Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/56bgLm5Q1VmPtkZoO0zVkAphv8I.roa
File: 56bgLm5Q1VmPtkZoO0zVkAphv8I.roa (raw, json)
Hash identifier: XwyuSkybP9kK2qFKRqTF0WqS8eGD+JdSNxmwVzySeC8=
Subject key identifier: E7:A6:E0:2E:6E:50:D5:59:8F:B6:46:68:3B:4C:D5:90:0A:61:BF:C2
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B63390CBBB5037DDDABF00D859607D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/56bgLm5Q1VmPtkZoO0zVkAphv8I.roa
Signing time: Mon 02 Jan 2023 09:00:44 +0000
ROA not before: Mon 02 Jan 2023 09:00:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46573
IP address blocks: 185.230.53.0/24 maxlen: 24
45.8.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jan 2023 08:17:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:33:90:cb:bb:50:37:dd:da:bf:00:d8:59:60:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7a6e02e6e50d5598fb646683b4cd5900a61bfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b3:0a:57:1b:02:68:95:d6:d0:e8:8e:3e:ea:
be:17:6f:0e:e4:57:39:70:5c:82:17:c7:8d:59:96:
98:8f:06:6e:1c:28:67:8d:97:70:74:c3:63:dd:e1:
54:84:db:8c:9e:05:46:dd:16:1d:cf:db:13:43:51:
56:0e:da:10:b2:8a:64:4b:1c:58:3a:1a:15:69:36:
54:74:b6:b6:39:d4:6f:5f:9d:b0:68:0b:ba:b5:b1:
d4:a4:84:2f:88:42:28:1d:11:78:be:ad:43:ae:6e:
cc:87:05:03:88:af:70:d6:8b:dc:db:9c:ff:b2:d5:
c0:e0:08:ea:d6:e8:2a:55:2d:c2:4d:38:82:f5:1f:
13:a6:89:c4:0e:a7:34:ad:71:c2:21:e3:4b:03:38:
0b:5d:69:a8:53:5f:56:1a:13:74:d4:bc:90:1c:da:
a6:0d:f0:d8:b6:87:b7:ae:5f:89:99:d0:4d:d2:a3:
b8:2b:a7:8e:d8:2c:48:a0:68:be:62:7d:86:52:ab:
b0:22:d3:a0:68:65:cd:d6:7e:e2:76:a9:be:48:a9:
22:d9:1b:e7:3f:f1:d3:3e:03:9e:8d:d3:fa:5f:bf:
4f:94:4c:05:f0:55:83:2d:e3:f7:f3:aa:0c:b2:55:
ab:d3:6e:cc:65:b6:23:f0:7f:71:b8:b6:d0:70:1d:
ce:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A6:E0:2E:6E:50:D5:59:8F:B6:46:68:3B:4C:D5:90:0A:61:BF:C2
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/56bgLm5Q1VmPtkZoO0zVkAphv8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
185.230.53.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1e:9d:0f:6b:70:db:6e:34:b3:38:88:de:37:20:8c:4f:aa:
c8:ae:d2:15:3b:30:94:0d:49:8d:49:1c:47:68:0d:78:a6:c4:
20:ff:75:13:e3:96:d4:14:eb:7b:3d:2b:fa:bb:9c:fb:c0:42:
c7:5a:34:a9:cc:67:ae:94:02:10:a9:c0:07:e5:73:c9:30:6c:
04:48:35:b1:ce:34:99:cf:84:02:7d:8f:44:59:df:23:a5:6b:
bd:3d:25:19:b0:8f:aa:27:c2:1e:0a:9c:09:3f:bd:b7:ac:26:
71:c0:e6:a5:8b:d0:3d:a0:64:28:8d:8e:37:6b:06:6c:b5:6e:
5e:5b:06:99:c2:ec:2c:0a:40:27:62:20:55:80:5e:bd:93:bd:
31:18:8c:48:c0:fd:46:e0:1c:c3:30:c2:ff:ae:09:6e:58:87:
79:a2:b4:5e:c2:bb:d2:bf:7a:64:4e:b3:ef:b2:2c:49:8e:13:
25:a2:a5:91:16:55:c1:82:26:6d:58:15:2f:a4:33:18:3d:ab:
47:12:9f:66:17:62:2f:b6:34:ef:73:58:55:90:45:09:cc:a6:
52:d1:b7:f5:5a:68:3f:70:37:3a:1a:26:57:3b:95:02:63:7b:
1d:ef:af:b3:f9:01:a8:72:94:98:cd:55:a5:85:5e:60:fa:9a:
8e:ea:ae:4e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxtjOQy7tQN93avwDYWWB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTAyMDkwMDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2E2ZTAyZTZlNTBkNTU5OGZiNjQ2NjgzYjRjZDU5MDBhNjFiZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrMKVxsCaJXW0OiOPuq+F28O5Fc5
cFyCF8eNWZaYjwZuHChnjZdwdMNj3eFUhNuMngVG3RYdz9sTQ1FWDtoQsopkSxxY
OhoVaTZUdLa2OdRvX52waAu6tbHUpIQviEIoHRF4vq1Drm7MhwUDiK9w1ovc25z/
stXA4Ajq1ugqVS3CTTiC9R8TponEDqc0rXHCIeNLAzgLXWmoU19WGhN01LyQHNqm
DfDYtoe3rl+JmdBN0qO4K6eO2CxIoGi+Yn2GUquwItOgaGXN1n7idqm+SKki2Rvn
P/HTPgOejdP6X79PlEwF8FWDLeP386oMslWr027MZbYj8H9xuLbQcB3OkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOem4C5uUNVZj7ZGaDtM1ZAKYb/CMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvNTZiZ0xtNVExVm1QdGtab08welZrQXBodjhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQgXAwQA
ueY1MA0GCSqGSIb3DQEBCwUAA4IBAQA2Hp0Pa3DbbjSzOIjeNyCMT6rIrtIVOzCU
DUmNSRxHaA14psQg/3UT45bUFOt7PSv6u5z7wELHWjSpzGeulAIQqcAH5XPJMGwE
SDWxzjSZz4QCfY9EWd8jpWu9PSUZsI+qJ8IeCpwJP723rCZxwOali9A9oGQojY43
awZstW5eWwaZwuwsCkAnYiBVgF69k70xGIxIwP1G4BzDMML/rgluWId5orRewrvS
v3pkTrPvsixJjhMloqWRFlXBgiZtWBUvpDMYPatHEp9mF2IvtjTvc1hVkEUJzKZS
0bf1Wmg/cDc6GiZXO5UCY3sd76+z+QGocpSYzVWlhV5g+pqO6q5O
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org