd:b3:6e:50:c7:31:3e:1d:
eb:32:c0:12:25:5b:3d:d8:0d:e6:96:41:c1:ee:c3:86:d5:e7:
36:48:c0:5d:ca:9f:e4:54:07:b8:65:3a:2b:7c:b2:4b:5b:e1:
b2:a0:fd:91:c1:f5:2c:7c:01:d6:9e:64:c3:e5:dc:94:65:8c:
c9:2c:f2:4f:ec:d4:02:62:10:1e:47:4e:9d:f5:34:bc:38:a4:
9c:a7:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:00 2024 by rpki-client on console-fra.rpki-client.org