Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/3rEiCdbHQec1yKZVD7zGgsqL8n8.roa
File: 3rEiCdbHQec1yKZVD7zGgsqL8n8.roa (raw, json)
Hash identifier: YfHxx5eg561/PNpVtjIpZ7Ux9l1NkPZ8aUuJMXNGQ2M=
Subject key identifier: DE:B1:22:09:D6:C7:41:E7:35:C8:A6:55:0F:BC:C6:82:CA:8B:F2:7F
Certificate issuer: /CN=60614515907e8eac99806617d5f69c40db91a3f5
Certificate serial: 01856C136F542A7054A9E33F6CF2584535A6
Authority key identifier: 60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/3rEiCdbHQec1yKZVD7zGgsqL8n8.roa
Signing time: Sun 01 Jan 2023 06:44:50 +0000
ROA not before: Sun 01 Jan 2023 06:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206491
IP address blocks: 185.185.88.0/23 maxlen: 23
2a0b:4e80::/29 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:6f:54:2a:70:54:a9:e3:3f:6c:f2:58:45:35:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60614515907e8eac99806617d5f69c40db91a3f5
Validity
Not Before: Jan 1 06:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=deb12209d6c741e735c8a6550fbcc682ca8bf27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:98:eb:0c:a4:3f:c1:c9:a1:7e:66:3b:fc:
8d:de:bb:fc:6b:a9:91:ca:ec:1c:f8:e9:5c:3c:07:
82:37:fb:d0:fb:6b:73:d4:19:1f:6d:f8:b5:67:0d:
08:7c:cf:40:b4:38:48:8a:24:71:6a:dc:2d:ca:ed:
1a:f1:65:75:6e:90:6a:f7:f2:47:87:c9:55:30:d1:
89:00:e8:61:85:e8:b8:a2:28:b5:da:00:35:4e:26:
ec:74:95:5a:78:de:0d:3b:c8:8f:6c:f2:07:dd:0a:
1f:9b:01:d9:88:5c:4c:79:df:6f:d5:2f:a5:58:0e:
c9:1d:43:06:60:6b:33:d6:d9:73:35:ee:91:33:c3:
ab:d4:7b:9a:c2:f1:aa:70:7b:86:58:77:e6:76:19:
78:e9:05:9f:ea:ec:d9:af:63:cd:d9:15:05:f7:4a:
f5:e6:8d:21:cb:88:9a:7c:38:95:7f:e6:71:61:f4:
24:34:c8:b9:72:f6:38:4e:39:86:54:b6:6d:ba:07:
57:3e:8a:87:a4:27:35:41:b7:31:b4:3b:ef:8f:85:
ce:a2:cf:f9:55:c8:0f:c9:6a:26:ff:88:0b:6a:dd:
ad:89:bc:b7:3a:80:a1:a0:03:f1:65:39:38:09:d9:
20:56:58:7b:d2:12:c5:90:4c:1d:94:bf:fa:88:39:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B1:22:09:D6:C7:41:E7:35:C8:A6:55:0F:BC:C6:82:CA:8B:F2:7F
X509v3 Authority Key Identifier:
keyid:60:61:45:15:90:7E:8E:AC:99:80:66:17:D5:F6:9C:40:DB:91:A3:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGFFFZB-jqyZgGYX1facQNuRo_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/3rEiCdbHQec1yKZVD7zGgsqL8n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/343ee3-c8ea-4540-a172-f98c438f0a35/1/YGFFFZB-jqyZgGYX1facQNuRo_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.88.0/23
IPv6:
2a0b:4e80::/29
Signature Algorithm: sha256WithRSAEncryption
7f:70:e8:1f:4b:0e:7d:91:82:55:3f:8a:f4:e2:79:24:31:01:
f9:b6:2d:fa:e7:23:68:a6:f7:23:ad:9f:0d:07:35:db:76:f4:
2d:97:f5:fc:d1:f4:9d:ed:07:26:a7:30:a5:af:1b:fe:82:25:
1b:21:b9:2e:97:9e:48:bd:d3:e9:7d:b3:b0:a2:6a:0c:3b:7f:
fc:52:24:07:c9:11:66:aa:71:7a:e5:b2:e6:ea:68:6f:55:f3:
15:fb:6d:8a:b4:89:52:3b:d0:fe:4d:4e:e4:17:58:62:93:52:
ad:e6:6e:b4:be:06:65:bd:1b:4f:69:55:fa:8e:ed:08:fe:38:
d4:e5:65:9f:8a:6a:5e:af:03:e8:df:69:de:bf:cf:60:e7:3f:
ee:2a:e7:56:7f:d4:4d:dc:3a:17:12:bb:8a:28:d2:bf:21:ae:
fe:73:87:02:b2:8e:c5:1a:24:d7:0e:71:5d:a8:8d:97:83:57:
f8:12:93:fa:6f:b6:fb:16:35:3c:08:51:9a:ba:d0:c8:d8:ce:
29:20:b5:08:ba:6a:47:88:5c:bc:e2:f9:d9:81:13:39:b1:07:
7e:9c:18:ca:c0:77:a6:84:0b:55:fc:a8:60:f8:11:63:ed:e2:
21:80:2b:9c:ee:44:d3:ad:30:11:dd:25:36:71:c5:a5:02:bf:
c8:05:41:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:03 2024 by rpki-client on console-ams.rpki-client.org