Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/zG9LYn5Q-mnSXVsTEMDc04pM8BI.roa
File: zG9LYn5Q-mnSXVsTEMDc04pM8BI.roa (raw, json)
Hash identifier: ckrIe+1wCiJuQhqmcPwL+RtOLyBJoY4B09wMl/NN/Ts=
Subject key identifier: CC:6F:4B:62:7E:50:FA:69:D2:5D:5B:13:10:C0:DC:D3:8A:4C:F0:12
Certificate issuer: /CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Certificate serial: 0185737AA66013A33ED8C8021E10021F51E8
Authority key identifier: 9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/zG9LYn5Q-mnSXVsTEMDc04pM8BI.roa
Signing time: Mon 02 Jan 2023 17:14:55 +0000
ROA not before: Mon 02 Jan 2023 17:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48847
IP address blocks: 185.176.210.0/24 maxlen: 24
185.176.209.0/24 maxlen: 24
185.176.208.0/22 maxlen: 22
185.176.208.0/24 maxlen: 24
185.176.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:a6:60:13:a3:3e:d8:c8:02:1e:10:02:1f:51:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d69b6b2a0a72818d1fa9a46ef2ad7812b95bcc0
Validity
Not Before: Jan 2 17:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc6f4b627e50fa69d25d5b1310c0dcd38a4cf012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:b9:80:ec:33:54:f3:32:7f:b9:de:a1:33:
d5:a3:ff:e9:54:41:10:2e:83:ff:09:02:69:e7:79:
c8:ca:9f:6b:d9:e4:eb:27:82:2b:1b:3d:78:4f:01:
90:b5:e7:ab:3b:55:ae:0c:06:c5:cb:e6:1e:a9:e6:
dd:5b:ed:93:57:c7:0d:0c:c9:3b:c1:da:e0:36:b9:
5a:d2:68:be:92:73:a2:a3:5f:b1:84:e6:71:80:8b:
7e:ee:36:bb:d9:54:dc:fe:f9:dc:ed:ff:18:36:c6:
f1:3e:4a:55:86:b2:52:75:ce:29:84:56:3a:58:7a:
da:66:45:ff:2a:b7:db:2c:c7:c3:18:db:08:eb:51:
6e:3a:9a:12:68:f7:05:4d:98:fa:6f:e2:0c:ef:8c:
fe:f3:e4:7a:7a:d1:b8:9c:f3:67:b2:ed:ee:ea:f9:
c5:6f:a0:73:04:1d:75:ad:50:f4:55:0c:18:f5:0c:
ff:d9:90:ad:3d:15:3f:9f:32:78:30:b0:f1:4c:8f:
d2:4b:ca:c8:09:29:ff:05:5c:af:16:4a:c2:84:0e:
24:25:53:57:82:5d:00:cc:2d:1e:21:d8:99:03:1c:
da:c0:46:44:16:f6:13:66:28:c6:3a:eb:41:e1:f7:
d8:f0:42:53:8f:90:90:51:98:af:66:7b:de:a8:24:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:6F:4B:62:7E:50:FA:69:D2:5D:5B:13:10:C0:DC:D3:8A:4C:F0:12
X509v3 Authority Key Identifier:
keyid:9D:69:B6:B2:A0:A7:28:18:D1:FA:9A:46:EF:2A:D7:81:2B:95:BC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWm2sqCnKBjR-ppG7yrXgSuVvMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/zG9LYn5Q-mnSXVsTEMDc04pM8BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/633af2-5b4e-4a4c-b139-39607821a09a/1/nWm2sqCnKBjR-ppG7yrXgSuVvMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.208.0/22
Signature Algorithm: sha256WithRSAEncryption
22:cc:30:ef:08:49:59:08:d3:dc:d8:45:e6:e1:c0:21:17:a6:
fd:c2:7e:53:01:6b:22:8a:0a:3c:e8:0e:00:45:40:81:3d:9a:
d2:a0:ab:3b:57:f2:39:de:ab:92:d0:8a:88:33:2c:23:49:10:
e0:12:5e:23:21:48:73:30:75:bc:4e:ca:5f:97:15:3e:2f:a6:
8e:b5:4d:20:b2:7d:73:56:50:e7:06:c0:cd:b0:aa:d3:96:93:
21:51:92:c1:ea:74:ad:03:db:36:bd:21:da:91:e8:68:4d:f0:
9e:09:08:5a:01:15:6a:76:80:5e:2f:6b:2f:fa:06:8c:97:7e:
35:41:f7:cd:5d:25:b5:df:74:65:4e:11:56:d8:9d:69:bf:e5:
c1:cf:25:10:3f:64:5c:81:9f:3f:27:2e:c5:cf:07:7a:13:64:
c4:d1:1d:c0:c8:d4:8a:28:dc:89:5d:22:95:68:21:b9:bb:21:
17:1b:e8:bc:3e:79:9c:4d:21:d5:40:95:c7:2e:ee:75:58:a2:
6a:af:9c:bc:6d:55:bc:ad:2b:c2:fc:2f:12:59:46:fe:a0:68:
8c:a1:69:af:ec:8d:98:76:9c:b4:db:bf:cf:bf:03:ec:bc:2f:
2d:da:c1:2e:1f:0e:3a:ad:48:f3:64:f2:c1:cb:19:34:41:9d:
88:f2:1e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:30 2024 by rpki-client on console-ams.rpki-client.org