Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hnQ7Si4F2LrXUlrTGM5ZIPK1fgg.roa
File: hnQ7Si4F2LrXUlrTGM5ZIPK1fgg.roa (raw, json)
Hash identifier: gj5A5wrZyHQaOB6cCXykr6XrJipw+EVuTNFgAXxClAg=
Subject key identifier: 86:74:3B:4A:2E:05:D8:BA:D7:52:5A:D3:18:CE:59:20:F2:B5:7E:08
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018CCA2B5D545DB4CBCDB81A967C872BF417
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hnQ7Si4F2LrXUlrTGM5ZIPK1fgg.roa
Signing time: Tue 02 Jan 2024 12:34:48 +0000
ROA not before: Tue 02 Jan 2024 12:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134176
IP address blocks: 85.209.254.0/24 maxlen: 32
185.190.81.0/24 maxlen: 24
185.137.182.0/24 maxlen: 32
79.174.20.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Apr 2024 04:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:5d:54:5d:b4:cb:cd:b8:1a:96:7c:87:2b:f4:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 2 12:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86743b4a2e05d8bad7525ad318ce5920f2b57e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:3d:dc:55:f5:82:82:4e:e0:91:5f:0d:ca:
78:f2:8d:5c:5a:37:58:b0:88:6b:8a:92:d2:1e:ac:
55:ba:8b:26:19:95:a6:10:0e:e1:6f:3a:bb:2c:31:
45:3a:07:f3:4d:db:6d:5e:ba:70:93:92:fc:05:f1:
4e:0a:4f:31:b8:ed:76:8a:13:a0:c2:ad:3e:51:aa:
9b:29:c4:89:69:25:b1:20:b1:cb:ba:d3:e8:00:43:
1c:61:38:92:4c:39:75:14:36:13:3c:29:e3:af:e5:
36:04:4b:1e:b5:f7:bf:00:86:30:85:14:c7:42:e4:
03:93:2b:ed:02:8d:89:2e:b5:30:8a:6f:09:d0:45:
c1:02:2e:e9:03:dd:75:03:f6:30:9e:9b:f5:b1:34:
bb:af:f6:fe:4e:95:81:c2:af:b1:76:2c:48:be:10:
8e:91:e3:21:1b:ec:9b:21:9f:19:56:76:d2:1f:88:
11:26:c7:46:8e:a8:8e:75:dc:e0:f4:59:fa:03:f0:
33:12:63:39:92:91:46:bb:5a:a1:6c:ce:40:a6:3d:
c6:a3:f1:cf:36:15:26:cf:38:56:38:71:82:76:91:
e4:cd:cb:bb:c6:c2:17:4b:40:39:16:c6:e7:93:8e:
b1:a7:51:b1:fd:8e:47:43:30:1f:f0:ca:8c:85:36:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:74:3B:4A:2E:05:D8:BA:D7:52:5A:D3:18:CE:59:20:F2:B5:7E:08
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/hnQ7Si4F2LrXUlrTGM5ZIPK1fgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.20.0/24
85.209.254.0/24
185.137.182.0/24
185.190.81.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:59:05:84:fd:b5:44:42:c9:41:c3:af:1a:8d:df:5c:43:34:
70:b8:c4:b1:1d:eb:8b:ea:db:aa:f1:ae:24:21:51:6d:c5:28:
08:b6:5b:cc:aa:a2:65:1d:1b:6f:18:6c:6d:2b:2c:84:ad:fb:
f6:01:0c:f4:12:17:ea:41:3b:c4:da:15:ae:60:1d:c3:b5:df:
8e:31:b6:b3:59:bf:ed:d7:83:86:62:12:df:6b:9b:d3:89:a7:
5a:fd:ba:e0:8a:89:84:52:82:da:3e:c9:c3:42:3f:72:e6:7c:
1e:4e:36:c0:9f:95:02:56:e3:d1:2e:e9:68:5b:fd:48:e6:ca:
0c:c5:3d:ff:53:65:b1:59:a4:68:ba:70:b8:25:c7:ce:65:6d:
f6:57:28:c4:56:75:5e:28:16:61:82:16:1a:1b:4c:68:66:ee:
e2:b4:60:a0:4a:18:db:2a:3b:f7:a8:73:d7:77:fb:a5:87:bc:
d3:c2:94:74:20:68:4e:24:3b:09:0e:ad:c3:a3:54:71:09:b6:
55:71:06:ec:75:f4:89:53:d3:9d:54:9f:5c:60:5d:57:bb:e7:
1a:e0:59:e3:75:82:ab:c1:49:09:d0:44:1b:8d:87:bf:34:58:
e2:7b:fe:03:27:74:ec:ab:4a:6f:04:94:34:52:0b:d9:46:da:
19:77:12:7d
-----BEGIN CERTIFICATE-----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Generated at Mon Apr 1 06:35:43 2024 by rpki-client on console-ams.rpki-client.org