Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/54VziC5rOI1TrpQxXLo7-UZOYEc.roa
File: 54VziC5rOI1TrpQxXLo7-UZOYEc.roa (raw, json)
Hash identifier: 6JkOD+GHBlxb3WKiCe8Ffe37UcoR3/X620qR/oZIRlE=
Subject key identifier: E7:85:73:88:2E:6B:38:8D:53:AE:94:31:5C:BA:3B:F9:46:4E:60:47
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 018EBD89DC806F06470AF77EC6710770EFAC
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/54VziC5rOI1TrpQxXLo7-UZOYEc.roa
Signing time: Mon 08 Apr 2024 11:48:32 +0000
ROA not before: Mon 08 Apr 2024 11:48:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201457
IP address blocks: 185.74.204.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 11:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:89:dc:80:6f:06:47:0a:f7:7e:c6:71:07:70:ef:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Apr 8 11:48:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e78573882e6b388d53ae94315cba3bf9464e6047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ea:a4:f8:79:91:7d:23:60:70:48:5c:e7:68:
1d:ac:18:f6:79:11:1e:7b:d5:61:aa:df:1a:51:84:
b7:60:a7:fb:cf:91:2c:2f:e9:08:58:19:8c:aa:c0:
80:c6:9b:6c:aa:db:c5:8a:42:38:c1:07:51:32:a1:
e2:72:34:b9:28:5f:c4:49:98:22:9f:69:41:89:b3:
86:c4:8d:50:7f:eb:77:a3:7e:ef:67:c6:23:41:62:
33:1d:0c:7c:3f:b3:51:db:1f:60:7b:d5:88:26:d3:
82:46:5f:29:e7:be:5c:17:35:a0:6c:73:b8:4a:d8:
47:2e:31:f5:15:17:da:68:f8:f5:9e:94:d7:bd:c1:
39:e1:8e:f3:32:21:50:a8:33:5e:59:8e:da:ed:0d:
f9:fd:b6:e4:25:af:7e:0e:9e:07:61:2c:2e:80:eb:
ec:6e:32:27:36:6e:44:47:a5:b8:42:6f:60:61:9d:
84:57:51:c2:5e:d4:c1:d7:2b:b0:2b:ab:5b:8b:9d:
e9:1e:d8:aa:c2:15:53:89:65:05:aa:99:6f:18:67:
a3:8b:0f:89:bc:32:ba:1a:bd:ac:eb:d1:52:3e:ea:
b7:20:5c:af:bd:b7:0a:8a:e4:69:9a:81:d4:c9:8f:
d2:03:8f:85:60:56:78:47:44:55:ca:f6:e1:70:92:
32:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:85:73:88:2E:6B:38:8D:53:AE:94:31:5C:BA:3B:F9:46:4E:60:47
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/54VziC5rOI1TrpQxXLo7-UZOYEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.204.0/22
Signature Algorithm: sha256WithRSAEncryption
35:05:b4:6d:e7:ef:b0:84:41:c4:94:5d:f0:7e:dc:f0:54:dc:
b4:1a:2c:e6:e1:b0:02:6b:6d:90:fd:8c:a5:c3:58:fc:9c:51:
1a:6e:17:d6:d1:9e:57:ed:86:b3:39:1f:cc:7c:5e:d0:02:e6:
cb:a4:cb:7f:1a:3f:67:4e:63:87:45:40:d9:b6:0e:6d:98:8e:
3e:45:ff:39:44:a5:ce:f6:39:41:73:1d:e9:57:7e:23:a3:36:
05:da:35:eb:5a:53:55:1c:25:c1:66:c5:15:10:3a:18:b4:f8:
06:79:44:98:01:43:64:14:b8:79:4f:98:79:e1:61:f3:a0:84:
de:af:88:7a:c4:36:7f:75:9e:4a:b2:e5:ae:15:eb:86:26:32:
3b:23:9e:9b:f6:28:80:65:3b:0e:36:58:65:86:04:f3:ed:18:
e6:b9:44:47:05:92:3d:a4:12:ea:38:c7:ad:d6:9b:18:39:d4:
5a:e1:56:6e:d7:81:d1:5a:87:02:ec:f8:fb:6d:d5:eb:90:f1:
40:fd:d3:15:36:40:00:49:e6:9a:82:2d:ef:26:28:8c:60:d7:
5b:d1:50:5d:c9:92:5b:42:d4:c8:6f:fb:92:3f:8c:c0:5c:26:
c2:c5:9b:ac:66:38:6f:cb:2d:b4:c1:f6:95:dd:69:03:8a:02:
56:eb:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:11 2024 by rpki-client on console-fra.rpki-client.org