Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/56bsJQzcS3zgeyODEc550yKIwcc.roa
File: 56bsJQzcS3zgeyODEc550yKIwcc.roa (raw, json)
Hash identifier: polXz5vdv4r1fS+G08AgJ+uUTrCKcaUdI1c3o6nyEL4=
Subject key identifier: E7:A6:EC:25:0C:DC:4B:7C:E0:7B:23:83:11:CE:79:D3:22:88:C1:C7
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 01856D4198BEBDEEAAE4EF91E219E7602BB7
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/56bsJQzcS3zgeyODEc550yKIwcc.roa
Signing time: Sun 01 Jan 2023 12:14:53 +0000
ROA not before: Sun 01 Jan 2023 12:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48101
IP address blocks: 185.244.250.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:98:be:bd:ee:aa:e4:ef:91:e2:19:e7:60:2b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Jan 1 12:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7a6ec250cdc4b7ce07b238311ce79d32288c1c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3c:07:72:95:b5:4b:26:7a:49:67:f9:34:86:
c2:65:1a:d5:78:49:45:38:95:8a:3c:0a:aa:4b:46:
35:05:81:3d:79:b0:c0:97:62:ff:db:8d:58:05:34:
00:5e:a2:87:d2:73:32:f9:3b:e2:3a:c5:e5:a1:3c:
f5:c9:89:fb:87:c3:70:95:1d:81:57:7e:f6:25:ea:
c0:18:82:65:1b:af:f5:a7:b9:7e:aa:0a:76:ee:01:
e2:58:b3:36:1f:e4:80:45:9c:f4:06:c1:08:a3:b0:
db:ae:d5:9e:fc:04:60:fb:6f:4e:02:ae:f0:be:1a:
22:9d:ac:f5:2a:37:e0:e2:01:0e:46:7d:97:a5:7e:
28:7d:a6:0d:71:dc:60:fa:4b:71:70:9f:48:19:6c:
89:98:4f:e3:2d:fe:7f:cf:29:2d:62:a4:7f:95:e3:
5b:01:3f:97:ee:b3:e4:ac:9d:bb:ff:ab:e6:1b:67:
4a:4c:93:2d:e6:66:2f:9a:20:2f:b1:55:67:81:4c:
cc:63:a1:f2:26:af:d3:2c:42:dc:db:37:09:53:d2:
10:17:d0:2f:39:54:2b:a8:95:a3:9e:83:ca:03:23:
2d:40:33:cd:95:b5:0f:84:27:87:59:16:7c:d6:d0:
d5:29:25:78:11:dd:4d:d2:53:c3:dc:fa:e3:c3:7c:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A6:EC:25:0C:DC:4B:7C:E0:7B:23:83:11:CE:79:D3:22:88:C1:C7
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/56bsJQzcS3zgeyODEc550yKIwcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.250.0/23
Signature Algorithm: sha256WithRSAEncryption
88:f8:0b:37:74:ff:b0:43:7b:5f:0e:78:b9:fa:84:cf:51:ec:
75:81:73:4f:3c:33:a5:31:76:98:fd:39:c9:fc:8c:97:1c:00:
8f:8c:66:d6:cb:e5:80:92:91:48:7b:b3:5c:9a:29:8d:fc:f9:
04:1a:ff:e1:41:bd:35:2c:52:8b:df:51:3e:8c:9c:5d:90:2e:
90:f3:bd:63:3b:34:3d:ef:1e:1d:77:e2:55:65:f1:9b:7f:52:
52:23:d7:22:7e:3a:d6:73:09:66:46:9f:15:70:c2:03:eb:70:
b9:6d:2f:a4:ce:24:2b:87:68:0c:3a:cb:fb:03:20:1a:4d:75:
4a:2b:35:ad:d2:63:a5:02:11:83:86:1a:4c:47:4f:e9:af:58:
21:f2:46:44:cf:29:39:47:3d:bf:8b:39:f7:4b:e2:0c:66:97:
84:43:f9:69:d2:14:e9:b1:d3:cc:20:27:a6:ac:18:17:9e:49:
68:ba:65:b4:bc:bd:87:20:9c:20:af:d7:d2:cc:02:21:88:35:
a7:6f:92:2f:45:ed:4b:f0:c5:05:85:2e:d6:f7:e1:02:82:27:
57:9b:9f:0d:04:37:d0:01:1d:26:fb:1d:88:0d:21:3f:65:a9:
bb:0c:01:8b:b6:39:c4:3d:7d:fb:07:ea:50:46:59:5a:86:9f:
86:73:1d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:04 2024 by rpki-client on console-fra.rpki-client.org