Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/r0T5HEeb8_VREfju--D3BQhp70E.roa
File: r0T5HEeb8_VREfju--D3BQhp70E.roa (raw, json)
Hash identifier: OySOEGRtt7WJ/3GUWLQvrqdlmvDSL1gwtdOnvfBrNOg=
Subject key identifier: AF:44:F9:1C:47:9B:F3:F5:51:11:F8:EE:FB:E0:F7:05:08:69:EF:41
Certificate issuer: /CN=0babfb67a0975384efb8b7b7ca807f714f75f84a
Certificate serial: 018CC6B7859E377DBE7DAF213D73FEF997D3
Authority key identifier: 0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/r0T5HEeb8_VREfju--D3BQhp70E.roa
Signing time: Mon 01 Jan 2024 20:29:25 +0000
ROA not before: Mon 01 Jan 2024 20:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57575
IP address blocks: 185.153.54.0/24 maxlen: 24
2a13:9a40::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 05 Apr 2024 09:46:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:85:9e:37:7d:be:7d:af:21:3d:73:fe:f9:97:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0babfb67a0975384efb8b7b7ca807f714f75f84a
Validity
Not Before: Jan 1 20:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af44f91c479bf3f55111f8eefbe0f7050869ef41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:60:23:99:92:1f:02:23:a6:b9:b9:cc:72:
2d:f5:e4:07:a7:6a:17:ca:a5:8d:49:bf:b5:3d:09:
7b:78:01:f7:65:e0:a7:be:b4:4b:7f:8c:45:af:78:
07:0f:7e:cd:52:33:0f:dc:32:3c:6b:f7:96:95:e9:
dd:d4:8d:5c:42:6d:8c:0d:fe:59:5e:b2:e2:d0:33:
dc:47:00:7a:cf:d8:cf:f8:4d:5a:19:7e:19:69:f0:
c4:64:c2:79:9b:09:7b:dd:85:d3:c6:7f:73:a7:9d:
01:9d:02:38:cc:1d:08:90:60:4f:a4:79:d1:52:4f:
52:86:cd:e5:84:1d:57:23:65:86:a1:10:51:0e:2a:
68:bb:82:c5:6a:3f:72:c1:b8:62:43:be:8c:56:f3:
e9:a4:7b:e9:fc:30:73:8a:b5:00:ee:10:c5:63:19:
d3:6c:a2:27:f8:42:1b:07:d9:c7:1b:26:a4:97:dc:
de:60:d0:04:3d:6a:3f:2d:9e:ce:a6:23:03:6a:c9:
3f:0b:72:8a:6d:a3:3f:38:2d:70:34:74:98:15:3c:
72:8d:88:ab:90:a5:2f:47:a4:7c:17:bf:1a:45:5b:
33:c9:ac:b7:c4:12:fa:b4:15:5f:e1:fe:6b:5c:bd:
7f:12:59:8a:42:6c:55:9b:a9:2e:42:f3:3e:37:f9:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:44:F9:1C:47:9B:F3:F5:51:11:F8:EE:FB:E0:F7:05:08:69:EF:41
X509v3 Authority Key Identifier:
keyid:0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/r0T5HEeb8_VREfju--D3BQhp70E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.54.0/24
IPv6:
2a13:9a40::/32
Signature Algorithm: sha256WithRSAEncryption
4a:30:e9:89:9b:ac:f3:5a:d0:6b:c4:0f:13:4a:96:38:25:49:
b9:42:d1:4e:09:d5:c1:18:11:dc:99:3b:c1:b1:e4:bf:64:81:
85:e8:ad:71:1a:a2:3e:10:ce:d8:3a:9e:74:b5:bb:49:42:a7:
7a:47:b8:9a:c6:25:47:30:2a:80:81:fa:25:a3:d5:9b:d8:9b:
46:a7:15:a8:f4:c0:ef:37:e1:36:91:01:a7:c3:41:03:ea:06:
2c:5c:0e:c9:f6:99:a2:f8:dd:44:f1:b0:60:66:b8:ab:68:0f:
42:67:ec:0d:0e:d5:0a:a3:a8:6e:0b:49:b7:ad:a6:0e:17:e3:
25:9d:c7:cf:d7:44:37:72:98:c6:71:c1:0d:66:52:83:f8:43:
0c:19:08:9c:6c:ee:ab:cb:f6:de:e5:4e:09:90:2d:35:90:99:
82:9c:7f:20:82:a8:95:d5:eb:ac:13:94:43:2c:24:af:c4:78:
3c:a3:af:96:1c:3a:6f:1d:db:8d:e2:bc:d3:a3:27:64:ef:5c:
08:57:01:fb:15:aa:21:02:41:af:aa:b7:cf:f4:1f:c7:90:8b:
2c:0f:22:70:d5:16:4e:46:2c:ad:80:03:37:f6:35:7f:e1:08:
e0:93:30:ad:6f:ca:a5:61:97:1f:b0:9a:d7:98:6a:e8:14:d7:
5d:cf:30:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:58 2024 by rpki-client on console-fra.rpki-client.org