Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/4eRVez7Az5QrE8ktS7yBHiDE_mA.roa
File: 4eRVez7Az5QrE8ktS7yBHiDE_mA.roa (raw, json)
Hash identifier: QjTbm64FzEObzm1Xv2UTOag+rKgP7wORIStoPzve5C8=
Subject key identifier: E1:E4:55:7B:3E:C0:CF:94:2B:13:C9:2D:4B:BC:81:1E:20:C4:FE:60
Certificate issuer: /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial: 018D30DEEA1BF0AE93AC5420F2BD41C70F94
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/4eRVez7Az5QrE8ktS7yBHiDE_mA.roa
Signing time: Mon 22 Jan 2024 11:12:11 +0000
ROA not before: Mon 22 Jan 2024 11:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.115.88.0/24 maxlen: 24
185.115.89.0/24 maxlen: 24
185.115.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 01:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:de:ea:1b:f0:ae:93:ac:54:20:f2:bd:41:c7:0f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Validity
Not Before: Jan 22 11:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1e4557b3ec0cf942b13c92d4bbc811e20c4fe60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0c:08:4d:9a:5a:7c:47:66:a9:bb:c4:74:22:
33:c1:f1:fd:c4:9f:09:a7:94:f4:da:29:14:8b:aa:
31:cb:49:5f:bd:43:ef:78:f5:26:ee:e4:2e:ba:de:
5c:89:a3:81:38:b6:17:b3:3f:d6:23:8e:fe:9b:d7:
16:f7:ff:38:13:4e:7d:4f:e8:81:6c:31:54:10:23:
c4:f8:73:83:d4:44:85:0b:45:64:46:31:b8:8b:76:
d2:b9:93:cb:b0:cf:56:2a:76:c0:2a:c7:71:4a:6b:
c9:0b:d7:85:21:38:e3:87:37:5d:88:57:dc:fc:7a:
d0:cb:9d:f2:22:d4:08:2d:62:0c:07:8f:1b:62:a4:
96:56:f8:a9:15:83:36:80:31:12:01:07:59:fd:69:
6f:a5:39:5e:21:6a:30:e7:dc:1d:15:93:9c:71:d7:
ba:af:28:90:36:e4:bf:6b:28:eb:6f:48:4f:13:88:
59:15:60:64:87:62:cc:1b:2e:0e:bf:0f:36:ac:cf:
c2:e1:fb:3c:fe:7e:87:f1:12:4a:bd:cd:3e:28:6e:
85:e4:04:c3:6d:7f:8e:b7:79:bc:13:44:c5:0e:1c:
5b:9f:a9:94:80:55:c4:8d:26:68:af:0a:36:28:72:
7f:cf:45:c0:20:78:02:3a:ee:44:cf:80:60:6f:e3:
65:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E4:55:7B:3E:C0:CF:94:2B:13:C9:2D:4B:BC:81:1E:20:C4:FE:60
X509v3 Authority Key Identifier:
keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/4eRVez7Az5QrE8ktS7yBHiDE_mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.88.0-185.115.90.255
Signature Algorithm: sha256WithRSAEncryption
04:1a:0a:bb:82:66:f4:1d:e1:e2:ac:76:e5:62:62:64:f9:d3:
f8:02:1a:34:72:d2:51:47:f7:ec:c6:00:2a:92:6f:ad:46:f8:
41:43:8e:eb:c2:04:74:2e:f8:ac:f7:1d:19:38:6b:3c:fb:a0:
29:65:12:4e:78:ea:45:ed:83:1f:24:83:cc:a3:d0:b4:5e:18:
25:97:ef:0b:66:5e:c9:af:d4:73:39:a1:68:9a:73:de:85:bd:
83:6a:f4:e9:82:a6:61:e2:fd:19:b3:6f:0d:ab:ca:00:3e:d7:
25:00:c9:08:78:54:ef:25:19:f5:6b:98:71:74:26:6a:bd:ee:
03:39:fe:7b:d9:e9:d6:55:00:5f:ed:8f:f2:c4:3f:1c:a7:af:
5d:7b:78:ee:de:e9:fe:f8:45:f7:ff:20:c7:05:63:51:2e:37:
22:1f:62:a8:5c:70:01:16:c8:50:93:50:a9:7b:55:0c:d0:8c:
88:5f:4f:15:dd:be:5f:82:49:85:3e:20:e0:d8:75:3d:8f:11:
09:90:9e:1b:ad:63:92:5b:0a:cf:40:7a:a5:ce:c8:5b:5f:ee:
a0:26:69:b7:08:8f:70:37:68:0a:85:7a:c2:5b:b6:55:28:cc:
c5:f8:b6:57:b8:b7:40:2d:61:de:8e:84:7a:e1:a7:81:44:2e:
f3:bc:d1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:41 2024 by rpki-client on console-ams.rpki-client.org