Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/bQdaoWlD0_cFp8az85tDbC3e5rk.roa
File: bQdaoWlD0_cFp8az85tDbC3e5rk.roa (raw, json)
Hash identifier: bkw9HLEt10K14EQ7Y2wMSUbGM5AOyELPX/lpONWhGfg=
Subject key identifier: 6D:07:5A:A1:69:43:D3:F7:05:A7:C6:B3:F3:9B:43:6C:2D:DE:E6:B9
Certificate issuer: /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Certificate serial: 018570673F1DCC62993BC983D7EA627F14DE
Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/bQdaoWlD0_cFp8az85tDbC3e5rk.roa
Signing time: Mon 02 Jan 2023 02:54:52 +0000
ROA not before: Mon 02 Jan 2023 02:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61415
IP address blocks: 185.7.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:3f:1d:cc:62:99:3b:c9:83:d7:ea:62:7f:14:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Validity
Not Before: Jan 2 02:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d075aa16943d3f705a7c6b3f39b436c2ddee6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f9:27:3c:ce:b0:49:ed:c8:b1:9a:8d:89:79:
58:5d:3b:d5:3e:e4:08:36:ef:20:c7:ab:5b:79:dd:
f5:f8:c8:1d:3e:74:fd:6c:09:28:6a:03:b6:35:22:
c4:1f:f6:53:5b:2e:54:22:39:4f:fb:4f:28:96:26:
03:be:3e:74:21:53:7b:c5:a9:78:94:43:a8:69:72:
2f:c4:96:db:29:cc:17:8c:3e:44:55:d0:c1:5a:2a:
44:58:eb:44:53:ac:50:6e:d3:f9:0a:f3:2d:2e:c0:
56:fa:dd:87:f2:1b:42:0d:ea:0a:06:f4:d0:86:e6:
d0:45:7a:ad:24:63:4c:6e:a9:44:22:ef:5b:38:48:
4a:8c:3d:fc:7b:8f:54:d0:07:7d:58:13:a3:96:36:
c1:d6:29:4a:55:71:3f:fa:87:fe:7f:58:a1:68:b6:
9b:d1:b6:fb:35:aa:bd:21:e3:9b:ce:45:be:89:ea:
7c:3e:9c:32:93:dd:20:55:7d:a6:83:4e:5a:1b:a5:
c3:32:c8:b6:4d:97:df:74:0d:b8:5d:b4:0b:ee:55:
14:77:ee:26:80:bb:f3:b4:cc:c3:51:2c:16:8e:1c:
7a:91:bf:1a:9c:df:a5:5a:3c:14:59:41:6e:e6:1c:
2d:90:d9:e9:90:89:af:5b:9f:d7:b4:ae:46:e8:19:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:07:5A:A1:69:43:D3:F7:05:A7:C6:B3:F3:9B:43:6C:2D:DE:E6:B9
X509v3 Authority Key Identifier:
keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/bQdaoWlD0_cFp8az85tDbC3e5rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:45:62:e5:22:ac:25:b9:3e:5f:a4:2f:98:56:e9:32:54:53:
34:cb:12:44:16:4b:bd:50:ed:71:5b:6a:7b:3f:e9:3e:9d:bc:
d3:c0:12:c6:95:6a:b7:b0:16:fd:bc:dc:c5:07:be:00:03:15:
57:64:63:4d:92:30:18:e3:de:5b:e8:16:c2:95:5f:7c:bb:0a:
41:15:27:b1:3a:9b:4b:f6:b5:ba:2d:b3:80:f8:a0:43:64:33:
2c:12:b9:59:9a:db:91:15:14:4f:29:c4:9e:ad:ab:51:a0:c4:
6f:4f:06:07:97:c3:b2:6d:6f:31:96:09:f2:05:dc:57:d1:fb:
39:64:69:2c:34:a8:ef:34:7f:df:49:c2:3f:46:14:10:98:42:
b9:f3:30:ee:43:51:74:e5:a5:83:4b:90:e9:ff:a0:26:c0:84:
b1:82:93:e3:ae:47:69:ba:e6:f8:c1:f9:be:11:9e:1d:92:d5:
fe:b2:0b:4b:a3:bc:1a:50:b9:85:72:2a:ac:ec:70:2b:db:7e:
91:c0:90:67:81:a1:fd:74:e5:60:1b:a1:e4:ab:6f:3a:1f:6d:
39:45:6c:7f:0d:9e:e0:36:f2:8a:ab:30:6e:af:35:bb:d8:17:
b7:27:8b:70:d2:dd:7a:dd:1a:01:0f:ed:f1:16:31:08:e4:b5:
5f:c2:3f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:09 2024 by rpki-client on console-fra.rpki-client.org