Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0ysgQThlgdxDZLaW4bFgEH0r2N0.roa
File: 0ysgQThlgdxDZLaW4bFgEH0r2N0.roa (raw, json)
Hash identifier: TQElYmSEpcs6ZomRGrecqJVbUm3sTumEXG30YiObm4I=
Subject key identifier: D3:2B:20:41:38:65:81:DC:43:64:B6:96:E1:B1:60:10:7D:2B:D8:DD
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0188D31281DFAA91593315E1C519163BD6E1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0ysgQThlgdxDZLaW4bFgEH0r2N0.roa
Signing time: Mon 19 Jun 2023 09:53:05 +0000
ROA not before: Mon 19 Jun 2023 09:53:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 193.57.41.0/24 maxlen: 24
2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 19:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:12:81:df:aa:91:59:33:15:e1:c5:19:16:3b:d6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 19 09:53:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d32b2041386581dc4364b696e1b160107d2bd8dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:63:73:f6:b5:56:0f:e5:a2:d9:00:12:08:f2:
60:8f:5c:51:31:fb:e9:3d:da:ef:51:3b:46:59:a7:
cc:9d:1d:1b:72:e7:89:13:5c:fb:21:25:8e:70:d9:
04:6f:fc:d9:68:76:8e:f8:82:19:28:d2:12:1f:af:
1a:89:10:c6:f7:51:af:6d:21:a1:6f:5c:91:98:10:
d5:2d:c1:be:91:96:bf:97:2f:48:20:4f:e6:1e:86:
a2:01:83:b8:f9:be:95:f3:09:74:59:36:a7:95:75:
c4:2c:4e:8e:a5:1d:d7:c1:db:f1:d4:76:1b:64:13:
7d:0a:93:d6:8c:76:c4:e4:e1:8d:5c:25:af:0b:38:
72:bc:b1:0b:6b:17:dd:6c:ed:44:66:31:f2:68:98:
f7:d2:55:42:e9:b6:00:e7:42:2c:c8:94:33:66:b5:
55:8e:d7:7a:bc:4e:fb:02:a4:9a:77:32:d5:76:d8:
bd:e7:17:62:cb:c8:5e:c5:a1:5b:4c:98:e2:22:04:
83:e2:2e:a0:34:11:21:f0:4f:e7:11:74:35:1e:1b:
a0:d6:40:28:7e:28:cd:48:a7:86:bc:19:c3:02:32:
60:ed:d2:3b:f6:6c:e5:e1:21:16:42:9b:5a:77:6a:
8d:54:c0:e1:03:ac:dc:fd:3f:61:39:05:dc:20:24:
1c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2B:20:41:38:65:81:DC:43:64:B6:96:E1:B1:60:10:7D:2B:D8:DD
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/0ysgQThlgdxDZLaW4bFgEH0r2N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0-2.56.110.255
193.57.41.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b8:0b:aa:3c:8f:28:b3:cf:30:bb:0a:fe:ea:e3:f0:fa:30:
ef:45:ea:e6:ed:53:d9:47:86:64:90:f2:67:c1:c0:c7:73:ee:
92:29:18:0f:0c:98:41:c4:16:9f:5b:48:4c:72:a3:c7:6e:47:
50:a3:bd:b9:15:0a:15:02:c8:c9:9b:05:9e:38:f8:8b:97:f2:
ae:be:da:ee:eb:74:e2:2a:b0:d7:b5:13:3b:63:eb:2c:ae:be:
ff:0a:8f:40:a6:9d:cb:90:10:81:71:11:14:41:32:8b:de:0d:
4e:8d:3f:9a:d5:ed:89:40:a5:56:46:e1:99:26:13:0d:5a:48:
40:54:44:3a:cf:53:78:d4:73:10:bb:ef:3f:4f:01:6f:4c:24:
b4:f2:f8:3b:cc:57:32:e7:70:ee:a4:6c:fb:4c:d9:fd:44:b5:
9b:8b:67:30:53:d1:0d:d5:5e:8e:a2:18:94:34:9b:bf:c3:aa:
de:dd:53:32:28:c8:52:d7:0a:33:2a:f0:f1:d1:5a:60:6d:ad:
55:af:fb:97:c6:d1:d6:d2:28:ad:92:ea:69:1f:9f:11:c3:75:
69:c7:20:a9:23:66:ea:df:f5:24:3c:85:ae:67:45:98:de:9d:
9f:12:82:5a:84:b8:52:9f:b2:6e:ce:71:98:d0:45:a3:62:d0:
36:9b:e5:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org