Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/lEqrikgC0ZkAxj-E7uSfRSy997A.roa
File: lEqrikgC0ZkAxj-E7uSfRSy997A.roa (raw, json)
Hash identifier: MoKpd7njhCZG2KOHXVYx+XzesVSnDHOyek0KmjaeWJI=
Subject key identifier: 94:4A:AB:8A:48:02:D1:99:00:C6:3F:84:EE:E4:9F:45:2C:BD:F7:B0
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 0186DAEEF36F65D4B87A940F5776342F5A0F
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/lEqrikgC0ZkAxj-E7uSfRSy997A.roa
Signing time: Mon 13 Mar 2023 12:25:38 +0000
ROA not before: Mon 13 Mar 2023 12:25:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206641
IP address blocks: 185.180.60.0/22 maxlen: 22
185.180.61.0/24 maxlen: 24
185.180.62.0/24 maxlen: 24
185.180.63.0/24 maxlen: 24
185.180.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:ee:f3:6f:65:d4:b8:7a:94:0f:57:76:34:2f:5a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Mar 13 12:25:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=944aab8a4802d19900c63f84eee49f452cbdf7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:63:0d:b0:65:f3:86:a2:d1:75:b4:d7:b6:
74:0e:c6:8d:37:9f:af:d6:56:e0:a4:83:07:0f:15:
93:8a:b1:b3:4b:30:73:cd:16:35:6a:71:f3:20:b9:
17:3f:0b:bd:ae:bb:5b:c4:a2:52:e9:75:41:81:50:
f1:75:3f:89:fa:2d:ae:16:55:25:f8:39:0b:ee:3e:
4a:f5:4b:5f:a1:7e:02:43:9f:17:90:8a:d7:2b:11:
f6:c4:67:12:10:f3:d3:0c:a8:ba:0b:a8:b8:25:4f:
1c:f6:9f:c7:15:ce:0b:62:b6:c2:ca:d7:64:d5:85:
e6:b6:5b:80:f2:8d:93:98:a9:d6:27:b0:d3:93:cb:
f4:e5:b2:11:2a:ff:39:ad:6b:83:e2:cd:15:a6:a3:
b9:34:9b:b2:de:47:61:17:eb:c9:4a:ba:ce:bb:67:
37:b4:f3:1b:6d:6d:cc:65:af:58:14:69:83:19:1c:
0f:2f:15:37:23:9a:37:7d:4d:ea:d6:b5:cd:fb:c6:
92:cc:1f:1e:76:23:ef:1e:cb:ec:0d:61:68:53:1c:
c3:15:5d:21:3b:eb:b2:70:f1:d7:67:b9:ca:4d:5a:
a1:46:8e:24:1c:1c:5e:26:90:89:43:6a:26:4c:4f:
25:d5:e2:4b:21:92:77:01:50:e7:05:71:d5:ad:b8:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4A:AB:8A:48:02:D1:99:00:C6:3F:84:EE:E4:9F:45:2C:BD:F7:B0
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/lEqrikgC0ZkAxj-E7uSfRSy997A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.180.60.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:12:43:dd:17:0d:a0:20:00:3d:bf:ee:fb:e0:7c:11:ae:24:
30:ce:78:05:96:bb:0f:e6:25:b6:3c:0f:0a:42:e6:5f:45:7d:
4b:aa:01:4f:03:f6:db:58:fe:a8:be:d9:37:af:de:63:e4:9d:
6f:42:d3:f4:24:84:c7:23:95:b0:dd:a4:76:a7:e5:58:eb:19:
d4:3f:11:ef:4a:d9:ec:9e:c8:56:97:96:53:40:16:85:97:15:
6f:9c:f0:42:bc:f3:16:fd:49:d1:88:3a:5c:ab:fa:ec:3a:de:
25:24:ea:2e:fe:20:4c:d0:ad:89:da:c6:b6:e2:2d:8b:8c:07:
78:be:47:cb:9e:b9:1d:0b:0f:0d:2f:f4:75:db:84:a3:26:0a:
5f:13:3a:04:ba:db:eb:13:22:48:64:f3:75:15:32:1a:20:8f:
77:bb:66:3f:5e:83:19:68:b5:1f:1c:ed:a9:8e:24:0a:77:e8:
32:89:91:13:52:f4:cc:53:ba:23:5e:ab:da:23:39:89:0f:6f:
4a:5f:e5:d0:f9:b3:34:dc:f2:eb:d8:3e:9f:3e:2c:95:11:d0:
f5:62:22:7b:6c:8b:34:5a:97:9a:b2:ec:ff:08:d1:ab:51:66:
e2:76:d9:05:9a:0d:2b:11:4b:1e:61:f6:ff:5c:65:fa:31:e6:
fe:ad:8d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:49 2024 by rpki-client on console-ams.rpki-client.org