Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tBId4Cx8PLHp84sPw_YW1TxqyeY.roa
File: tBId4Cx8PLHp84sPw_YW1TxqyeY.roa (raw, json)
Hash identifier: c121qGpbswxqVmBqf94Tkozr6tU5f+8St0OiF0H8yOY=
Subject key identifier: B4:12:1D:E0:2C:7C:3C:B1:E9:F3:8B:0F:C3:F6:16:D5:3C:6A:C9:E6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018E3827A1FF2F157FDB38C795602F1DA310
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tBId4Cx8PLHp84sPw_YW1TxqyeY.roa
Signing time: Wed 13 Mar 2024 14:11:45 +0000
ROA not before: Wed 13 Mar 2024 14:11:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200908
IP address blocks: 185.254.156.0/24 maxlen: 24
185.254.157.0/24 maxlen: 24
185.254.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 13:28:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:27:a1:ff:2f:15:7f:db:38:c7:95:60:2f:1d:a3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 13 14:11:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4121de02c7c3cb1e9f38b0fc3f616d53c6ac9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:32:7a:3e:2c:36:69:04:1e:00:22:a2:69:ac:
5c:f3:60:e7:45:82:46:ca:8d:0f:b1:89:cc:be:ae:
04:d1:e2:f2:d8:61:f4:0b:95:5e:e7:6d:bf:f7:51:
3e:d5:17:38:50:4f:f7:4f:f2:b3:b7:3e:4a:bc:97:
7b:ca:18:6b:e7:ae:24:b0:00:c1:1e:0f:2f:82:ca:
dc:82:e0:95:28:71:8d:4f:6e:eb:9c:90:32:9f:d5:
cb:0c:c5:38:7c:f8:f5:d8:85:4b:b4:98:0f:f8:28:
38:23:42:bc:f4:fc:18:2e:b3:ab:72:77:37:93:ff:
9a:75:33:df:5d:ee:92:d7:8f:3d:39:b3:f1:d6:18:
2e:76:e5:b6:d7:c9:96:61:4f:80:aa:c6:12:7c:32:
86:55:0b:9d:ac:ae:87:13:28:5d:ae:2c:1f:d1:43:
91:5a:5a:b3:92:db:7a:c1:e3:35:66:6d:29:d4:c1:
d9:18:c9:e6:7b:45:28:a5:1f:88:bb:f5:18:0b:68:
91:2c:b5:e1:55:e6:1a:9a:d8:d2:4d:74:09:de:a1:
3f:39:6d:7a:0a:09:21:31:60:3a:fd:98:6f:d7:5d:
b0:fb:3e:89:c0:16:f9:4c:67:14:56:dc:e2:99:99:
46:b5:3b:e7:1d:86:73:4d:cf:08:f1:d6:ca:61:c9:
61:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:12:1D:E0:2C:7C:3C:B1:E9:F3:8B:0F:C3:F6:16:D5:3C:6A:C9:E6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tBId4Cx8PLHp84sPw_YW1TxqyeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.156.0-185.254.158.255
Signature Algorithm: sha256WithRSAEncryption
85:1b:b6:b0:70:86:fb:06:47:4c:0f:8e:ad:92:71:9e:1f:65:
c9:d4:77:7b:c0:86:aa:4e:70:b7:c1:61:14:fa:21:1d:91:72:
bb:51:8a:70:a0:9b:50:6c:9c:cf:cf:39:4c:3c:ac:02:be:78:
06:f7:a5:c7:4b:01:4a:54:00:55:3d:2e:22:d8:b1:30:17:91:
75:46:79:f8:1d:26:1d:9e:9a:fc:52:41:a2:e6:66:16:99:c6:
b3:bf:7b:5f:34:55:29:5f:f7:b2:84:38:bb:40:07:6b:bb:06:
1a:2c:25:24:bd:68:c7:fb:d5:f2:ac:95:87:9b:42:9d:cc:e2:
b4:29:ec:4c:d9:5a:5a:0a:ad:31:b0:56:71:08:10:93:51:c3:
a1:96:4c:4d:94:a4:a1:80:bb:56:54:6d:5e:e6:ae:8b:e0:91:
c1:c6:29:8e:13:4e:89:f6:66:c3:b8:f0:c9:d5:a0:e5:5f:66:
9d:df:d7:e5:c5:1a:50:78:15:9c:e0:16:f3:ae:97:0c:fa:71:
3e:38:4e:45:b4:2d:5c:50:da:ee:12:e5:eb:05:ae:4a:0a:17:
a0:ef:86:11:9d:b8:cf:33:cb:44:71:ad:db:c7:99:a8:68:0f:
4c:67:31:fb:dd:49:ff:94:10:60:30:66:e1:b9:ae:0c:67:f9:
94:98:ad:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org