Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/27ad3qgIQTzJLRVHXDbL27uHuEc.roa
File: 27ad3qgIQTzJLRVHXDbL27uHuEc.roa (raw, json)
Hash identifier: yqj99ANOGRjVTkj9iOt0FuHPyRCnCpN7tPdYhUjkDFQ=
Subject key identifier: DB:B6:9D:DE:A8:08:41:3C:C9:2D:15:47:5C:36:CB:DB:BB:87:B8:47
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0188AF4731756105F8D22873DB76EB91F89B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/27ad3qgIQTzJLRVHXDbL27uHuEc.roa
Signing time: Mon 12 Jun 2023 11:04:18 +0000
ROA not before: Mon 12 Jun 2023 11:04:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 09:07:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:af:47:31:75:61:05:f8:d2:28:73:db:76:eb:91:f8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 12 11:04:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dbb69ddea808413cc92d15475c36cbdbbb87b847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:81:60:d9:da:12:9f:46:71:32:0c:8a:d5:41:
63:64:84:30:14:6c:1a:f4:3e:d2:d0:09:20:3c:e3:
6b:d7:81:10:e7:07:2b:28:f2:69:65:39:07:c7:f8:
c5:f1:ee:9c:fc:be:b4:cd:d1:6c:d6:71:b8:de:4a:
a8:9c:5e:ac:89:df:a6:7f:1a:f6:66:e2:94:b7:a6:
68:01:5d:3b:09:cc:d4:4f:d0:cd:5f:ea:12:28:6d:
9e:5d:5a:02:70:83:ba:b1:d7:6b:23:60:56:a4:6f:
1f:13:43:c9:d3:74:ad:1c:73:c0:51:91:fc:be:f1:
82:4f:4a:f3:3c:2b:4f:0a:07:14:53:7e:20:4a:79:
1d:eb:28:89:59:c8:32:42:de:43:d3:20:ca:51:e7:
6f:15:68:6b:48:5a:58:cf:92:21:f8:f9:bd:3e:d1:
8e:71:10:40:22:d7:4c:53:47:e3:74:da:28:12:73:
ff:5e:16:b5:6c:9d:10:85:69:b3:b4:ac:5d:c9:fe:
ba:f6:39:c1:e7:55:71:40:d6:64:88:74:d6:5b:d1:
c1:b9:29:df:04:0a:14:f4:22:fc:49:52:1a:88:e9:
c1:86:c9:64:1c:7e:c8:9e:ae:b6:02:29:8b:25:42:
96:1f:29:a2:fc:51:26:f4:8c:3e:60:1c:8a:f1:d9:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B6:9D:DE:A8:08:41:3C:C9:2D:15:47:5C:36:CB:DB:BB:87:B8:47
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/27ad3qgIQTzJLRVHXDbL27uHuEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:7a:d3:c9:36:b3:d5:01:84:cd:96:dc:ef:e8:49:25:be:cc:
37:be:f8:11:8e:c7:c8:c1:5d:fa:1d:cf:4f:f3:48:84:cd:08:
4a:46:2d:a3:c9:33:f5:3b:63:e1:d6:c0:b5:19:ec:f2:35:a1:
bb:7f:05:65:36:e1:70:f4:ef:2c:36:0f:66:c0:f5:3c:9c:45:
d2:82:b2:84:de:be:51:43:f6:f3:ee:8f:67:26:a5:58:a1:ed:
73:43:eb:f2:56:5b:0b:c8:2f:bd:6f:e1:fb:ff:9d:79:5f:54:
94:c0:f8:7e:28:57:d6:6e:3c:50:0d:13:b7:98:c3:7d:e8:54:
3c:0c:29:50:48:6a:b2:0e:c2:b3:d6:5f:68:8e:d6:b3:f6:3a:
8f:2e:89:fb:4f:ac:95:d3:fa:91:d0:f1:7d:02:dd:73:53:5f:
99:68:fe:9e:b6:bc:06:d2:55:c0:ca:0f:8a:2a:0a:07:8a:49:
e8:fd:e2:c8:67:4c:53:d0:d6:a2:b4:b3:d9:2f:c2:1f:ec:54:
3b:b8:a3:7e:d0:bc:d3:3d:f1:a6:0f:fa:99:ac:17:43:dc:6d:
50:d5:e5:5f:ed:85:18:40:bf:79:76:e8:ac:09:1a:0e:4e:4c:
7c:db:f6:5f:c9:26:7f:ec:fa:a9:a2:e5:7d:99:e1:36:b6:73:
80:06:16:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org