Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/bHx4-qYIK1NeGeUMTEQR_oRqWQ0.roa
File: bHx4-qYIK1NeGeUMTEQR_oRqWQ0.roa (raw, json)
Hash identifier: aabhrLERuKYit66aWsxYKljir10/+TtY0NJSUxDZ8cM=
Subject key identifier: 6C:7C:78:FA:A6:08:2B:53:5E:19:E5:0C:4C:44:11:FE:84:6A:59:0D
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 018572D5CF80A786EBD0F9F82F55E06072EB
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/bHx4-qYIK1NeGeUMTEQR_oRqWQ0.roa
Signing time: Mon 02 Jan 2023 14:14:52 +0000
ROA not before: Mon 02 Jan 2023 14:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 185.112.56.0/23 maxlen: 24
213.170.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Jan 2023 16:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:cf:80:a7:86:eb:d0:f9:f8:2f:55:e0:60:72:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jan 2 14:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c7c78faa6082b535e19e50c4c4411fe846a590d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0c:44:ca:64:c2:6a:d6:0f:bb:27:25:cf:35:
7e:3e:e2:e4:7e:64:1a:0a:91:f5:58:a9:d6:44:41:
44:6a:4c:c5:80:0e:e0:e7:93:e0:d0:25:b4:8a:85:
80:a8:01:0e:e7:df:e5:44:fd:ca:87:a8:26:bb:cd:
6d:33:a6:11:d1:8c:c3:69:e1:2b:3a:6e:e0:d4:5a:
4c:75:59:4f:d0:a8:95:9f:96:05:3a:43:41:45:d3:
80:ff:48:30:b2:06:82:5f:d0:fe:03:3c:e4:45:7d:
a2:b4:a3:04:80:3a:48:65:41:d8:25:d5:bf:c4:02:
40:c3:42:00:78:d4:46:95:bc:1f:fd:74:77:c3:ba:
0e:e0:ea:36:d1:4a:82:54:ff:4d:5f:d4:b7:7c:fe:
e8:08:3c:79:f6:fd:25:83:09:1a:6d:33:6c:c5:f6:
27:bb:69:ef:1c:99:11:83:01:1f:2c:1a:64:18:81:
d0:eb:10:21:82:09:6e:4c:a4:8b:88:78:c0:87:e7:
47:a7:d3:ea:b3:2a:49:44:74:4a:a2:d1:2e:4b:16:
1a:8f:17:96:2d:76:3e:b8:0e:5c:73:06:8a:d7:cd:
cf:e7:68:12:80:00:39:ec:54:8e:1a:ee:88:af:a7:
f8:71:70:ba:f7:33:f0:c3:ed:4e:99:a6:56:d2:01:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7C:78:FA:A6:08:2B:53:5E:19:E5:0C:4C:44:11:FE:84:6A:59:0D
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/bHx4-qYIK1NeGeUMTEQR_oRqWQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.56.0/23
213.170.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c8:e4:be:aa:b2:4f:1d:d4:e0:39:f2:1d:17:8b:eb:14:27:
d3:a7:c4:0b:f0:16:b6:1a:26:14:36:e5:37:9b:cc:fe:6d:38:
e5:14:cd:c5:1b:7c:48:72:58:90:f2:b5:93:78:2e:7c:9d:c7:
98:ed:cc:94:b8:8f:62:9b:6e:d8:57:b7:79:18:76:7b:0b:39:
0e:a3:76:c5:97:4f:99:5f:89:d3:87:c6:a7:c6:c0:1d:f3:a6:
6a:3d:0f:25:c1:4f:2e:06:18:b7:33:2b:9d:64:d9:04:92:2d:
26:9e:b7:16:40:8c:6c:c3:9e:4a:35:86:79:70:ab:fe:8d:83:
18:80:06:f5:cb:43:26:e0:15:52:a9:aa:3b:31:95:4c:6e:fa:
7a:9d:32:03:71:bf:bc:dc:f3:d5:b2:a6:70:f3:cc:f6:18:59:
3c:39:bf:37:20:a4:7c:26:0b:30:ef:50:3b:0d:86:16:42:68:
bb:6e:21:9a:4d:a4:1b:fc:23:8f:f0:8d:16:ce:ad:15:5b:f7:
62:df:bd:a3:03:3f:93:0d:34:5a:bf:67:d8:22:40:09:72:50:
f7:39:53:17:ae:af:b2:a3:dd:9a:ff:01:8d:1d:55:f8:17:bc:
76:8a:f0:98:d2:e1:d5:ea:0a:d2:82:b0:d4:e9:a9:4d:76:9c:
67:b8:73:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org