Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/C9lDe_hBwS3WmALM_pEeGevs8UQ.roa
File: C9lDe_hBwS3WmALM_pEeGevs8UQ.roa (raw, json)
Hash identifier: OFDlRLAct2q/yj3Uey39Hxd5spma7TvxYcVG1D2/RW8=
Subject key identifier: 0B:D9:43:7B:F8:41:C1:2D:D6:98:02:CC:FE:91:1E:19:EB:EC:F1:44
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 01856F5DEC77FF80F3334D49E6011A8BA2C8
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/C9lDe_hBwS3WmALM_pEeGevs8UQ.roa
Signing time: Sun 01 Jan 2023 22:05:04 +0000
ROA not before: Sun 01 Jan 2023 22:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.169.235.0/24 maxlen: 24
2a04:92c7:16::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Feb 2023 12:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:ec:77:ff:80:f3:33:4d:49:e6:01:1a:8b:a2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 22:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bd9437bf841c12dd69802ccfe911e19ebecf144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ef:40:2b:37:e5:2c:c8:89:7c:de:59:e2:61:
7c:e5:e1:12:c6:36:04:98:e1:58:2e:bb:2d:f4:98:
e0:9c:19:84:0d:42:0a:78:b7:c3:d4:f9:43:32:53:
77:b1:c8:79:08:ca:3b:9b:ed:29:6d:88:6b:4c:0b:
af:61:7b:f3:19:d3:70:e6:98:d8:ff:f3:67:c7:1d:
76:7e:5b:e2:2e:5b:6f:8f:15:89:5f:52:88:79:19:
7c:f1:fb:33:b4:7d:88:68:9c:1f:2e:3d:42:a7:94:
39:be:b0:ae:ac:bd:84:96:d1:75:a5:f9:da:b6:6b:
bc:96:b8:bc:09:63:98:54:0d:e3:6b:41:36:91:77:
39:71:e4:c1:4e:d6:ee:dd:fc:b5:3b:63:79:ba:51:
0c:cd:05:87:8a:55:df:38:11:ab:13:cc:4b:91:1a:
1e:0c:9f:2a:64:8c:3a:92:cf:5b:0b:8e:68:c8:da:
28:a9:b7:18:ea:b8:1c:aa:a7:86:bd:55:3a:2d:e7:
a5:8f:83:6e:a3:28:86:36:54:db:46:58:41:f2:26:
5b:f4:5c:56:c3:e3:f8:78:1f:de:be:3a:c3:9d:1c:
1d:da:be:df:9d:0a:c0:6e:45:62:a2:94:ed:9e:8b:
a2:6d:b8:21:eb:9f:75:ba:19:f5:04:a3:45:fd:55:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D9:43:7B:F8:41:C1:2D:D6:98:02:CC:FE:91:1E:19:EB:EC:F1:44
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/C9lDe_hBwS3WmALM_pEeGevs8UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.235.0/24
IPv6:
2a04:92c7:16::/48
Signature Algorithm: sha256WithRSAEncryption
5f:1a:0d:d9:69:3a:78:1d:9d:c5:dc:d2:de:29:71:13:4d:8c:
e0:4a:67:8f:77:68:b1:bb:62:79:0d:90:b5:b2:2f:c4:6e:fe:
83:6b:42:fd:26:7c:7f:bc:d3:88:05:d2:6d:61:f0:b0:e5:ca:
d5:67:67:c1:d8:04:c3:00:78:d7:0a:7d:e5:02:28:64:d7:13:
c8:e3:5e:03:1b:09:93:3c:b4:49:95:fd:d6:ad:44:e9:95:b1:
ff:cb:e1:29:3a:1a:50:58:e8:2b:b1:5e:2b:40:ef:16:a3:4c:
b2:89:d8:a0:4e:d7:25:9c:be:9e:c5:6e:34:a3:9d:3b:0b:41:
ba:97:c7:c0:c0:48:8b:70:53:f2:36:4b:47:ae:89:1d:4a:79:
75:0f:90:42:cb:ec:f2:1b:6b:a7:03:7b:d2:a2:62:a0:c2:0c:
e2:84:2a:47:29:77:ba:4e:45:3e:88:3e:ff:c9:56:df:e3:36:
a1:3d:1f:a4:48:42:06:e6:30:48:6e:9e:ff:97:0f:d3:de:9b:
2d:f0:3c:7e:26:74:2a:51:9c:e2:8d:45:a8:46:dc:61:f5:0d:
c9:2e:78:df:9f:c3:24:b3:5d:ef:31:78:08:75:ab:8f:14:00:
46:29:3b:e5:1a:8c:58:37:ee:5b:88:7a:b9:d2:4a:bc:11:d7:
87:ed:af:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:52 2024 by rpki-client on console-ams.rpki-client.org