Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/84B7t-XDn_GbNgRZX5SHBPJ6-Ug.roa
File: 84B7t-XDn_GbNgRZX5SHBPJ6-Ug.roa (raw, json)
Hash identifier: QaxMhzh4VPczzmeV07x62Bbg4lRy41X0Iq6E94jh9UU=
Subject key identifier: F3:80:7B:B7:E5:C3:9F:F1:9B:36:04:59:5F:94:87:04:F2:7A:F9:48
Certificate issuer: /CN=60c44dff71879863ea71442023b7f354dc3dad7c
Certificate serial: 018CC3B6CBB471E1273C4A4C0849829B368C
Authority key identifier: 60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/84B7t-XDn_GbNgRZX5SHBPJ6-Ug.roa
Signing time: Mon 01 Jan 2024 06:29:45 +0000
ROA not before: Mon 01 Jan 2024 06:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.88.186.0/24 maxlen: 24
185.88.184.0/24 maxlen: 24
185.88.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:cb:b4:71:e1:27:3c:4a:4c:08:49:82:9b:36:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60c44dff71879863ea71442023b7f354dc3dad7c
Validity
Not Before: Jan 1 06:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3807bb7e5c39ff19b3604595f948704f27af948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:52:66:8f:b9:a3:19:94:4a:98:85:ba:2b:90:
d4:73:14:d8:01:5d:03:1c:2a:64:32:01:c0:7d:93:
ab:d6:e8:ba:af:01:82:d0:28:ba:08:5a:2b:ff:32:
d3:e3:b1:2a:8a:cb:cd:0a:18:c0:65:61:a8:30:71:
93:0a:13:1b:97:6a:68:53:67:ca:6b:c5:c8:4c:ce:
ff:d2:cc:81:c7:e0:1c:9c:4f:b7:4a:4a:d2:8d:ea:
84:58:6a:bd:d8:8d:49:7c:4b:50:27:28:9b:c3:fd:
62:60:86:0b:42:4b:af:53:17:c7:e9:2e:7e:e9:de:
cd:73:4d:70:7b:63:8e:94:6f:25:9d:fd:99:57:27:
6e:14:95:4f:cd:85:f2:9d:30:dc:2e:f1:3d:ba:76:
3a:fa:53:70:d5:e5:75:30:f6:19:3c:7c:06:b4:d0:
3d:5b:5f:b4:49:4b:fc:3c:c6:33:37:f0:f8:f8:4d:
be:94:24:d4:94:b6:06:a2:30:1e:fa:7b:cb:52:f8:
37:a5:a4:07:ec:82:60:cf:4c:f3:5f:b2:61:2c:b5:
88:8a:0d:55:a5:33:3c:eb:1a:52:ee:2b:6c:1f:08:
e4:cb:06:32:01:63:d8:d3:85:6e:b3:4c:74:14:6a:
fa:ec:2b:97:fe:ec:f2:ed:e7:bc:0d:e6:f4:bc:53:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:7B:B7:E5:C3:9F:F1:9B:36:04:59:5F:94:87:04:F2:7A:F9:48
X509v3 Authority Key Identifier:
keyid:60:C4:4D:FF:71:87:98:63:EA:71:44:20:23:B7:F3:54:DC:3D:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YMRN_3GHmGPqcUQgI7fzVNw9rXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/84B7t-XDn_GbNgRZX5SHBPJ6-Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6ce994-8e99-40f9-a4eb-b2d73678727b/1/YMRN_3GHmGPqcUQgI7fzVNw9rXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.184.0-185.88.186.255
Signature Algorithm: sha256WithRSAEncryption
37:78:0c:10:72:7f:a2:cd:03:65:1e:51:08:d0:cf:f5:23:33:
b1:b0:3d:b5:6d:03:8f:45:0c:ea:be:0c:48:6e:0b:54:9c:22:
30:9b:7e:b6:dd:e4:dc:f0:52:20:7b:7e:d1:39:43:4c:17:18:
6f:6d:ae:b6:21:21:45:13:a4:51:1f:0d:c2:71:06:2b:ff:60:
7d:28:0c:95:ac:a1:73:83:c2:46:0e:60:96:9a:fa:b2:90:ef:
d2:68:bd:53:42:48:b5:a8:db:09:59:55:f6:ec:9b:54:c6:50:
0e:9d:4b:aa:cd:f5:d6:5b:6e:32:28:cc:12:a5:70:56:d5:88:
14:13:30:a0:2c:41:25:46:c5:f0:24:e4:9d:4a:e1:01:0a:47:
8f:c6:10:b9:d2:58:1c:5b:ee:3f:1e:21:ca:b2:88:ff:f9:90:
05:34:a1:22:b0:6c:b5:a1:f4:12:09:27:29:83:14:6a:29:42:
47:e5:54:47:86:59:1c:1c:66:7c:87:cd:f4:7f:bf:d7:cd:08:
54:21:73:3e:01:10:fd:37:18:8e:e1:4b:81:35:9a:ca:e4:7d:
d7:68:22:b9:d9:d2:2f:29:13:93:78:e7:be:b0:7e:01:89:b0:
1e:cc:6f:95:95:bf:34:fd:a3:3a:84:79:ba:a7:c5:6e:45:2b:
96:b4:ee:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:03 2025 by rpki-client