Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/jBhMoYKzu-0PFCqtTHjoS_HziWY.roa
File: jBhMoYKzu-0PFCqtTHjoS_HziWY.roa (raw, json)
Hash identifier: dUly0Zit+4am0D04rPT0Cw6xCAFEQDsYTjhCfDfGxnk=
Subject key identifier: 8C:18:4C:A1:82:B3:BB:ED:0F:14:2A:AD:4C:78:E8:4B:F1:F3:89:66
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 018571BA23C9573D620C5BC3748E05EE90C9
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/jBhMoYKzu-0PFCqtTHjoS_HziWY.roa
Signing time: Mon 02 Jan 2023 09:05:02 +0000
ROA not before: Mon 02 Jan 2023 09:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206641
IP address blocks: 185.180.61.0/24 maxlen: 24
185.180.62.0/24 maxlen: 24
185.180.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Mar 2023 12:25:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:23:c9:57:3d:62:0c:5b:c3:74:8e:05:ee:90:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Jan 2 09:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c184ca182b3bbed0f142aad4c78e84bf1f38966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:d4:48:fd:10:5f:87:ac:34:6b:8f:5a:b0:
fc:a1:62:91:4f:0a:d8:41:12:66:db:69:10:ea:2d:
c8:f9:42:74:ea:de:b0:f8:81:dc:19:1a:2a:c0:7c:
c8:fb:f7:25:63:c6:88:74:a1:d3:92:85:26:f7:23:
f6:78:c2:c4:e4:19:16:88:98:dd:16:29:e1:4a:bb:
0a:1c:95:d6:fc:11:fe:80:9b:80:44:74:2b:75:2b:
3a:72:08:4b:4e:23:b4:aa:95:3a:17:e7:fd:6f:97:
0a:eb:ce:d7:21:51:05:a9:9b:f2:ef:21:da:3a:81:
b7:03:5b:57:74:d9:84:7e:0b:f7:e2:6f:91:21:7f:
39:83:09:6e:a1:93:f6:3f:c0:31:d6:45:d4:ba:9f:
84:3b:91:8f:ee:95:5d:c5:e3:80:22:e1:52:09:e1:
9c:d9:9f:f7:5b:2b:5f:f0:1a:01:fa:ec:99:f9:ab:
bb:7c:37:b9:5c:2d:cc:9e:40:4f:9d:85:66:fc:e2:
e3:2b:ad:0b:50:d0:82:6c:4a:2b:ee:eb:85:7b:de:
1b:5b:d4:2a:89:27:00:2e:bd:32:40:9a:63:e0:13:
13:b8:12:9a:a8:d4:65:23:c6:4b:23:4b:b0:b8:c0:
79:f2:22:1a:4f:d5:65:54:11:7e:69:6f:53:e4:32:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:18:4C:A1:82:B3:BB:ED:0F:14:2A:AD:4C:78:E8:4B:F1:F3:89:66
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/jBhMoYKzu-0PFCqtTHjoS_HziWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.61.0-185.180.63.255
Signature Algorithm: sha256WithRSAEncryption
72:d2:0d:94:24:69:d9:6c:79:3e:6f:0e:64:1e:09:0d:06:a4:
50:e8:f3:ba:a8:52:69:72:9a:6f:7b:c3:ab:27:67:32:34:1b:
49:21:35:07:d3:b4:25:39:9b:aa:6a:32:b0:14:86:01:1c:f9:
63:6a:24:a7:e5:ba:c8:d3:d3:ba:8a:7c:26:7d:5b:f5:c0:d1:
dc:db:9d:25:8a:eb:c4:5b:66:2f:13:af:29:85:77:b8:01:19:
d3:18:c2:73:fd:89:98:a2:9b:b4:44:ce:02:fc:de:7e:ab:20:
07:b8:66:84:b6:f7:bb:a7:a3:cc:19:8c:1e:2f:4d:2c:46:94:
7e:4c:81:ba:37:c6:15:28:da:9c:62:5c:0d:85:ce:4d:94:1f:
cf:aa:0a:95:d0:36:cc:68:3c:ff:4e:b8:ce:74:d2:12:6a:8d:
1b:04:e6:7e:b7:3a:32:af:6c:c2:ca:4c:60:7e:62:9a:f3:52:
d1:23:c2:1d:05:0a:b2:4c:73:ee:2a:b5:a2:55:b9:e0:9e:b7:
e9:34:6a:d2:03:24:7f:64:db:db:bd:12:01:52:9c:e7:10:21:
57:60:ca:d5:4b:50:8f:8d:9a:ee:2c:d4:27:79:8e:19:83:ed:
8c:1a:64:48:e6:55:c1:52:21:8b:41:50:cb:18:7f:c6:81:8b:
a0:66:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:49 2024 by rpki-client on console-ams.rpki-client.org