Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/fCqArWob_jE8m_Jb0OLCIiVoepM.roa
File: fCqArWob_jE8m_Jb0OLCIiVoepM.roa (raw, json)
Hash identifier: lKB9P2tFvVOjvv4XTNLxNZevLEItB5uBaxXk+4WOCDc=
Subject key identifier: 7C:2A:80:AD:6A:1B:FE:31:3C:9B:F2:5B:D0:E2:C2:22:25:68:7A:93
Certificate issuer: /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial: 018A6FD21843FA52E99646830A5CF59F4680
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/fCqArWob_jE8m_Jb0OLCIiVoepM.roa
Signing time: Thu 07 Sep 2023 13:25:54 +0000
ROA not before: Thu 07 Sep 2023 13:25:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.115.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 10:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:d2:18:43:fa:52:e9:96:46:83:0a:5c:f5:9f:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Validity
Not Before: Sep 7 13:25:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c2a80ad6a1bfe313c9bf25bd0e2c22225687a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:8a:5e:d5:12:81:8b:00:51:db:20:f3:83:
e7:bc:d7:c3:71:00:d6:8d:dc:03:ff:a0:91:1a:a0:
b3:56:29:a3:43:9c:87:21:4a:47:8c:a6:bb:e8:48:
68:a6:fb:4a:20:0d:7f:86:db:b7:cf:5a:4f:25:23:
2a:20:2a:c1:98:09:9e:56:f9:c7:38:80:66:da:60:
06:c5:6f:ed:7a:84:2e:61:b4:4e:91:7d:ec:c8:26:
92:37:da:29:5a:c4:49:bc:ec:13:d5:87:58:d5:ed:
47:64:4b:62:25:ac:81:c1:1b:79:93:8c:09:6c:31:
7c:ea:92:0a:bf:f5:b4:1a:9d:1b:19:a7:ea:bc:4c:
d0:45:a0:d7:8e:d8:f4:79:cf:74:ae:48:ae:c7:f1:
2f:76:7c:14:66:83:3a:37:67:9e:16:3b:82:3d:56:
02:98:d3:52:89:6d:0a:b7:e3:c6:49:78:17:eb:bd:
46:a7:ca:73:73:e5:f5:a5:2d:9e:a4:16:8a:cb:c8:
26:8b:ce:b9:64:c7:c1:bf:45:8b:50:10:c7:84:4e:
b0:13:ab:6b:be:e4:28:67:23:07:77:f5:6d:62:15:
b0:cf:3d:73:21:6c:59:e4:cf:e9:67:40:b1:ec:1f:
3c:a2:82:61:ac:d9:16:42:91:5a:a4:9d:0b:02:f4:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2A:80:AD:6A:1B:FE:31:3C:9B:F2:5B:D0:E2:C2:22:25:68:7A:93
X509v3 Authority Key Identifier:
keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/fCqArWob_jE8m_Jb0OLCIiVoepM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.88.0/24
Signature Algorithm: sha256WithRSAEncryption
44:72:c6:57:2e:4e:11:4f:a4:c6:3e:4e:7d:0a:72:97:01:df:
f0:b2:56:be:17:1e:a4:7c:77:a2:fa:6b:22:61:bc:e1:93:f9:
5f:b2:13:81:f1:a1:97:9e:be:21:60:a5:0e:e1:7c:6c:44:17:
56:0c:f1:60:50:12:dc:b3:7f:36:c0:a1:a0:90:5b:1f:8d:4b:
52:2f:33:b0:f7:d1:c4:06:bc:34:ad:0f:38:d9:fb:6b:86:5b:
60:c3:cc:d9:97:e3:cc:ec:fe:8f:ee:eb:58:ca:24:68:ec:69:
a4:db:73:ec:5e:c7:b7:dc:7d:ea:ee:94:c1:53:f7:fd:24:71:
6d:9e:69:2e:d0:89:a8:e8:a2:e6:cc:0d:02:6c:20:13:24:00:
83:8f:58:9a:29:dd:ca:89:29:90:d2:16:13:66:a9:94:38:5e:
a5:7a:c3:9c:fa:26:c9:77:21:c7:09:6c:47:9b:a5:63:44:ad:
68:71:64:54:1a:87:6f:01:ff:46:de:c9:a9:8d:5b:7b:d2:7f:
ba:47:26:2d:ae:21:16:e6:e5:4b:ca:b4:63:46:59:ec:0f:3c:
5f:af:07:ec:ff:d4:eb:35:d8:82:11:81:25:ff:30:b6:1c:e2:
83:fd:bc:18:cb:f7:5c:86:c5:33:27:c8:82:69:a2:d6:9f:7d:
ee:f8:bf:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:41 2024 by rpki-client on console-ams.rpki-client.org