Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3L9mhZWRa8ZsdEpwo-G-bIlGyHk.roa
File: 3L9mhZWRa8ZsdEpwo-G-bIlGyHk.roa (raw, json)
Hash identifier: wa3k0QA0Xkxk7dRQKBX6xT3mYK27n4g9lJCkgmbYM8s=
Subject key identifier: DC:BF:66:85:95:91:6B:C6:6C:74:4A:70:A3:E1:BE:6C:89:46:C8:79
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018944291BFAEF1161B4656201C9E24005D9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3L9mhZWRa8ZsdEpwo-G-bIlGyHk.roa
Signing time: Tue 11 Jul 2023 08:54:52 +0000
ROA not before: Tue 11 Jul 2023 08:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203576
IP address blocks: 185.209.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Nov 2023 16:55:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:29:1b:fa:ef:11:61:b4:65:62:01:c9:e2:40:05:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 11 08:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcbf668595916bc66c744a70a3e1be6c8946c879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:ea:f6:ec:f8:29:9d:d1:ae:78:1e:ce:3b:
7a:1e:bf:2a:53:13:29:38:26:d4:bd:a8:9e:30:81:
4f:5d:80:62:c4:22:6b:bf:57:7f:88:8e:c8:d8:49:
21:8b:cd:27:af:62:b9:d5:21:fd:56:27:88:dd:f7:
91:9b:3a:00:12:1f:44:43:89:2d:07:ad:37:ba:a2:
0f:71:b8:5f:9f:b8:33:27:b9:21:15:71:98:8d:0d:
74:c0:ec:e5:73:c9:32:e2:20:67:ba:1d:45:d7:ee:
83:ee:d0:5a:29:69:da:e0:0d:4f:9f:b5:54:6c:f1:
c9:09:7c:37:be:38:56:46:fd:6d:3a:54:18:23:82:
40:7e:0e:ef:26:48:2b:4f:00:25:94:f7:85:22:73:
fe:42:3c:2a:f3:fc:b3:89:2c:8f:a6:13:9c:db:39:
15:33:09:87:81:ac:0d:48:ab:b1:36:57:96:b9:c7:
36:87:52:79:78:f4:ab:f2:6f:88:d4:4e:74:c0:b3:
90:ee:91:8e:bc:a5:1f:54:6f:4b:0f:5d:f3:a1:db:
b7:6b:f9:85:e8:3f:ed:01:c2:9b:c1:fb:34:b8:0a:
d8:10:2e:f4:4a:ba:50:27:0b:84:c4:d9:df:1c:ad:
04:0d:c4:bd:53:0d:f7:95:d6:cf:5a:43:1f:de:69:
cb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BF:66:85:95:91:6B:C6:6C:74:4A:70:A3:E1:BE:6C:89:46:C8:79
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3L9mhZWRa8ZsdEpwo-G-bIlGyHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ba:55:97:3b:f5:73:58:4f:a0:76:e3:b0:fa:ad:22:60:b0:
d3:c4:34:13:8d:4f:71:0e:8f:28:44:52:d7:b1:1f:e5:47:90:
9a:ad:e1:0d:ed:5a:41:5e:88:48:0c:10:eb:06:34:e6:aa:13:
82:3d:33:83:2e:fd:8c:3d:f0:a2:2c:74:5a:ac:7d:67:fb:c3:
e1:3d:b9:a8:3b:e1:63:58:6d:3d:4d:a7:e0:4d:63:db:6b:13:
95:fb:23:fe:8f:b3:25:38:64:19:32:9e:00:24:7b:f3:4d:bc:
f8:80:d2:86:fb:d6:b2:28:e2:00:7d:fd:68:d7:bd:90:2b:a6:
a7:96:4e:35:d4:7d:78:ce:83:04:a9:7d:2f:f0:cb:c1:23:83:
ff:83:b4:63:3a:ae:7b:b7:0e:75:91:e8:9c:1a:d5:35:f7:bc:
11:3f:e5:43:1b:3d:3d:02:7d:5c:f3:f5:4d:d6:c1:5b:37:66:
da:cc:aa:26:bb:d9:1c:e3:ac:00:8d:48:83:e8:85:e8:a9:71:
b1:58:fc:70:cb:22:07:7e:66:97:e4:2d:c0:af:54:6f:bc:71:
16:b4:fe:10:3a:fd:06:21:e8:d1:88:b7:43:76:8b:ec:a4:2f:
c0:b3:ed:b6:e4:ff:6b:21:f9:e3:16:44:57:80:4b:31:e9:c8:
57:15:56:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org