Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/bE6UeY0Ugbjfu6ZqJeQEYdeqXBc.roa
File: bE6UeY0Ugbjfu6ZqJeQEYdeqXBc.roa (raw, json)
Hash identifier: FaSqYZhX0jzAysmh/LmEMJEeXUhKAiBUEFntPY8Jv28=
Subject key identifier: 6C:4E:94:79:8D:14:81:B8:DF:BB:A6:6A:25:E4:04:61:D7:AA:5C:17
Certificate issuer: /CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Certificate serial: 0185720C710BA5E0990230D7EB40A0861000
Authority key identifier: FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/bE6UeY0Ugbjfu6ZqJeQEYdeqXBc.roa
Signing time: Mon 02 Jan 2023 10:34:56 +0000
ROA not before: Mon 02 Jan 2023 10:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5524
IP address blocks: 185.42.56.0/22 maxlen: 22
2a04:8e40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 17 Aug 2023 08:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:71:0b:a5:e0:99:02:30:d7:eb:40:a0:86:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc35877cc038bffdb97bb3d6ea216ab52b3a0582
Validity
Not Before: Jan 2 10:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c4e94798d1481b8dfbba66a25e40461d7aa5c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:eb:83:8c:2f:70:d3:db:63:cc:23:ce:5a:
63:48:8f:de:3f:2f:fe:42:64:b5:ae:c8:88:d7:11:
42:c3:27:13:16:cb:89:6a:ce:ca:97:a2:11:45:52:
44:2b:25:bc:69:b8:d4:2b:1b:dc:95:58:42:d3:f7:
94:45:5f:a1:17:f4:0f:7a:6d:e8:8a:df:47:c6:b7:
ce:b4:a4:af:8c:94:ba:2c:f6:f7:09:4d:47:73:92:
14:c6:b3:63:9f:33:e6:0a:1a:ba:34:5e:61:af:ee:
ce:9a:30:a8:d7:44:b8:17:11:46:33:83:6f:8a:a5:
0e:76:b9:94:fc:96:3e:5f:cc:86:9b:ea:71:1f:bd:
e4:d3:47:da:f9:0b:c1:b1:c9:79:f4:a3:82:7e:e1:
59:68:f9:a0:a0:78:43:8e:0c:78:74:b3:e4:34:77:
2a:94:5f:eb:03:18:5b:06:d2:9e:f6:1a:5c:f4:77:
17:3d:93:01:c8:c3:73:6e:94:3c:95:eb:61:e6:33:
66:69:b5:47:de:63:ac:49:62:9d:d6:27:c7:19:cc:
6f:bb:0f:7a:54:93:19:1d:b9:04:11:07:18:84:d9:
db:a0:05:cd:e5:29:ff:b6:dc:cb:b0:a6:42:5f:37:
8e:5d:a5:e3:e7:28:9e:d3:52:72:28:f6:fa:bf:9e:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:4E:94:79:8D:14:81:B8:DF:BB:A6:6A:25:E4:04:61:D7:AA:5C:17
X509v3 Authority Key Identifier:
keyid:FC:35:87:7C:C0:38:BF:FD:B9:7B:B3:D6:EA:21:6A:B5:2B:3A:05:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_DWHfMA4v_25e7PW6iFqtSs6BYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/bE6UeY0Ugbjfu6ZqJeQEYdeqXBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e8072a-6017-4ed5-bee3-8e65b347f218/1/_DWHfMA4v_25e7PW6iFqtSs6BYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.56.0/22
IPv6:
