Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/EYY5RJtrcmDd4xwCRpSE3Urj7_I.roa
File: EYY5RJtrcmDd4xwCRpSE3Urj7_I.roa (raw, json)
Hash identifier: LsaPX1UiVUJCUrC2ncHx/XgcWnBhujcICrD3z8txE+4=
Subject key identifier: 11:86:39:44:9B:6B:72:60:DD:E3:1C:02:46:94:84:DD:4A:E3:EF:F2
Certificate issuer: /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial: 018CC8DF1483C9F9FFC9B772683EA353B935
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/EYY5RJtrcmDd4xwCRpSE3Urj7_I.roa
Signing time: Tue 02 Jan 2024 06:31:52 +0000
ROA not before: Tue 02 Jan 2024 06:31:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.115.89.0/24 maxlen: 24
185.115.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 11:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:14:83:c9:f9:ff:c9:b7:72:68:3e:a3:53:b9:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Validity
Not Before: Jan 2 06:31:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=118639449b6b7260dde31c02469484dd4ae3eff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:88:c7:30:13:d1:62:04:20:01:dd:cc:e9:
1e:33:8e:84:02:96:67:9e:6b:fc:f3:ef:ba:97:2c:
6e:22:0c:a7:10:24:c4:00:57:d7:90:b8:4d:cd:b1:
d4:b1:96:af:1e:be:14:11:e2:d5:29:e0:6b:37:e1:
38:af:46:2b:6d:8f:85:3f:cf:29:ec:b2:c2:9c:81:
f2:a1:a1:75:41:80:1d:c2:1a:00:7c:de:f4:e7:76:
2b:a9:e3:06:7c:d9:f5:dd:dd:72:1d:4f:c8:7b:be:
6d:6a:28:8f:37:cb:00:4c:5f:23:6b:bf:12:4a:44:
a7:2e:83:33:d0:38:12:81:36:d2:5a:d6:db:ed:19:
2a:a9:20:df:d7:cd:63:8d:68:d7:26:0e:7b:1b:7d:
a3:6d:63:30:39:8e:d0:f5:15:a9:db:45:f9:16:0c:
26:f0:f1:fb:ca:e7:11:93:03:ba:b8:57:08:b9:70:
05:5b:20:6f:ba:23:66:15:d9:1f:45:3f:91:dc:57:
87:8a:da:bd:37:ba:1d:de:5f:47:63:4b:26:ed:00:
f7:09:f3:ce:05:1c:74:68:b1:87:f7:cb:45:f2:ba:
d7:0f:c0:20:25:92:30:e9:96:6f:f1:1c:a1:e5:22:
ee:c1:1e:12:69:a8:e4:77:f4:45:00:15:32:84:ae:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:86:39:44:9B:6B:72:60:DD:E3:1C:02:46:94:84:DD:4A:E3:EF:F2
X509v3 Authority Key Identifier:
keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/EYY5RJtrcmDd4xwCRpSE3Urj7_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.88.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:a3:f1:62:ef:7e:65:7e:b7:ee:71:b1:31:a1:be:69:8d:f6:
ed:d0:1a:07:c0:e1:6d:91:61:88:e1:9e:e8:50:21:29:48:d4:
56:5e:e2:b3:06:a2:61:e5:67:fd:f0:c3:13:c5:6e:ea:44:31:
be:4b:a5:8e:0e:fd:93:d9:cf:40:83:d8:77:91:e7:87:d3:e1:
b0:28:d9:d5:7d:0e:b0:18:51:43:9b:7f:33:b1:c2:5b:ca:c9:
48:e4:c9:51:a4:dc:1e:57:ed:8b:ed:1f:36:30:2d:ae:46:7e:
bd:48:d1:06:c1:ff:53:fe:31:8d:7f:31:83:3b:86:61:06:41:
4a:36:b1:45:ae:9b:ca:bb:2e:90:a9:83:2e:bf:11:db:5a:d8:
6c:c6:05:15:4a:35:2d:47:2f:bf:5d:07:09:69:db:bc:17:d2:
36:56:cc:3d:ce:85:09:a6:02:6f:a5:11:4c:7f:51:2b:ca:42:
59:0b:1c:3b:e1:91:22:fc:14:51:06:a2:fa:b0:62:50:47:69:
64:8d:2e:fe:32:5a:ff:37:7d:b5:1e:d3:c9:d9:a4:34:3b:cd:
36:d6:9b:58:58:c2:f3:55:c6:95:8b:54:d2:58:b8:93:c4:a8:
63:a1:4f:9e:a1:f4:24:ac:59:73:09:f2:a3:8c:85:80:2b:54:
ff:b6:11:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:13 2024 by rpki-client on console-fra.rpki-client.org