Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/yB172AuKcUdwy_TI7LRvyajer8c.roa
File: yB172AuKcUdwy_TI7LRvyajer8c.roa (raw, json)
Hash identifier: WRAjXbyD+a8U7GR3L5/O5EKR+f38gRcrQLm1OqEbGqo=
Subject key identifier: C8:1D:7B:D8:0B:8A:71:47:70:CB:F4:C8:EC:B4:6F:C9:A8:DE:AF:C7
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 018CC3B6F2C024063FA69648F645461A1EE9
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/yB172AuKcUdwy_TI7LRvyajer8c.roa
Signing time: Mon 01 Jan 2024 06:29:55 +0000
ROA not before: Mon 01 Jan 2024 06:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201457
IP address blocks: 185.74.204.0/22 maxlen: 24
2a03:4760::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Apr 2024 11:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f2:c0:24:06:3f:a6:96:48:f6:45:46:1a:1e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Jan 1 06:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c81d7bd80b8a714770cbf4c8ecb46fc9a8deafc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:35:f8:38:89:1e:d3:e1:27:a4:98:c3:31:
1a:ff:a6:01:3c:56:c2:8e:eb:a6:aa:42:9b:2c:e0:
ff:f5:a8:09:3b:88:8e:51:f5:2f:52:5d:d1:d3:ea:
dd:bf:68:63:3e:15:a6:6c:3d:62:a0:1e:54:e5:ea:
3b:c6:bd:9b:6e:65:73:33:4a:ce:e8:82:b7:60:f4:
e5:24:0e:76:e4:f6:62:ff:36:bf:6b:30:99:f8:a2:
52:cb:ac:7b:da:04:60:92:62:03:cc:20:f9:8a:95:
a8:fc:8e:68:07:11:2f:88:d2:93:e2:02:d1:da:4f:
cd:d3:01:98:ad:02:7a:81:ee:28:fb:ad:4f:7e:0f:
a4:9c:c7:f8:6a:a4:82:7e:98:7a:da:1d:1a:b4:34:
2e:7b:0a:5b:53:b1:25:fc:b9:5d:0c:06:28:d3:90:
4f:d6:7c:a2:9a:aa:4e:d3:53:91:0e:c2:04:13:19:
16:df:cb:09:75:74:a5:94:9d:c5:2f:e2:31:d7:6a:
14:92:d6:7d:b4:33:97:b6:02:2f:e2:ac:1b:2c:ff:
00:7a:36:4d:b3:79:45:95:cc:8e:f2:74:30:a3:cd:
e2:75:ed:97:d0:8d:d5:1d:4b:1b:ce:87:16:63:b9:
b2:13:12:4a:31:8d:93:07:3f:74:29:f9:92:98:1f:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1D:7B:D8:0B:8A:71:47:70:CB:F4:C8:EC:B4:6F:C9:A8:DE:AF:C7
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/yB172AuKcUdwy_TI7LRvyajer8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.204.0/22
IPv6:
2a03:4760::/29
Signature Algorithm: sha256WithRSAEncryption
ab:52:ca:0b:e6:fd:1f:ef:e8:a2:bb:37:4f:7b:4d:48:50:3b:
15:e2:17:a5:d4:c0:35:6a:0f:23:85:99:0d:57:0e:74:8f:3e:
32:fa:d4:5a:62:cb:1c:c0:3b:13:0b:28:de:f3:88:57:ae:61:
59:0f:65:dd:13:53:ac:3b:89:29:92:d1:02:7c:0c:1c:40:b7:
9a:bc:96:9c:1b:e2:0d:21:1e:dd:04:e6:6f:b5:f7:f0:15:a6:
8a:67:4a:c9:7c:de:ab:a2:ae:73:62:de:24:6c:bc:53:3c:31:
53:78:2f:46:d9:82:9a:2c:ad:8a:07:83:68:02:f2:17:fa:48:
47:d6:45:a6:52:80:ec:2a:d0:86:51:72:67:16:eb:5b:48:38:
70:00:b2:98:f1:d0:d4:8e:5b:49:24:a4:55:74:ba:3d:36:1c:
17:76:e3:f2:f1:dc:22:bd:6d:d0:af:05:41:f2:51:1c:10:d4:
81:a3:e6:d6:ec:d1:e4:5d:89:43:1f:70:1e:f6:8e:fc:1d:81:
60:70:77:cb:16:89:af:f2:25:ed:63:cd:e1:4e:ba:36:45:26:
90:c3:ff:7a:a2:9b:2f:00:62:1d:ed:ce:dc:29:aa:8f:fa:3f:
91:b1:59:2a:39:58:e8:ec:af:fe:10:f7:d2:c8:bc:47:8b:ea:
7a:6e:74:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:11 2024 by rpki-client on console-fra.rpki-client.org