Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NvRDw-QRwTNimXq0GnWdFp51VOU.roa
File: NvRDw-QRwTNimXq0GnWdFp51VOU.roa (raw, json)
Hash identifier: eYo0kMEsnXDj/Q7P+dylsZWOE3UetWirsyZF8Ornu7k=
Subject key identifier: 36:F4:43:C3:E4:11:C1:33:62:99:7A:B4:1A:75:9D:16:9E:75:54:E5
Certificate issuer: /CN=e889cbbf69e3a67caa83b54debec2722e5536883
Certificate serial: 0192D4AA335E8DCB19C8E45ACCDEC2A93049
Authority key identifier: E8:89:CB:BF:69:E3:A6:7C:AA:83:B5:4D:EB:EC:27:22:E5:53:68:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NvRDw-QRwTNimXq0GnWdFp51VOU.roa
Signing time: Mon 28 Oct 2024 19:46:16 +0000
ROA not before: Mon 28 Oct 2024 19:46:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201442
IP address blocks: 185.74.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 16:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d4:aa:33:5e:8d:cb:19:c8:e4:5a:cc:de:c2:a9:30:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e889cbbf69e3a67caa83b54debec2722e5536883
Validity
Not Before: Oct 28 19:46:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36f443c3e411c13362997ab41a759d169e7554e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:d8:c2:1f:2e:19:37:3d:c8:18:87:88:fe:
39:4e:e8:ed:57:ac:84:e3:b7:f9:28:8a:ef:6b:16:
c7:d2:c6:d1:ed:9d:aa:98:10:cd:62:3a:fb:ad:6f:
f8:b5:c3:49:53:24:ad:16:0e:7b:08:29:a5:45:16:
96:57:da:50:6e:83:f6:98:dc:b9:ca:66:92:88:97:
4e:33:ab:d9:3e:89:f4:62:6e:c7:e9:e0:ef:13:37:
81:52:f6:3f:ab:90:cb:87:c6:1b:95:45:09:b8:2d:
d8:f1:be:5c:06:2e:04:dd:3c:6a:9f:03:c9:3e:2e:
15:0a:d4:94:c6:af:44:fe:0e:aa:08:a3:bc:3b:a0:
2a:b9:78:25:d5:cd:84:42:5d:21:d1:5a:6c:7d:31:
ec:39:03:24:d5:19:0b:b5:70:0c:4d:3d:5b:ab:45:
c5:51:a3:9c:55:32:46:a8:c8:f7:10:29:c6:06:79:
7b:4b:5f:ab:04:f9:a0:6a:66:84:5a:f6:30:5a:f9:
3d:c2:80:10:b3:44:51:f4:66:df:a0:df:a8:31:4d:
73:7e:a1:e3:09:5f:b7:52:3d:75:9b:57:9d:b7:9a:
7e:c8:dc:7c:38:fc:f5:43:1b:2b:f1:9e:de:88:94:
a1:4e:7b:c2:c8:8f:00:14:69:5d:ce:77:fa:2d:2c:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F4:43:C3:E4:11:C1:33:62:99:7A:B4:1A:75:9D:16:9E:75:54:E5
X509v3 Authority Key Identifier:
keyid:E8:89:CB:BF:69:E3:A6:7C:AA:83:B5:4D:EB:EC:27:22:E5:53:68:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6InLv2njpnyqg7VN6-wnIuVTaIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/NvRDw-QRwTNimXq0GnWdFp51VOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/61959a-e18b-4ab0-8caa-87d1de943552/1/6InLv2njpnyqg7VN6-wnIuVTaIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.167.0/24
Signature Algorithm: sha256WithRSAEncryption
87:aa:69:5e:48:12:09:65:3a:a7:8c:b6:b4:c4:7b:a1:e5:7f:
7e:ae:92:f3:87:a5:ce:b1:3c:98:1d:7c:41:97:06:f4:c7:99:
2e:02:3b:77:1f:40:ec:8b:42:ae:16:ca:62:27:53:bc:df:3b:
ca:72:07:e5:85:b4:ae:df:9f:31:3b:03:c0:26:a7:76:d0:a5:
8e:8a:e5:5b:38:d8:9c:e1:eb:96:22:6b:73:81:d9:e1:85:11:
b4:c1:49:9e:d1:59:e4:bb:cf:11:06:8b:d2:2b:62:27:4d:03:
c8:fb:f3:17:84:68:af:f8:d4:3b:18:7b:32:6d:51:0b:73:68:
d3:39:cf:39:9c:3c:d0:65:f2:fc:2a:f3:b4:7e:f3:92:3b:72:
31:b3:d3:71:08:c6:20:4e:7c:3b:4a:14:6a:5d:a8:e1:a4:0a:
cf:b8:7c:47:15:6a:6a:36:46:c5:1a:31:cf:53:e4:c6:76:66:
65:57:9d:06:c8:cf:de:cf:75:7b:28:3f:ea:ce:b4:09:cb:b3:
8e:14:31:93:94:13:39:0b:f2:20:57:72:f5:7d:f3:fd:b7:1d:
72:0c:6a:48:7f:ad:68:bf:e1:8b:78:5d:76:6c:b4:77:d2:7f:
3e:bc:39:82:d3:df:95:dc:7a:db:9e:db:4d:12:53:aa:40:d1:
64:3f:7d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:36:20 2025 by rpki-client