Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/6iz4U9i6CfHEq9t_rXANaZ_tUKk.roa
File: 6iz4U9i6CfHEq9t_rXANaZ_tUKk.roa (raw, json)
Hash identifier: qRF0D5QwusaW0Xzs8qrLK+HV68Pp5Rj9JnDzrPPDgqc=
Subject key identifier: EA:2C:F8:53:D8:BA:09:F1:C4:AB:DB:7F:AD:70:0D:69:9F:ED:50:A9
Certificate issuer: /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Certificate serial: 01856DC1A5797E27683241AA15D55B396B74
Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/6iz4U9i6CfHEq9t_rXANaZ_tUKk.roa
Signing time: Sun 01 Jan 2023 14:34:45 +0000
ROA not before: Sun 01 Jan 2023 14:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60015
IP address blocks: 185.54.64.0/24 maxlen: 24
185.54.67.0/24 maxlen: 24
185.54.66.0/24 maxlen: 24
185.54.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:a5:79:7e:27:68:32:41:aa:15:d5:5b:39:6b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Validity
Not Before: Jan 1 14:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea2cf853d8ba09f1c4abdb7fad700d699fed50a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:41:a3:b8:96:86:a2:53:48:5a:5f:72:bb:31:
b1:fc:bf:6e:c0:73:c3:25:60:d1:62:ef:4b:26:19:
fa:9d:c1:f4:bb:f1:eb:d1:b3:d8:31:03:35:ac:20:
c1:d4:4f:a9:a8:7f:59:f5:95:ff:ca:d4:c5:c9:a9:
2b:d6:e7:e4:f8:d4:53:74:8e:03:bb:e4:8f:7a:01:
e3:25:a2:14:be:ae:a8:6f:f2:fd:bc:b8:47:d9:07:
cd:73:17:bd:01:0d:5c:e9:82:e7:ba:4e:88:e6:26:
39:b2:81:80:21:82:7e:48:93:e9:a6:72:2c:66:7e:
3c:37:91:a2:57:13:89:14:64:dc:f5:ce:57:e6:22:
c2:fe:62:38:b9:9a:27:0a:8f:5d:f7:8c:2b:c3:34:
27:4d:08:42:e9:ab:f8:f7:2f:29:69:52:a7:79:41:
55:bb:d4:78:78:56:47:50:e5:f4:29:13:2b:a3:a2:
66:cf:54:33:83:d3:1a:d3:b7:86:38:0a:1c:53:e1:
35:48:46:2a:a9:0c:02:dd:c4:36:21:48:5f:e5:3c:
32:b5:48:95:a8:bc:d7:c3:33:2c:a4:b1:58:23:00:
73:51:2c:87:8a:49:73:e3:23:63:26:b1:a3:fd:ac:
48:0e:22:2d:db:75:40:49:6a:a5:29:1b:8b:ee:3c:
71:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2C:F8:53:D8:BA:09:F1:C4:AB:DB:7F:AD:70:0D:69:9F:ED:50:A9
X509v3 Authority Key Identifier:
keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/6iz4U9i6CfHEq9t_rXANaZ_tUKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.64.0/22
Signature Algorithm: sha256WithRSAEncryption
69:56:7d:85:c0:e8:60:ac:4a:8d:bc:e4:95:38:a6:81:2a:ee:
af:e6:14:2e:ad:9a:0a:e9:15:eb:b6:6f:90:5b:4a:29:e5:d1:
85:21:e4:db:1c:5f:11:fa:25:52:fd:3a:75:28:bc:8e:9c:84:
5b:44:8c:cd:f0:6d:f6:81:0f:62:43:64:50:c3:91:71:24:92:
5b:ef:ca:31:cc:86:c6:da:f6:29:24:bf:85:ed:e0:25:af:6c:
af:5d:09:67:ef:96:df:54:73:d6:50:35:e0:06:e0:71:62:56:
b9:cd:1c:a9:8d:6c:a5:da:31:d9:39:81:84:cf:65:fe:37:dc:
64:59:88:04:98:5b:c7:62:45:38:ae:c6:02:f9:05:77:b0:11:
c7:20:2c:0d:41:98:a6:6e:fe:17:d9:62:98:24:39:8a:77:1f:
56:18:f4:d1:d0:37:a7:37:3c:12:14:b7:0d:b7:5c:0c:97:c8:
63:c2:1c:bf:0f:fa:18:e3:4a:1f:e9:4c:0c:1d:6d:53:cc:6b:
8b:d6:8d:6e:11:f4:a2:0a:17:25:54:40:50:71:26:24:ef:c3:
4a:a7:1b:b4:1d:74:cc:dd:62:bd:09:f0:44:4b:38:27:b7:6d:
0c:4e:4a:94:07:9b:e7:ed:dc:bc:f4:fd:72:86:ec:ab:b5:8a:
00:3a:51:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-fra.rpki-client.org