2a04:8e40::/29
Signature Algorithm: sha256WithRSAEncryption
9b:d3:23:ad:b2:7a:0b:64:fb:e0:e6:a4:08:75:b3:2f:9b:89:
3f:7b:a8:d6:6d:05:48:da:10:94:a0:ad:59:42:ff:89:87:b2:
d8:32:6c:65:98:11:27:f6:74:cd:ef:ea:bf:ec:5b:95:cf:b9:
36:56:d6:c3:9c:1d:57:18:cf:6b:d4:89:d6:30:f2:5a:50:d4:
0e:1d:94:d2:60:51:5a:e8:30:29:6e:7a:cf:20:54:b8:dc:1a:
33:b9:fd:5f:fa:5a:7e:6c:fe:53:7b:a0:28:5a:3a:7f:f5:45:
02:b3:87:05:5d:5c:a5:19:3d:d9:5d:27:5a:c7:25:50:9b:b7:
e8:5d:5c:a0:36:26:2f:d5:2b:a3:58:1d:c7:42:50:fe:6c:3e:
40:81:dc:3d:a3:f9:9a:7e:34:e4:16:f5:e6:5c:cd:0e:bb:b1:
36:7c:bd:83:2f:1a:f2:1d:3b:40:38:65:b5:0b:80:aa:c8:38:
32:8f:81:f0:2e:e6:e2:0d:44:95:ce:66:c9:b4:8d:c5:40:24:
ca:98:91:15:d1:99:58:40:73:08:0d:50:7a:b2:97:f8:da:39:
c9:6b:6c:32:4b:44:95:a3:13:ba:e9:33:53:e2:a2:6a:59:87:
b3:ae:35:b8:6f:9c:77:06:a4:63:7b:44:09:3c:d6:35:08:35:
39:ed:af:27
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVyDHELpeCZAjDX60CghhAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMzU4NzdjYzAzOGJmZmRiOTdiYjNkNmVhMjE2YWI1MmIz
YTA1ODIwHhcNMjMwMTAyMTAzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzRlOTQ3OThkMTQ4MWI4ZGZiYmE2NmEyNWU0MDQ2MWQ3YWE1YzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfXrg4wvcNPbY8wjzlpjSI/ePy/+
QmS1rsiI1xFCwycTFsuJas7Kl6IRRVJEKyW8abjUKxvclVhC0/eURV+hF/QPem3o
it9HxrfOtKSvjJS6LPb3CU1Hc5IUxrNjnzPmChq6NF5hr+7OmjCo10S4FxFGM4Nv
iqUOdrmU/JY+X8yGm+pxH73k00fa+QvBscl59KOCfuFZaPmgoHhDjgx4dLPkNHcq
lF/rAxhbBtKe9hpc9HcXPZMByMNzbpQ8leth5jNmabVH3mOsSWKd1ifHGcxvuw96
VJMZHbkEEQcYhNnboAXN5Sn/ttzLsKZCXzeOXaXj5yie01JyKPb6v552/QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGxOlHmNFIG437umaiXkBGHXqlwXMB8GA1UdIwQY
MBaAFPw1h3zAOL/9uXuz1uoharUrOgWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMt
OGU2NWIzNDdmMjE4LzEvYkU2VWVZMFVnYmpmdTZacUplUUVZZGVxWEJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lODA3MmEtNjAxNy00ZWQ1LWJlZTMtOGU2NWIzNDdmMjE4
LzEvX0RXSGZNQTR2XzI1ZTdQVzZpRnF0U3M2QllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSo4MA0E
AgACMAcDBQMqBI5AMA0GCSqGSIb3DQEBCwUAA4IBAQCb0yOtsnoLZPvg5qQIdbMv
m4k/e6jWbQVI2hCUoK1ZQv+Jh7LYMmxlmBEn9nTN7+q/7FuVz7k2VtbDnB1XGM9r
1InWMPJaUNQOHZTSYFFa6DApbnrPIFS43Bozuf1f+lp+bP5Te6AoWjp/9UUCs4cF
XVylGT3ZXSdaxyVQm7foXVygNiYv1SujWB3HQlD+bD5Agdw9o/mafjTkFvXmXM0O
u7E2fL2DLxryHTtAOGW1C4CqyDgyj4HwLubiDUSVzmbJtI3FQCTKmJEV0ZlYQHMI
DVB6spf42jnJa2wyS0SVoxO66TNT4qJqWYezrjW4b5x3BqRje0QJPNY1CDU57a8n
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:02 2024 by rpki-client on console-fra.rpki-client.org