Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/_CuHN7cK-qqRe2ZN3zHOJysq9uY.roa
File: _CuHN7cK-qqRe2ZN3zHOJysq9uY.roa (raw, json)
Hash identifier: Oumqpmrjb+E4CvkEBRQ8RmI9TSBwD1TVR5D00E5iHYA=
Subject key identifier: FC:2B:87:37:B7:0A:FA:AA:91:7B:66:4D:DF:31:CE:27:2B:2A:F6:E6
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 018D52B6F97D28A53F1229087B85B81BA9E2
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/_CuHN7cK-qqRe2ZN3zHOJysq9uY.roa
Signing time: Mon 29 Jan 2024 00:55:39 +0000
ROA not before: Mon 29 Jan 2024 00:55:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60540
IP address blocks: 185.155.157.0/24 maxlen: 24
185.155.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Apr 2024 15:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:52:b6:f9:7d:28:a5:3f:12:29:08:7b:85:b8:1b:a9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Jan 29 00:55:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc2b8737b70afaaa917b664ddf31ce272b2af6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f4:b1:50:e9:38:e9:fc:fb:dc:a0:7f:60:30:
4a:18:50:68:ae:0e:74:8b:54:47:a9:73:43:f7:88:
91:17:43:e6:15:8d:fc:a1:25:66:77:e4:b8:e9:3c:
2c:38:80:ab:40:15:34:d9:a7:ed:c9:05:61:4c:78:
6f:5e:14:d3:ea:e9:e0:55:93:fa:fb:9b:5e:96:cc:
04:23:29:2d:fb:45:5c:8b:c1:3e:95:36:0e:cd:ff:
e2:f3:06:04:8d:7d:6f:9b:44:43:a0:a8:8d:64:de:
cc:94:07:7d:c7:ad:19:e2:a0:4a:a1:8b:20:57:6b:
5e:fe:1d:da:80:90:3c:ac:5b:2b:30:3b:73:be:cf:
0a:15:ce:cf:11:0b:f2:0d:df:cd:b1:5f:b3:c4:c5:
a1:96:0e:32:d5:8c:26:2a:28:ee:ff:1f:2f:66:31:
0f:02:55:24:ce:82:45:e9:4b:2b:99:7a:fb:5f:f4:
a2:1a:44:a4:f4:60:3f:ae:a7:ea:f0:d9:61:f7:25:
4b:56:60:f8:ce:c6:f7:e2:83:4c:c0:a6:09:11:b3:
e8:35:cc:0d:00:ee:b2:2b:1a:2b:28:16:1f:26:f9:
88:c5:3d:ce:c2:c1:b6:08:01:1f:cf:69:c4:66:17:
b8:1e:54:e1:0b:92:9f:6d:e1:79:07:1b:cb:e2:e8:
01:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2B:87:37:B7:0A:FA:AA:91:7B:66:4D:DF:31:CE:27:2B:2A:F6:E6
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/_CuHN7cK-qqRe2ZN3zHOJysq9uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.157.0-185.155.158.255
Signature Algorithm: sha256WithRSAEncryption
3d:1a:5f:fb:ce:9e:57:b8:e8:69:88:56:73:74:cd:01:d4:07:
e1:09:1b:6a:3b:1b:54:7e:d9:8a:07:4f:85:c9:be:cb:ae:f7:
d7:91:77:7f:4e:22:29:88:82:cf:47:92:e6:50:2f:69:9d:e5:
4f:ed:e0:ec:87:1d:ca:f4:57:a8:24:b2:10:07:0d:45:04:a9:
13:db:39:79:c4:64:0c:f5:de:0b:2d:58:c1:9f:9b:d1:85:f3:
c1:19:be:82:81:49:dd:34:cd:63:97:70:ca:2e:df:d5:93:7c:
5a:34:dc:be:25:79:70:6f:f0:73:d6:b8:08:8c:53:83:25:30:
ba:6f:95:72:10:03:0c:06:4a:39:a2:07:8a:c6:26:71:5e:52:
49:79:4b:cc:7e:42:48:ff:8d:5b:4b:e2:51:1e:b2:e7:aa:a3:
a7:92:3e:6a:48:b7:4e:ae:8f:7b:4c:7d:36:c7:56:f4:fc:5c:
5e:0e:eb:77:bc:bc:c1:a5:62:93:ce:08:22:4a:00:49:71:0f:
39:79:03:ae:36:7b:02:7b:be:59:ca:3b:f0:42:5f:4f:41:22:
a0:d0:62:9e:81:d3:74:bb:87:f6:93:1e:aa:4b:fc:4b:f3:36:
63:d7:a8:75:2f:71:a2:b5:56:c5:c8:a1:b5:33:e8:64:c6:53:
05:62:6a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:00 2024 by rpki-client on console-ams.rpki-client.org