Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/IipaAIrwV_2t877HvkuBEoITfJ8.roa
File: IipaAIrwV_2t877HvkuBEoITfJ8.roa (raw, json)
Hash identifier: 5gV3VcwvAiw2Qp6UJIh1a6a8+x1hsdfrztv9eCwpmbc=
Subject key identifier: 22:2A:5A:00:8A:F0:57:FD:AD:F3:BE:C7:BE:4B:81:12:82:13:7C:9F
Certificate issuer: /CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Certificate serial: 0187C6F7CDC6D133F07450272A5B428D117C
Authority key identifier: 60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/IipaAIrwV_2t877HvkuBEoITfJ8.roa
Signing time: Fri 28 Apr 2023 08:25:41 +0000
ROA not before: Fri 28 Apr 2023 08:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204002
IP address blocks: 185.43.89.0/24 maxlen: 24
185.43.90.0/24 maxlen: 24
185.43.91.0/24 maxlen: 24
185.43.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:f7:cd:c6:d1:33:f0:74:50:27:2a:5b:42:8d:11:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6029b1a08139e1da9643dd0424f5cd64507e3771
Validity
Not Before: Apr 28 08:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=222a5a008af057fdadf3bec7be4b811282137c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:eb:66:40:df:cf:64:a1:b8:8b:20:2f:d5:32:
d6:5a:0a:5d:29:02:ca:db:34:d6:f8:2b:45:5b:74:
16:2c:59:3a:aa:5d:1b:03:ab:9c:18:46:b1:ad:b1:
5b:32:15:1d:d3:6a:08:fa:6e:23:98:d3:bf:f8:6b:
ae:7c:39:15:78:ff:90:75:ac:17:a0:7f:71:21:73:
f8:5f:9a:a6:96:66:c9:7b:da:69:0b:b2:4f:bf:2a:
42:f0:f1:13:db:7a:cf:00:9d:a0:7f:7d:78:c2:69:
86:f9:d4:ae:c6:aa:cf:38:56:8e:61:ec:61:5b:89:
a4:13:70:db:cd:b3:9d:62:dd:5e:dc:ee:54:ea:c1:
d8:ed:d0:10:ec:3b:c3:54:ce:bc:7a:59:7d:3c:dd:
b7:03:4e:42:db:7d:e5:40:70:8c:38:a1:e3:48:d0:
09:12:ea:98:46:b8:b5:ad:fa:a4:00:8a:3c:d9:bc:
95:7e:07:0e:69:e9:bd:bd:05:fb:b3:d9:ed:72:5c:
64:be:b4:d8:59:1f:97:93:31:0f:7a:70:8e:2f:b5:
f0:64:2d:bc:13:1d:9c:d8:7d:4c:f3:52:da:8c:77:
6b:a0:ef:d7:cb:e3:b0:73:22:a6:e7:8f:80:41:cc:
e1:f6:67:aa:60:76:26:ea:bb:fd:69:39:52:61:7e:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:5A:00:8A:F0:57:FD:AD:F3:BE:C7:BE:4B:81:12:82:13:7C:9F
X509v3 Authority Key Identifier:
keyid:60:29:B1:A0:81:39:E1:DA:96:43:DD:04:24:F5:CD:64:50:7E:37:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YCmxoIE54dqWQ90EJPXNZFB-N3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/IipaAIrwV_2t877HvkuBEoITfJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3d56f6-9410-4844-a472-5615513fdcf4/1/YCmxoIE54dqWQ90EJPXNZFB-N3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.88.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:6c:de:6b:2f:05:c3:76:b2:81:b2:01:57:61:3a:6c:14:d6:
97:cc:f3:f2:19:78:22:df:4d:e4:2b:21:ae:01:f7:de:01:0c:
42:24:8e:76:2d:c5:84:75:1f:26:4b:cf:b0:5d:8f:f5:5a:b2:
7b:c6:11:44:5c:4c:43:75:05:18:e4:c3:6d:5a:40:cd:fd:be:
f5:70:0f:1b:a6:7d:74:bf:3d:d3:45:94:a7:36:68:02:af:3a:
65:3b:a2:59:87:08:8d:7c:3d:bb:d5:75:5e:0c:26:d2:cf:78:
00:01:ee:45:55:e8:75:4a:f5:0b:57:22:a4:e7:2e:94:b4:f0:
90:7e:03:6f:b8:a2:91:43:8a:81:9e:0b:a3:fc:83:b3:df:96:
ad:9f:1c:87:18:48:d9:cb:6e:1f:17:62:99:5a:99:ab:91:d6:
19:00:30:20:38:01:56:b5:5c:4f:4b:43:cd:d1:a4:6c:4d:a4:
7d:8e:ef:88:22:a7:ee:f0:df:06:f8:ec:45:59:7c:46:a3:68:
20:61:55:d9:11:6a:d0:12:f2:86:25:df:eb:b9:2a:58:47:d5:
3e:a7:98:dc:52:cc:92:56:67:d6:1b:94:0b:32:c8:14:0f:1d:
0e:f8:50:dc:a7:b6:16:06:cf:c7:c4:fb:c1:dd:a6:14:f4:af:
69:bd:42:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:15 2024 by rpki-client on console-ams.rpki-client.org