Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/7FXqJFPTMg9W3X6K8GP4jXA-ZMQ.roa
File: 7FXqJFPTMg9W3X6K8GP4jXA-ZMQ.roa (raw, json)
Hash identifier: qjwJoslZ7gFhs+SHCWT/mPa7lJAaLOGazuZJ97Cq5wM=
Subject key identifier: EC:55:EA:24:53:D3:32:0F:56:DD:7E:8A:F0:63:F8:8D:70:3E:64:C4
Certificate issuer: /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial: 018BFB6E2536FAA02C6A765ACABE42D81B91
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/7FXqJFPTMg9W3X6K8GP4jXA-ZMQ.roa
Signing time: Thu 23 Nov 2023 09:06:21 +0000
ROA not before: Thu 23 Nov 2023 09:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.88.184.0/24 maxlen: 24
185.88.186.0/24 maxlen: 24
185.88.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:6e:25:36:fa:a0:2c:6a:76:5a:ca:be:42:d8:1b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
Validity
Not Before: Nov 23 09:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec55ea2453d3320f56dd7e8af063f88d703e64c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:38:13:b7:8b:bd:a0:67:e5:b8:00:6a:f0:
cf:75:04:cd:07:ad:6c:55:cb:39:74:fd:03:9a:3c:
53:73:8e:ee:9c:11:88:d7:df:d6:cd:32:69:90:e5:
1d:8b:96:cd:e2:95:d0:2e:d5:a7:fc:04:c0:65:41:
4a:cc:68:93:59:3f:28:bd:4a:de:c2:a1:65:17:5d:
a0:90:61:50:5c:93:84:82:4b:dd:2b:2f:c0:d7:1d:
92:c0:fe:f9:9a:f2:ae:ec:af:71:57:a8:1e:96:3a:
b1:d1:73:49:e4:8a:24:dd:e0:d7:d7:38:c5:93:00:
4d:8b:9a:9b:14:67:b2:b0:6b:71:aa:c6:2c:ea:4c:
58:f2:15:9f:82:5c:9c:b5:bc:0d:06:0d:e9:97:ed:
7d:01:2c:a5:af:34:2f:29:b7:f2:16:7c:0a:33:fe:
04:ce:99:7b:4f:2e:b0:38:55:c2:f6:73:63:ed:70:
1c:0c:af:ca:a6:97:80:4d:71:a7:6b:76:89:ac:6a:
03:23:12:33:0e:c6:50:2d:b9:73:c6:77:9b:1f:7a:
27:e5:f4:17:4d:78:79:ca:9e:bd:05:7d:e4:50:7a:
fd:91:02:d0:57:cf:34:35:06:29:35:30:24:b9:a1:
ec:fb:bc:bb:0c:fb:0b:13:65:ea:bb:54:d9:3e:7c:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:55:EA:24:53:D3:32:0F:56:DD:7E:8A:F0:63:F8:8D:70:3E:64:C4
X509v3 Authority Key Identifier:
keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/7FXqJFPTMg9W3X6K8GP4jXA-ZMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.184.0-185.88.186.255
Signature Algorithm: sha256WithRSAEncryption
bc:ef:69:6e:f3:ba:e1:ab:2c:9b:b0:22:db:31:85:b4:8b:e0:
1b:07:54:3c:ae:ae:94:13:a0:cb:61:02:81:e0:c2:67:c5:00:
fb:0d:8a:ba:bd:c4:a7:14:38:eb:ef:0f:32:42:23:8b:52:99:
c0:ed:70:14:3c:db:e5:99:83:88:03:bb:12:ab:c2:a2:84:b2:
a6:c5:d2:c0:7b:4c:12:80:ec:29:03:e9:d9:38:6f:81:8a:bc:
24:12:3a:3e:1a:cc:7d:4b:80:96:eb:00:8b:91:a0:a1:c4:11:
ab:1b:3b:eb:fc:66:5a:2d:06:b7:a8:5a:ae:e9:18:b1:31:77:
5f:a9:2b:4b:69:5b:cf:dd:32:8f:d1:bf:57:a6:fe:52:c2:64:
4a:04:82:df:35:af:d1:02:63:b4:d0:33:3b:74:3d:4c:69:26:
a5:aa:0a:f4:9d:d0:1f:d9:34:72:99:ba:98:71:18:67:d5:04:
42:bf:42:71:49:6a:4f:12:0a:8f:05:86:04:26:86:89:e7:63:
a0:54:42:5f:f8:a7:16:a8:9d:ac:3e:97:fd:2a:ef:09:d1:3b:
c4:db:06:84:16:05:69:59:9e:a0:71:db:ca:1c:c2:0f:ce:b0:
62:e7:c2:20:37:09:20:1f:55:47:2d:25:35:04:bf:cd:fa:d3:
b8:35:0c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:40 2024 by rpki-client on console-ams.rpki-client.org