Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/atJz6hG4z-Q-25jNMcggMH_6hA0.roa
File: atJz6hG4z-Q-25jNMcggMH_6hA0.roa (raw, json)
Hash identifier: LImF42RB07tpEGHzAZl/e7FDc42LlYFQ+PNpuFu+O9k=
Subject key identifier: 6A:D2:73:EA:11:B8:CF:E4:3E:DB:98:CD:31:C8:20:30:7F:FA:84:0D
Certificate issuer: /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial: 018D30DEE9A20F6C851765864B90CD3F145D
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/atJz6hG4z-Q-25jNMcggMH_6hA0.roa
Signing time: Mon 22 Jan 2024 11:12:11 +0000
ROA not before: Mon 22 Jan 2024 11:12:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.115.88.0/24 maxlen: 24
185.115.89.0/24 maxlen: 24
185.115.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Feb 2024 01:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:de:e9:a2:0f:6c:85:17:65:86:4b:90:cd:3f:14:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Validity
Not Before: Jan 22 11:12:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ad273ea11b8cfe43edb98cd31c820307ffa840d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:cd:5a:d1:99:86:ed:6e:46:72:c7:2c:36:
93:6f:f0:a2:ce:eb:2d:62:d6:5c:d8:ff:f3:b4:04:
46:a6:04:8f:e0:e1:c5:82:f5:2a:5c:90:fe:e4:1b:
2e:77:72:e6:ef:7d:92:7d:4a:9c:2e:e4:4b:92:79:
98:82:27:23:63:74:1d:b4:ed:fa:2a:40:b6:43:e5:
29:65:46:58:11:e5:15:17:4d:19:92:26:0b:9c:5d:
cb:56:ba:dc:7c:4d:4b:a1:90:48:7b:bf:a1:87:9c:
27:42:d0:63:94:e5:09:08:41:5b:88:68:e5:4c:79:
26:5c:88:04:dd:b5:4d:08:7f:67:4c:ca:c0:30:af:
61:53:84:74:63:08:0a:78:a0:2a:2d:be:7e:4f:28:
f5:21:f1:f5:f8:58:2e:cd:30:b3:48:bc:93:dc:42:
8c:c7:e4:3c:7e:90:cc:03:f4:09:71:dd:5b:40:51:
00:52:2f:25:79:85:69:5f:19:e4:75:51:b5:dc:46:
f1:b6:79:a3:e4:82:b0:3e:a2:43:46:8f:61:24:fb:
29:8b:62:87:28:2a:a0:c1:0c:fa:4b:01:f3:53:96:
a5:3b:47:e0:de:b1:50:cc:de:f0:e5:4f:ab:e1:a3:
29:97:02:ed:66:9b:af:54:b7:c7:da:9c:2b:7f:c7:
52:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D2:73:EA:11:B8:CF:E4:3E:DB:98:CD:31:C8:20:30:7F:FA:84:0D
X509v3 Authority Key Identifier:
keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/atJz6hG4z-Q-25jNMcggMH_6hA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.88.0-185.115.90.255
Signature Algorithm: sha256WithRSAEncryption
65:43:67:2f:ea:66:01:f3:8d:0d:d2:8b:ba:6f:3b:f0:25:8a:
27:61:5a:59:c8:66:0e:82:e8:a3:4f:57:60:94:c5:c1:5e:d5:
f6:fe:f1:e4:06:b2:ad:bd:58:a6:8b:0d:50:15:22:87:23:16:
bd:88:08:77:9a:00:63:34:a6:07:5d:d1:95:35:84:85:9e:51:
84:12:13:0a:21:2a:da:31:33:d6:84:ef:5f:88:7e:3f:dc:5d:
ba:11:b1:9d:e4:1a:88:d6:f5:4f:66:cb:39:d2:5d:6f:fc:9e:
50:29:3c:dd:1a:9d:87:b3:d3:31:44:37:83:a6:0e:ea:d9:ae:
9f:86:76:f3:39:2f:51:ba:5f:6c:b6:b8:ce:7b:55:cc:51:8f:
7b:52:3f:d5:c8:fc:fe:41:65:e8:5b:76:9a:cc:61:31:03:5f:
3b:fa:19:bb:90:3c:03:58:e8:3f:65:64:d6:d8:16:2c:b1:ad:
5d:d0:6d:74:7b:8a:01:95:02:ca:d5:0f:9d:89:1b:33:46:b3:
49:e1:6c:79:31:43:fe:03:6f:9b:10:32:58:c1:e8:55:95:e8:
1b:5f:02:59:2a:cd:44:4d:fb:9c:be:da:9f:f2:b6:b2:10:86:
0c:ec:0f:f4:b7:cf:a1:1a:31:bc:f6:0e:42:33:d8:18:ec:ae:
fc:a3:e2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:41 2024 by rpki-client on console-ams.rpki-client.org