Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/FOr7PrWy-tInStO8yJosD5EQjpY.roa
File: FOr7PrWy-tInStO8yJosD5EQjpY.roa (raw, json)
Hash identifier: g9BP3z3NwKHhW/nEw1W5NZorGUlCBXYCDKi4iGgVlPQ=
Subject key identifier: 14:EA:FB:3E:B5:B2:FA:D2:27:4A:D3:BC:C8:9A:2C:0F:91:10:8E:96
Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial: 018D0C3ADD0F70964E6966731A36CB958110
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/FOr7PrWy-tInStO8yJosD5EQjpY.roa
Signing time: Mon 15 Jan 2024 08:26:40 +0000
ROA not before: Mon 15 Jan 2024 08:26:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211908
IP address blocks: 199.74.188.0/24 maxlen: 24
199.74.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 10:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:3a:dd:0f:70:96:4e:69:66:73:1a:36:cb:95:81:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Validity
Not Before: Jan 15 08:26:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14eafb3eb5b2fad2274ad3bcc89a2c0f91108e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e1:79:66:64:5e:eb:b3:08:bc:c4:92:d9:6e:
6c:3b:6c:40:93:f5:d7:8e:01:a1:d5:63:68:8e:a2:
d2:25:3f:5e:0a:e2:b5:47:31:89:d8:f4:3a:fc:4d:
50:11:12:b7:12:51:65:e1:fc:78:da:0c:e6:ef:30:
7e:a6:58:f2:9c:e3:0b:bf:78:12:a2:cf:e7:57:6e:
b5:65:54:40:2a:73:da:55:03:ae:51:10:4c:80:e1:
8c:16:a0:56:2a:8c:c1:27:3d:05:24:c4:39:36:2e:
c1:e1:2c:4d:09:8c:a1:f7:2b:7c:ea:2f:57:42:28:
7f:9e:73:fa:bd:8b:d3:f0:b2:b9:6e:0b:08:53:46:
1e:9c:ec:ba:fe:29:20:a0:5c:1e:ac:89:24:5d:71:
3c:35:d6:3e:0d:02:cf:ca:ab:a0:94:8b:ae:c4:44:
94:fb:05:13:64:07:cc:a0:96:24:bf:02:c6:03:03:
9f:51:0a:7c:39:f6:f2:9b:60:fe:8f:79:71:51:78:
61:dd:4f:3f:e1:d3:80:64:ba:5f:c5:9f:3a:72:79:
17:ea:92:c9:60:8b:94:a0:d8:b1:db:b5:3e:51:f2:
6e:91:4d:76:82:3d:c5:9f:01:9d:53:5a:4d:8b:37:
2b:f1:42:9b:36:a2:7f:08:01:ff:e6:a4:fc:dc:7f:
93:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EA:FB:3E:B5:B2:FA:D2:27:4A:D3:BC:C8:9A:2C:0F:91:10:8E:96
X509v3 Authority Key Identifier:
keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/FOr7PrWy-tInStO8yJosD5EQjpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.74.188.0/24
199.74.190.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f1:0e:f4:92:32:a2:22:a2:b0:7b:ef:74:df:23:6b:af:c3:
d2:3c:08:b7:91:44:cd:95:7e:3f:97:5b:ab:25:ca:9f:91:92:
72:d5:2b:72:cd:f7:4b:bc:df:14:ff:86:fd:b8:9d:0a:94:1b:
81:7b:45:44:b6:65:95:58:9a:9a:fe:d7:53:c3:3e:3d:14:ea:
a5:84:7e:0b:c5:00:01:f5:46:af:83:eb:ae:50:e4:65:6b:f5:
4c:74:0a:7f:e3:33:48:19:6e:9a:e8:ab:4d:50:fc:32:f5:36:
31:c3:4e:a1:3e:34:74:33:de:f2:33:54:0c:7d:55:9f:10:8f:
9b:8c:52:52:08:0d:b8:21:32:d6:b3:57:96:3e:30:12:eb:70:
fc:81:1a:b2:98:3a:1e:9d:9d:12:ff:bf:dd:b5:82:77:16:85:
2e:96:05:88:65:62:91:67:f3:fc:84:ed:df:c2:83:5b:95:22:
e3:ef:ef:b2:8c:78:8f:1b:68:14:72:09:ed:a2:e5:78:da:ed:
1c:ca:22:20:d4:62:51:19:3f:be:94:29:4a:9c:bf:0e:1a:b6:
48:52:a8:5f:e2:40:78:c8:6e:dd:33:33:6b:3f:4f:f6:48:df:
11:46:2c:ea:d7:36:91:5d:24:28:f4:d8:c1:ac:ad:12:20:4f:
7f:c4:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:50 2024 by rpki-client on console-fra.rpki-client.org