Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/u7qCoSPC_R1FTmWXU5kAglghgVk.roa
File: u7qCoSPC_R1FTmWXU5kAglghgVk.roa (raw, json)
Hash identifier: Uhswmbg3JJOb3OHivokHSuWnEc2ADltUnLhKs07urAI=
Subject key identifier: BB:BA:82:A1:23:C2:FD:1D:45:4E:65:97:53:99:00:82:58:21:81:59
Certificate issuer: /CN=5c76eff26884bf006207d722b3b01a44d2b56199
Certificate serial: 0185704BCFEEEC4534B0A7AD592B067E11B4
Authority key identifier: 5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/u7qCoSPC_R1FTmWXU5kAglghgVk.roa
Signing time: Mon 02 Jan 2023 02:24:54 +0000
ROA not before: Mon 02 Jan 2023 02:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6799
IP address blocks: 185.174.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Sep 2023 06:39:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:cf:ee:ec:45:34:b0:a7:ad:59:2b:06:7e:11:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c76eff26884bf006207d722b3b01a44d2b56199
Validity
Not Before: Jan 2 02:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbba82a123c2fd1d454e65975399008258218159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:de:65:de:86:94:09:81:c7:eb:e7:24:4d:
a7:57:cd:b7:8b:69:5d:78:e7:e7:8e:b9:b9:1e:5f:
94:e8:7e:67:c5:1e:1c:8f:f3:65:83:8e:96:5f:56:
fb:ee:00:95:11:37:8d:4c:11:f8:c9:4a:ce:19:46:
1d:37:76:2a:76:08:3e:33:5b:7f:ae:79:f9:64:92:
d7:fd:f6:fe:4d:70:7a:47:17:86:69:78:d3:11:db:
98:e3:ea:6a:d5:95:ae:d3:96:07:d2:02:00:a1:1b:
0f:83:78:ff:b1:98:e3:20:e6:43:17:f5:1b:e4:65:
c0:7c:a2:4b:a8:6b:37:8a:b4:0a:19:5d:d6:06:fb:
0b:b8:06:55:2b:8e:14:82:bb:30:02:65:8b:81:b4:
37:93:63:5f:e0:63:7b:69:22:fe:52:05:ba:3f:49:
6a:84:d6:8b:1a:38:36:ca:2e:96:ed:1d:03:bd:aa:
49:c1:e6:a4:23:08:a8:62:ed:a2:d7:5a:41:c3:85:
a9:50:77:56:02:30:e4:af:9e:a5:3e:f1:97:83:ce:
63:13:79:a0:da:32:ab:f3:10:34:7e:21:b9:f4:50:
2f:e6:ae:3d:dc:dc:56:86:6e:13:a3:4b:db:cf:d8:
09:c2:52:62:17:35:9a:94:3f:06:86:bb:f7:2d:09:
24:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BA:82:A1:23:C2:FD:1D:45:4E:65:97:53:99:00:82:58:21:81:59
X509v3 Authority Key Identifier:
keyid:5C:76:EF:F2:68:84:BF:00:62:07:D7:22:B3:B0:1A:44:D2:B5:61:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHbv8miEvwBiB9cis7AaRNK1YZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/u7qCoSPC_R1FTmWXU5kAglghgVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/862232-58d7-4c1d-b198-660411b9d167/1/XHbv8miEvwBiB9cis7AaRNK1YZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.56.0/24
