Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/AoY0TXgFXYxJ7Q-5-GANeXBmfoA.roa
File: AoY0TXgFXYxJ7Q-5-GANeXBmfoA.roa (raw, json)
Hash identifier: n6n2TTwGdZqgfmcCjKwSQnQNidEchTZRBcR/TDuQtXc=
Subject key identifier: 02:86:34:4D:78:05:5D:8C:49:ED:0F:B9:F8:60:0D:79:70:66:7E:80
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 018CC8012C9264442E13D7905142052362FB
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/AoY0TXgFXYxJ7Q-5-GANeXBmfoA.roa
Signing time: Tue 02 Jan 2024 02:29:29 +0000
ROA not before: Tue 02 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201860
IP address blocks: 185.60.237.0/24 maxlen: 24
185.60.238.0/24 maxlen: 24
185.60.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 May 2024 21:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2c:92:64:44:2e:13:d7:90:51:42:05:23:62:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Jan 2 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0286344d78055d8c49ed0fb9f8600d7970667e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:c2:ea:70:fa:83:89:18:99:d4:ca:79:d0:
b4:f0:8d:8c:65:0d:04:4f:dc:5a:82:67:e8:bc:79:
44:e5:77:41:e0:e1:78:6d:b6:07:a5:f1:87:92:56:
52:1a:6e:4f:0b:d2:30:2d:46:8f:57:3d:a2:97:ef:
cf:37:38:a4:94:bb:57:90:32:11:f2:40:67:2e:18:
e2:b8:38:0d:5d:35:2a:f1:04:1c:15:d6:e3:c4:1e:
1d:b0:3f:24:2d:8f:7f:9c:07:b7:ea:23:ae:6d:ed:
8b:83:e6:17:d9:a4:01:d5:dc:a7:f5:f9:dd:ad:0d:
98:82:64:73:77:25:14:a2:4e:01:75:11:44:b8:de:
b3:4b:7b:d0:5b:57:21:f1:11:53:50:2d:bf:48:c7:
25:e1:17:01:b7:6d:b4:80:55:48:f3:c3:40:1f:85:
ab:c8:14:a7:ed:1e:c9:60:4d:0e:f6:74:03:bf:f9:
99:fb:e9:67:9f:7e:7b:47:bc:15:2a:35:3f:25:80:
bc:29:0d:08:a1:91:0a:53:b2:6c:89:a1:da:67:ca:
81:98:58:16:b2:c4:4a:23:d3:cf:d3:37:2a:3f:04:
33:ce:80:6a:47:6b:23:87:a0:3a:58:6d:3e:d2:cf:
7b:2c:77:a2:e0:57:b2:53:b3:c8:41:4d:19:c5:60:
84:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:86:34:4D:78:05:5D:8C:49:ED:0F:B9:F8:60:0D:79:70:66:7E:80
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/AoY0TXgFXYxJ7Q-5-GANeXBmfoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.60.237.0-185.60.239.255
Signature Algorithm: sha256WithRSAEncryption
90:29:7d:17:e1:24:ed:f3:56:60:40:56:13:10:c0:b5:fb:fa:
26:6b:93:b9:86:18:2f:5f:97:74:ff:89:44:b2:fa:40:e8:eb:
bc:36:0a:da:03:a8:14:de:32:38:2b:e0:f8:40:1f:41:0e:42:
cd:22:10:a8:d2:ef:e3:61:f3:b1:50:e3:a3:5a:e1:85:2d:f6:
42:a9:10:d2:16:2a:1a:1b:de:95:d1:05:bf:2f:37:ec:85:8b:
fa:b4:03:92:90:76:f7:6d:e4:9b:c2:91:70:57:c1:99:ae:0a:
62:2d:7c:f2:c6:30:cd:31:b3:e5:50:7a:d5:9b:9a:2e:80:24:
f0:f4:5d:8e:33:15:02:5d:13:6c:3a:d0:a8:f7:4c:59:51:c1:
74:47:4c:34:f3:00:0d:9f:e5:e5:9d:83:8c:78:a0:f5:1d:9a:
16:cd:fd:ad:73:9e:9f:76:c4:e1:f2:48:96:65:c3:5a:1a:b1:
7b:cc:26:65:c6:7b:d3:44:d5:98:99:8a:2e:48:3e:eb:5f:a6:
b5:e3:e7:f6:9e:ab:5a:9f:53:2c:81:87:82:c1:e5:a3:46:ba:
90:9a:21:c8:a6:74:ea:20:46:32:58:63:4d:85:89:ed:38:b7:
c4:e7:a8:70:19:fe:5d:0e:8b:64:3f:ed:32:d4:50:13:a3:bb:
29:22:41:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:18 2024 by rpki-client on console-ams.rpki-client.org