Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7-cBNXylXP0FH47o4s95j-Otg8c.roa
File: 7-cBNXylXP0FH47o4s95j-Otg8c.roa (raw, json)
Hash identifier: vgf/TR8eLrX+BRNZBD67kddBb6IYFCj8HrToiHe+GBQ=
Subject key identifier: EF:E7:01:35:7C:A5:5C:FD:05:1F:8E:E8:E2:CF:79:8F:E3:AD:83:C7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B63AC40F25BDD68ADE4762EFF27C05
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7-cBNXylXP0FH47o4s95j-Otg8c.roa
Signing time: Mon 02 Jan 2023 09:00:46 +0000
ROA not before: Mon 02 Jan 2023 09:00:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198193
IP address blocks: 185.246.58.0/23 maxlen: 23
185.246.56.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:3a:c4:0f:25:bd:d6:8a:de:47:62:ef:f2:7c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efe701357ca55cfd051f8ee8e2cf798fe3ad83c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a3:8b:b5:b1:24:22:62:8c:62:dd:eb:a8:7e:
b8:d8:34:1a:32:de:6c:b9:44:e9:25:49:39:0c:63:
96:e8:d9:bc:35:55:04:9a:9e:2f:96:44:f7:5a:1e:
9c:83:f4:12:bb:74:d2:20:c1:70:bb:6d:18:f6:78:
cf:81:9e:3d:b9:03:d4:0b:73:36:f9:7a:14:62:08:
03:3a:df:45:fa:2a:4d:c0:9f:e8:e6:99:96:6b:6b:
fd:c9:05:a3:ba:db:44:b0:17:00:3d:35:31:4d:9d:
de:68:18:72:6d:03:b3:32:44:6c:d0:02:04:4a:28:
61:b4:63:17:1c:ed:3e:79:94:72:6d:1c:3c:e5:c6:
67:f5:e3:96:3b:a2:64:81:17:7c:63:26:49:46:1c:
68:94:29:02:88:76:33:c2:3e:ca:1b:76:84:34:b7:
88:d6:e0:46:e3:36:7d:cd:9d:8c:36:57:1c:16:17:
b9:19:e1:7c:35:95:02:b6:34:4d:19:c0:68:6d:74:
48:92:7d:19:79:4e:ee:91:e1:45:cd:c1:4a:1a:05:
a8:26:c7:3e:d3:20:cc:e7:d7:df:15:fa:48:c0:4c:
20:d7:58:79:05:f1:39:cc:c1:3e:b0:78:0c:ad:9d:
5d:3f:2a:45:e4:0c:37:bd:d0:91:0c:28:9a:34:79:
8d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E7:01:35:7C:A5:5C:FD:05:1F:8E:E8:E2:CF:79:8F:E3:AD:83:C7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7-cBNXylXP0FH47o4s95j-Otg8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.56.0/22
Signature Algorithm: sha256WithRSAEncryption
75:62:4b:7d:4e:0a:a9:e7:8b:df:57:92:ab:8f:a1:67:5c:66:
5f:5d:92:3c:d0:cc:37:25:1d:41:e8:73:f3:d9:31:5d:27:ce:
d5:72:38:88:70:f2:24:fb:00:9e:4f:52:d0:a6:fe:de:4c:f9:
d4:76:74:25:7c:f2:ba:4c:3c:37:36:66:30:db:d9:51:53:05:
e0:14:25:92:f1:31:4c:1e:e4:5d:6f:20:e5:c4:9e:c6:28:12:
4a:6e:8b:c5:a6:ce:95:fc:fa:d9:db:39:a0:31:ef:a0:26:54:
5a:a6:b2:02:b3:8d:f6:80:58:78:e4:5e:5b:12:73:76:f9:52:
cc:dc:38:e1:8e:87:bd:d7:f1:7c:df:76:cf:f7:be:78:2e:51:
28:f5:23:2b:64:1b:d5:4b:b9:d0:7f:89:63:c7:53:0b:39:34:
bb:a3:43:15:c8:a4:61:90:2d:8b:d4:8b:0f:86:f1:65:b4:56:
83:c6:9e:6f:ab:1b:21:74:39:34:30:51:87:80:28:d8:77:4e:
d6:07:b6:5d:60:b5:f2:71:7c:d7:6e:af:24:8b:6f:69:30:5d:
c8:3d:af:9b:bc:93:b0:24:56:1e:3c:bf:06:cb:07:99:9a:eb:
76:12:09:7c:ce:8a:cc:b9:35:b8:b7:66:96:0e:4b:83:c4:de:
5a:c3:a5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org