Signature Algorithm: sha256WithRSAEncryption
84:84:b8:1e:31:a5:27:95:3b:0c:74:10:88:d0:a8:24:a9:42:
17:95:b5:2d:ff:91:be:5f:93:59:09:e8:6c:e6:10:c1:12:c9:
f4:f6:dc:38:77:3e:88:62:a1:37:f7:3c:f8:94:43:3f:f5:ff:
e0:0a:7f:75:34:a5:90:7b:1d:1c:6b:22:92:93:72:44:ee:8a:
87:64:ea:a2:97:b0:d1:e1:4f:a2:e1:a1:b9:5d:08:3c:67:88:
60:38:6c:04:4a:68:c7:4b:73:0f:65:9d:dc:37:af:71:26:04:
c2:4c:86:78:f2:9b:18:6c:bd:62:98:7a:15:db:9c:d8:7b:32:
9c:54:89:fa:b2:5b:47:94:15:77:d0:7a:f4:d3:26:9a:99:c3:
08:dd:2b:36:06:14:f4:dd:30:6e:8b:a3:b7:23:79:86:d8:09:
56:3c:0c:dc:87:c9:02:c3:9c:9f:60:a6:b5:7e:49:c1:03:04:
ca:21:77:e0:23:98:5b:2d:e0:50:25:23:65:f9:91:ad:d6:bc:
d9:88:2a:10:ab:3c:a4:a3:30:9c:74:11:43:c9:46:a1:01:a5:
27:1b:d5:d6:c4:1a:0a:95:f9:77:6d:9e:7f:45:e4:f8:85:a9:
7b:8f:7b:db:a2:07:02:38:78:32:62:d2:4b:1c:84:e2:4b:9d:
b9:2d:aa:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwS8/u7EU0sKetWSsGfhG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNzZlZmYyNjg4NGJmMDA2MjA3ZDcyMmIzYjAxYTQ0ZDJi
NTYxOTkwHhcNMjMwMTAyMDIyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYmJhODJhMTIzYzJmZDFkNDU0ZTY1OTc1Mzk5MDA4MjU4MjE4MTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuALeZd6GlAmBx+vnJE2nV823i2ld
eOfnjrm5Hl+U6H5nxR4cj/Nlg46WX1b77gCVETeNTBH4yUrOGUYdN3Yqdgg+M1t/
rnn5ZJLX/fb+TXB6RxeGaXjTEduY4+pq1ZWu05YH0gIAoRsPg3j/sZjjIOZDF/Ub
5GXAfKJLqGs3irQKGV3WBvsLuAZVK44UgrswAmWLgbQ3k2Nf4GN7aSL+UgW6P0lq
hNaLGjg2yi6W7R0DvapJweakIwioYu2i11pBw4WpUHdWAjDkr56lPvGXg85jE3mg
2jKr8xA0fiG59FAv5q493NxWhm4To0vbz9gJwlJiFzWalD8Ghrv3LQkkZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLu6gqEjwv0dRU5ll1OZAIJYIYFZMB8GA1UdIwQY
MBaAFFx27/JohL8AYgfXIrOwGkTStWGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NjIyMzItNThkNy00YzFkLWIxOTgt
NjYwNDExYjlkMTY3LzEvdTdxQ29TUENfUjFGVG1XWFU1a0FnbGdoZ1ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NjIyMzItNThkNy00YzFkLWIxOTgtNjYwNDExYjlkMTY3
LzEvWEhidjhtaUV2d0JpQjljaXM3QWFSTksxWVprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAua44MA0G
CSqGSIb3DQEBCwUAA4IBAQCEhLgeMaUnlTsMdBCI0KgkqUIXlbUt/5G+X5NZCehs
5hDBEsn09tw4dz6IYqE39zz4lEM/9f/gCn91NKWQex0cayKSk3JE7oqHZOqil7DR
4U+i4aG5XQg8Z4hgOGwESmjHS3MPZZ3cN69xJgTCTIZ48psYbL1imHoV25zYezKc
VIn6sltHlBV30Hr00yaamcMI3Ss2BhT03TBui6O3I3mG2AlWPAzch8kCw5yfYKa1
fknBAwTKIXfgI5hbLeBQJSNl+ZGt1rzZiCoQqzykozCcdBFDyUahAaUnG9XWxBoK
lfl3bZ5/ReT4hal7j3vbogcCOHgyYtJLHITiS525LaoL
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:31 2024 by rpki-client on console-fra.rpki-client.org