Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/blKQnr8a7_cFqvbBkTLXAtPN-BY.roa
File: blKQnr8a7_cFqvbBkTLXAtPN-BY.roa (raw, json)
Hash identifier: AMLIrUsUBUBcZTUAalTpOZAPLI2o0GM+DNENq7Geups=
Subject key identifier: 6E:52:90:9E:BF:1A:EF:F7:05:AA:F6:C1:91:32:D7:02:D3:CD:F8:16
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 018CC79558ED00D495D15F078D0DD2D37A22
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/blKQnr8a7_cFqvbBkTLXAtPN-BY.roa
Signing time: Tue 02 Jan 2024 00:31:42 +0000
ROA not before: Tue 02 Jan 2024 00:31:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197207
IP address blocks: 185.131.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:58:ed:00:d4:95:d1:5f:07:8d:0d:d2:d3:7a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Jan 2 00:31:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e52909ebf1aeff705aaf6c19132d702d3cdf816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:57:c7:08:7b:08:25:74:07:f4:8d:0d:83:
8b:2c:a8:3e:c6:50:d0:46:56:2a:f0:c4:43:9b:7f:
4f:d3:fc:67:d3:bf:be:e7:ac:67:1b:11:a2:33:b5:
ed:55:b7:bb:4b:a5:d4:fe:3d:9b:80:bf:a5:21:1f:
cb:a7:94:3c:bb:fb:db:79:bf:6f:c5:9e:6e:3c:1f:
77:af:33:cb:56:d7:a2:a2:ad:f4:95:f4:0a:4a:c9:
c3:ae:b2:5e:ee:20:87:f2:22:41:67:49:64:76:d6:
4a:09:f2:7d:5f:12:da:9f:51:b6:df:ea:cd:f3:af:
9e:74:a2:4f:c7:ac:6c:e6:7c:f0:c2:68:4c:1c:75:
0a:02:7c:9c:42:63:ae:46:ca:d3:4c:d3:a7:c0:2d:
79:b1:6f:f6:d3:2b:8e:6a:31:1a:87:08:b6:74:35:
25:8a:58:f7:c5:f5:0a:ca:2c:b3:2f:9b:50:49:b4:
e7:e2:80:ec:ce:d9:6f:91:a3:28:f4:fa:46:16:40:
57:c7:3c:cc:a2:8b:7b:92:a5:25:60:b1:a4:2e:3b:
40:36:ab:cf:57:2c:04:0c:04:90:ff:13:2c:c8:6b:
03:68:b9:8b:31:13:4f:b3:79:c0:00:51:43:82:d2:
38:10:53:3d:06:42:b9:71:a0:32:4a:1b:3b:61:97:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:52:90:9E:BF:1A:EF:F7:05:AA:F6:C1:91:32:D7:02:D3:CD:F8:16
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/blKQnr8a7_cFqvbBkTLXAtPN-BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.56.0/22
Signature Algorithm: sha256WithRSAEncryption
92:5a:5d:16:05:f9:35:24:12:8f:99:9d:cf:5d:1a:df:d5:fb:
26:a8:7d:b4:16:e1:2b:fd:1c:15:3e:8d:52:4d:c9:25:b7:e4:
00:22:20:00:0e:a9:45:b9:c8:ba:b1:0b:fe:ee:ab:fa:df:b1:
8a:9c:74:5a:7d:bd:82:67:b2:ce:93:f0:29:62:10:8e:a1:ea:
d4:dd:9e:79:91:5f:7c:cb:a4:9b:54:32:50:fb:3e:3d:4f:bf:
77:1c:30:2f:50:f1:91:6c:e8:ba:a5:b4:06:ec:45:47:58:a7:
0d:dc:c2:04:8b:75:76:bb:45:49:19:8c:00:0b:db:b6:49:71:
bd:43:2d:be:7b:ce:24:93:a7:b1:69:68:9f:f0:88:49:ed:3c:
31:9c:0c:b7:85:82:a6:28:e5:19:9c:f7:41:93:49:12:f0:86:
0d:4c:b8:bd:67:35:7b:f5:98:e9:9a:c8:93:0c:5e:79:7b:a7:
b1:f9:f1:78:99:b5:5c:fe:16:df:ad:01:c8:69:c1:c6:5f:ba:
1d:85:91:06:b3:f9:57:dc:b9:ba:62:1c:50:16:d7:dd:15:7f:
e9:04:fc:3b:19:43:e2:2d:74:b7:13:e9:58:9e:f3:3a:6a:47:
9a:1d:e6:1d:bb:e0:2c:3f:3f:e6:95:a3:a7:46:4b:a5:50:e3:
1b:70:0c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:13:17 2025 by rpki-client