Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/vMfTdAOjPjH-SHahxkTImNngBNs.roa
File: vMfTdAOjPjH-SHahxkTImNngBNs.roa (raw, json)
Hash identifier: YpQ2/K/5CqxWWB6haKm3YsPxwal1giV+kj+MS/8pc/I=
Subject key identifier: BC:C7:D3:74:03:A3:3E:31:FE:48:76:A1:C6:44:C8:98:D9:E0:04:DB
Certificate issuer: /CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Certificate serial: 018B424CBA6C58C80A93A0112BDB0086E66E
Authority key identifier: 7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/vMfTdAOjPjH-SHahxkTImNngBNs.roa
Signing time: Wed 18 Oct 2023 10:20:06 +0000
ROA not before: Wed 18 Oct 2023 10:20:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.115.89.0/24 maxlen: 24
185.115.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:4c:ba:6c:58:c8:0a:93:a0:11:2b:db:00:86:e6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1bdecba944f7ee10e90691311fc0f843436ba1
Validity
Not Before: Oct 18 10:20:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcc7d37403a33e31fe4876a1c644c898d9e004db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:51:a4:12:cf:7a:61:53:96:66:92:ff:ef:
27:51:0e:db:65:e2:65:d3:ad:4f:6e:27:74:a1:2c:
fd:f5:71:4e:1e:ac:38:59:3e:71:68:44:ea:67:ba:
fc:f5:ac:74:0d:95:83:3d:2d:16:06:06:d1:d5:76:
57:16:df:13:57:d4:98:8f:dd:5b:c4:16:f2:a0:71:
f7:f0:53:76:15:a3:9a:dd:27:0d:44:64:70:4a:1c:
83:e4:62:a4:cf:0d:b1:4a:1f:99:23:6e:43:8b:8e:
71:7b:61:e0:aa:bc:8b:2f:f8:32:ee:af:ab:99:7b:
6b:b7:33:3b:c6:7a:a3:a5:6d:c8:a6:68:9f:4d:26:
21:2c:50:57:c7:d6:f6:53:eb:cd:ce:d3:62:3e:ba:
f0:93:6e:f7:9c:e6:98:43:7e:83:e3:4e:e3:ff:8c:
2b:ee:08:74:ae:ae:76:39:f9:d4:62:0d:38:e9:8f:
88:22:ca:2f:90:3e:62:34:5f:76:1f:f8:a0:0c:65:
2d:f2:e2:68:8f:74:2e:cb:82:76:79:75:df:f4:15:
9e:14:50:3f:7e:f2:bf:71:2e:54:9a:0d:f3:f4:4b:
70:21:f7:78:33:bb:b2:04:43:27:db:10:8c:25:66:
ef:05:1c:93:c1:2b:f1:cb:64:79:43:47:90:c6:aa:
a6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C7:D3:74:03:A3:3E:31:FE:48:76:A1:C6:44:C8:98:D9:E0:04:DB
X509v3 Authority Key Identifier:
keyid:7B:1B:DE:CB:A9:44:F7:EE:10:E9:06:91:31:1F:C0:F8:43:43:6B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exvey6lE9-4Q6QaRMR_A-ENDa6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/vMfTdAOjPjH-SHahxkTImNngBNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/bd4de8-861c-45b6-84c1-579b3a878182/1/exvey6lE9-4Q6QaRMR_A-ENDa6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.88.0/23
Signature Algorithm: sha256WithRSAEncryption
19:48:97:df:59:9e:1a:5a:fe:c5:0b:55:a0:13:e5:aa:28:50:
ee:95:42:17:27:8a:93:45:69:c5:6e:59:a2:5e:80:ab:4b:28:
f5:70:05:a1:6e:49:ef:79:3f:c1:64:ca:41:86:e7:fa:d5:86:
01:f0:02:5a:25:dd:e2:46:73:fe:d4:be:c3:74:5d:0e:70:b4:
e6:fc:76:79:e2:d4:0c:4b:50:2a:2f:dd:8d:7c:16:b9:0c:0b:
04:43:77:2f:9b:af:83:e1:47:92:73:aa:15:d7:8f:df:03:c1:
78:6c:16:3f:4a:ed:29:a8:82:7b:cd:ad:56:00:7e:09:f5:6e:
bb:78:76:a6:63:9f:08:38:01:64:0d:f3:a6:32:81:39:9b:80:
41:7c:e4:17:e8:8d:e3:2f:80:95:44:d4:ed:39:b6:2c:b9:98:
13:91:c8:5f:fa:3a:dd:9d:66:4b:eb:ee:b6:62:b6:3f:4f:ed:
60:33:27:67:b7:29:94:ba:43:25:63:52:71:5e:78:70:fa:fa:
07:9a:6d:ab:7f:6b:57:c7:a6:c0:3c:39:16:34:1d:58:8b:92:
bf:81:31:c4:ed:9a:56:6c:64:69:7f:1d:c5:be:8f:21:64:a5:
c7:29:93:f9:c3:61:d8:7b:57:9e:8a:2d:e2:01:d6:3f:bb:92:
db:fd:48:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:13 2024 by rpki-client on console-fra.rpki-client.org