Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/R9pV3nfn4EccadIbrXj_kYxQFpA.roa
File: R9pV3nfn4EccadIbrXj_kYxQFpA.roa (raw, json)
Hash identifier: 55eutdQNK4zF5rf/BkRPm1UaEnzl4nF36AjNX9/AFww=
Subject key identifier: 47:DA:55:DE:77:E7:E0:47:1C:69:D2:1B:AD:78:FF:91:8C:50:16:90
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 01857102D9C5DDF61A0294C5CB77636DAD55
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/R9pV3nfn4EccadIbrXj_kYxQFpA.roa
Signing time: Mon 02 Jan 2023 05:44:50 +0000
ROA not before: Mon 02 Jan 2023 05:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.189.34.0/23 maxlen: 24
147.161.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jan 2023 09:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:d9:c5:dd:f6:1a:02:94:c5:cb:77:63:6d:ad:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jan 2 05:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47da55de77e7e0471c69d21bad78ff918c501690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:56:5e:95:4a:ff:3a:fe:a4:d0:08:6d:91:
cd:98:f0:74:9c:a7:38:07:df:0b:73:27:d9:cb:72:
f8:08:60:d0:db:15:21:0b:24:6f:b3:09:7a:08:10:
ce:16:4c:3a:3e:2b:5d:e0:19:fe:74:11:30:d7:5b:
06:f1:2f:6d:ea:e5:6f:f1:91:ac:10:ba:74:e7:6f:
17:48:fa:c3:31:08:08:a6:61:26:0b:d5:af:e5:54:
a6:5b:10:bc:5a:0f:5d:20:73:a5:d6:2f:3c:56:e3:
da:7a:6b:e8:5f:7e:4d:be:ae:a8:50:72:dc:f8:3d:
52:42:da:bb:a4:5e:f1:35:45:ac:48:d7:df:fb:4b:
52:4f:91:44:7a:73:c8:05:6a:7d:52:81:68:47:68:
76:b3:7b:8f:05:94:d7:e3:4c:ef:70:80:76:36:cb:
25:19:10:ca:93:d8:e7:26:e6:6a:ad:7f:07:65:80:
e6:6c:9d:ba:34:e8:90:69:34:24:82:8c:a5:22:96:
0d:00:9e:50:53:7a:da:60:c1:07:b7:f6:5e:80:57:
79:4d:08:82:62:95:bb:e0:12:96:84:66:4d:35:4c:
1b:f1:e7:49:c9:fe:e1:e7:24:b4:9d:2f:f4:27:1f:
cb:35:fb:60:ab:47:e3:ce:09:4b:5f:02:34:6d:d2:
a7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DA:55:DE:77:E7:E0:47:1C:69:D2:1B:AD:78:FF:91:8C:50:16:90
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/R9pV3nfn4EccadIbrXj_kYxQFpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
185.189.34.0/23
Signature Algorithm: sha256WithRSAEncryption
26:bb:f9:8b:1f:47:52:a0:1b:c9:1e:32:e4:be:d6:cd:4f:7d:
c4:63:2e:da:fb:eb:95:db:1f:9c:42:d4:da:ee:2a:c1:8b:75:
8e:1f:88:97:5a:5e:f0:3d:48:7f:59:ea:03:ce:b0:c1:02:cd:
fc:38:6f:59:a7:7e:4b:a9:de:ea:e9:8a:3b:a9:b1:3a:1a:8b:
37:64:39:8f:15:77:39:4c:8b:b8:68:b4:d8:37:70:53:5e:36:
9b:b9:34:91:19:63:a8:51:b9:42:1a:f6:1c:00:7f:2c:ac:73:
6b:52:e4:dc:ac:b1:b7:13:00:d3:0c:34:1b:f1:e2:b4:1c:74:
56:bf:40:58:fa:32:41:91:82:29:67:de:e0:c7:13:f7:bb:8e:
20:ab:50:35:30:03:87:8b:1e:71:91:05:89:73:80:3c:f2:cc:
74:dc:4a:e9:14:34:8e:96:df:c7:29:11:6b:18:ef:47:78:23:
c6:9d:b9:06:bb:bd:7e:83:06:bd:85:9f:88:b5:ab:29:e0:c1:
ca:f1:1f:ea:7b:80:06:19:f3:c0:58:c2:bf:0c:31:2f:86:8f:
2c:37:e3:0c:06:cc:0b:26:8d:b9:5d:83:cd:46:86:42:83:2e:
04:68:7b:4a:06:4c:85:c3:82:83:5b:04:b2:bc:d7:86:44:ce:
29:0a:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:14 2024 by rpki-client on console-ams.rpki-client.org