Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/BgJmUby7EXjmcH0Hq392Dh5NZ4A.roa
File: BgJmUby7EXjmcH0Hq392Dh5NZ4A.roa (raw, json)
Hash identifier: j2dhhMGGkFR2FtQkQ4L49MOpAjcD5AB/9chcUOJCFXs=
Subject key identifier: 06:02:66:51:BC:BB:11:78:E6:70:7D:07:AB:7F:76:0E:1E:4D:67:80
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 01856D6638C9533663AAE021491091A35ACB
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/BgJmUby7EXjmcH0Hq392Dh5NZ4A.roa
Signing time: Sun 01 Jan 2023 12:54:53 +0000
ROA not before: Sun 01 Jan 2023 12:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50624
IP address blocks: 185.23.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:38:c9:53:36:63:aa:e0:21:49:10:91:a3:5a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Jan 1 12:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06026651bcbb1178e6707d07ab7f760e1e4d6780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:e2:32:11:eb:61:7e:47:3e:32:46:c3:59:
67:9e:d0:10:ac:b1:52:85:1b:55:d8:1e:f9:b8:87:
0d:d3:f8:f9:c0:48:16:ab:9c:82:1e:03:f5:fd:81:
31:9d:8b:f6:12:84:db:1d:a3:4b:a9:83:fa:a3:b0:
a1:47:40:5b:d7:4a:f5:47:94:95:16:a3:39:47:69:
49:bd:20:b5:89:30:04:4f:98:45:1c:e1:40:b9:49:
40:10:1a:3b:6e:02:6e:97:07:85:3e:13:96:95:6b:
d0:80:1d:64:f2:c2:bd:0e:49:42:60:6f:08:95:47:
a6:9a:8a:c1:7b:ad:5f:16:a9:9b:76:2e:41:83:dc:
b8:1b:cb:14:2a:94:6f:c6:41:d4:4f:88:88:13:cf:
34:9f:13:8b:15:c5:65:37:fd:fb:c6:a4:50:02:53:
98:61:97:01:f9:d9:37:72:f5:0f:44:0f:bf:59:d3:
85:b8:d2:75:f4:4a:c0:e8:88:21:17:cf:58:fc:1f:
20:8a:6b:85:7d:48:18:9f:5d:1a:cb:9b:bd:31:e6:
81:c5:30:04:d2:6d:b2:35:9b:eb:10:e2:d6:ff:16:
d4:1a:c3:49:f6:9a:33:89:22:58:9f:6a:87:2b:59:
fa:2b:d8:15:3e:f6:97:6b:42:99:e9:fb:a3:b1:31:
58:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:02:66:51:BC:BB:11:78:E6:70:7D:07:AB:7F:76:0E:1E:4D:67:80
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/BgJmUby7EXjmcH0Hq392Dh5NZ4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.188.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:08:d1:74:8f:b1:ff:d3:e6:2d:36:56:48:f1:95:74:87:4f:
22:9e:d9:3a:91:1c:de:d6:da:d1:67:47:9c:8b:d7:8e:3b:bd:
5f:34:aa:e6:bf:75:c6:8d:62:22:9d:30:6b:11:3d:58:54:a7:
4c:34:04:d7:43:ef:05:d9:82:b4:ca:62:d6:2e:04:a8:3e:2d:
a6:a3:a6:63:c9:ef:37:5f:45:24:83:76:37:aa:41:1b:2d:89:
d7:fa:06:f3:ce:9c:e8:67:b1:02:45:22:e2:1c:0c:06:49:84:
66:e7:8f:62:7f:6b:3f:60:86:91:82:77:b1:b4:a3:91:21:bd:
2d:32:e4:41:36:0e:8c:6f:e8:25:6f:5d:3e:73:8c:99:43:00:
bb:10:bd:0d:5a:e7:2d:84:69:08:12:1b:8b:9c:5c:2b:25:5c:
c6:9e:b0:e2:17:aa:a0:be:77:43:73:b9:b2:e8:0a:88:e8:04:
2a:f6:87:21:66:75:79:ac:50:f3:62:28:31:fb:ba:72:4e:9f:
66:e5:73:74:f3:40:54:54:db:6b:01:8a:22:31:24:f0:cf:b1:
eb:9e:56:6a:6d:e0:38:d3:8d:1c:84:ac:0a:86:d8:68:22:3a:
6e:a5:8f:96:a9:4c:6f:b1:34:bc:37:19:39:3e:b9:e3:6a:b9:
b9:81:f0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:04 2024 by rpki-client on console-fra.rpki-client.org