Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/hh6Pj_59G1mfA2iHShBdkaxaOC0.roa
File: hh6Pj_59G1mfA2iHShBdkaxaOC0.roa (raw, json)
Hash identifier: nbAEJ9v8i7jlHY6OAv11z5+b+KHbegFufoX0KKUQBaA=
Subject key identifier: 86:1E:8F:8F:FE:7D:1B:59:9F:03:68:87:4A:10:5D:91:AC:5A:38:2D
Certificate issuer: /CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
Certificate serial: 0185710BFA349352B9AD794EBDB9CDCA653B
Authority key identifier: 76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/hh6Pj_59G1mfA2iHShBdkaxaOC0.roa
Signing time: Mon 02 Jan 2023 05:54:48 +0000
ROA not before: Mon 02 Jan 2023 05:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207227
IP address blocks: 185.74.36.0/22 maxlen: 22
2a05:48c0::/29 maxlen: 29
2a13:1f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:fa:34:93:52:b9:ad:79:4e:bd:b9:cd:ca:65:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762238a33c550cc5df0244f3fc6e3dbd91e4c39e
Validity
Not Before: Jan 2 05:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=861e8f8ffe7d1b599f0368874a105d91ac5a382d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:af:bf:af:57:5b:a3:94:c0:59:c7:ab:0e:2b:
43:49:5f:f5:0b:41:d2:19:b0:4b:cd:11:d7:d1:32:
cf:e5:ca:0e:09:f6:b6:9b:a9:0f:0b:fa:8e:c2:ae:
d7:69:52:19:5c:b0:3f:3c:d1:eb:0a:ec:65:36:c9:
56:f1:e5:a7:95:06:f0:6d:29:05:aa:f7:07:82:16:
21:7e:f4:45:ed:d4:ec:fa:15:4a:e1:30:5d:9d:d6:
94:cb:68:4a:d2:8b:43:1e:3b:95:3e:bd:cc:4a:6c:
cf:27:1e:ce:48:48:c6:46:38:08:2d:41:67:e3:73:
8b:e2:74:e6:e1:25:7c:26:58:cd:ca:3c:54:db:76:
83:9a:83:03:c6:e7:1f:d4:99:f0:d7:f1:f2:c7:d3:
b5:4d:cc:f9:e2:0b:b7:2d:7c:3b:63:85:43:14:cd:
0b:11:65:e9:64:f8:e0:a5:07:53:4e:9f:e6:a7:3c:
e8:c5:7b:4b:83:60:0d:61:5b:a3:1c:e3:8f:8a:e0:
6d:82:de:b7:04:22:46:ea:5c:91:d1:f5:a9:bc:81:
04:78:63:80:4a:53:2e:da:e9:f1:11:a9:01:a0:42:
76:99:b2:92:3b:3b:28:62:2a:0e:25:c4:55:18:e8:
3c:b7:e2:a6:39:ae:4c:94:67:f6:02:c5:2c:81:bd:
db:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1E:8F:8F:FE:7D:1B:59:9F:03:68:87:4A:10:5D:91:AC:5A:38:2D
X509v3 Authority Key Identifier:
keyid:76:22:38:A3:3C:55:0C:C5:DF:02:44:F3:FC:6E:3D:BD:91:E4:C3:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI4ozxVDMXfAkTz_G49vZHkw54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/hh6Pj_59G1mfA2iHShBdkaxaOC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5e3249-bebf-4070-9fcd-1b1fc79d0551/1/diI4ozxVDMXfAkTz_G49vZHkw54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.36.0/22
IPv6:
2a05:48c0::/29
2a13:1f40::/29
Signature Algorithm: sha256WithRSAEncryption
46:21:0b:3f:df:75:8e:f3:a0:79:ca:9b:b0:dd:42:3b:1b:5d:
cf:9c:43:46:46:87:a4:d9:4b:66:d0:09:35:96:ad:d3:3d:d2:
d5:ed:e0:95:73:68:c8:57:ec:28:0b:a1:08:71:1c:3b:1d:3f:
ef:5b:3e:db:11:d7:95:f9:69:89:e0:a3:25:19:f3:e0:8e:18:
ee:f6:3b:39:fc:f7:77:4b:2f:42:dc:d3:5b:b8:70:f6:cc:e0:
7c:a2:4b:6b:1e:7d:cf:df:10:1a:51:3f:3a:7d:30:8c:5a:9e:
23:eb:8f:2f:f3:a5:85:a4:62:71:ff:37:b2:cb:31:d2:2a:d6:
98:e0:4e:92:86:28:90:e3:c3:20:7f:f1:9e:c5:59:10:3f:de:
cd:a3:8e:f7:59:a6:f7:9d:f2:72:d2:26:a7:10:16:de:de:ec:
e8:48:98:42:41:06:28:60:65:0a:69:4f:31:0c:79:f7:75:7a:
f0:e7:e7:93:03:b8:cf:55:03:83:e1:6f:56:5f:99:49:44:f1:
38:1a:3e:fd:ed:e7:8a:e8:a7:49:54:fc:82:92:7c:e3:4c:6a:
b3:c5:30:27:25:68:18:e9:c9:2b:eb:a4:12:b5:93:36:ba:73:
90:92:e3:c8:98:ed:74:1a:f7:02:50:cb:d2:21:34:79:f1:d5:
df:a1:00:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:36 2024 by rpki-client on console-ams.rpki-client.org