Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UcAFoAr9TNZB15qAchJbAZU5Ujw.roa
File: UcAFoAr9TNZB15qAchJbAZU5Ujw.roa (raw, json)
Hash identifier: Cj2J+Vm4/TcoY4lT5U3KEONYtIVrZQQ8W1YmuwtsNUo=
Subject key identifier: 51:C0:05:A0:0A:FD:4C:D6:41:D7:9A:80:72:12:5B:01:95:39:52:3C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E3672EDD454A845A8C860C36453D59F7E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UcAFoAr9TNZB15qAchJbAZU5Ujw.roa
Signing time: Wed 13 Mar 2024 06:14:45 +0000
ROA not before: Wed 13 Mar 2024 06:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215911
IP address blocks: 2.56.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 03:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:36:72:ed:d4:54:a8:45:a8:c8:60:c3:64:53:d5:9f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 13 06:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=51c005a00afd4cd641d79a8072125b019539523c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b1:f8:ef:a5:bd:39:79:75:4e:14:ce:9f:d6:
d7:b2:f6:d5:0a:f0:8c:88:cd:c3:8c:c3:03:37:a9:
a7:99:20:59:dc:e0:26:3e:b6:7a:84:9f:2e:7e:ea:
a7:f6:f1:0a:ca:32:b8:e8:e5:3b:52:0a:b1:6b:0e:
20:73:86:8a:4f:d7:9f:92:61:27:3e:2d:59:e2:15:
e0:4f:d0:5c:6a:b1:b6:a1:48:53:5f:73:aa:69:4b:
96:ef:2c:be:93:0c:a7:d0:aa:07:4f:56:10:98:d6:
39:1f:a0:d9:c0:68:a2:29:98:4e:7a:36:71:e3:74:
67:04:cd:e0:83:26:57:11:0a:56:eb:7c:48:db:68:
89:55:8e:36:53:1a:ef:ba:79:47:cf:24:f4:3d:1b:
37:03:11:1b:fd:e2:f4:15:f8:10:27:47:82:78:24:
a5:9b:9d:6b:08:df:74:d8:51:2b:b4:46:47:70:72:
a0:91:f9:f7:8d:a2:b2:23:69:85:55:50:d4:cf:3e:
ac:cb:b0:c9:14:26:4b:ce:d9:bd:31:5e:a8:4f:c5:
1a:c1:6a:8f:df:d4:37:70:51:c5:71:6c:61:00:27:
3f:ce:c9:ca:1b:d6:8b:c9:6b:5a:bf:db:e5:48:b9:
c9:0a:93:41:3d:c3:91:86:24:c1:93:71:13:1c:71:
6b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C0:05:A0:0A:FD:4C:D6:41:D7:9A:80:72:12:5B:01:95:39:52:3C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UcAFoAr9TNZB15qAchJbAZU5Ujw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/24
Signature Algorithm: sha256WithRSAEncryption
95:cf:5d:5e:02:6c:fc:f1:04:53:12:d9:df:42:7f:74:d1:5f:
d3:1e:5a:4e:a7:27:fe:62:34:61:88:de:9b:98:89:ed:19:ce:
f4:c4:d2:e2:64:2d:31:d1:57:8d:00:75:94:9c:95:aa:da:c5:
cf:02:50:2a:b5:22:bc:9f:f2:6b:fe:40:e9:ab:ef:d5:cd:5e:
b4:3d:ff:33:7c:f1:de:60:0d:d5:18:9f:fb:e9:e8:a7:f3:1e:
29:c8:eb:9b:9d:1f:45:87:4a:c7:ab:a8:32:28:bc:1c:31:2d:
26:50:1b:9c:4c:89:2c:93:ac:3e:50:0a:44:f2:6d:4b:ad:63:
2f:90:fd:4e:67:fa:1a:e6:41:be:52:c5:24:75:62:f4:b1:16:
64:87:00:2f:2e:ab:1e:42:59:7a:1a:05:81:e4:b7:5c:88:6f:
74:9e:07:0d:af:14:28:07:b9:8f:01:da:54:bb:d3:23:e7:c6:
13:11:22:ef:87:d4:dd:9d:ec:42:44:b2:1b:b5:7e:d2:31:48:
f6:a8:14:fb:d8:6d:0e:bb:f4:00:f4:e4:2f:2f:39:9f:3a:e7:
f0:ec:c4:60:e6:b8:1e:80:50:6f:f1:8d:ba:08:ee:5a:46:91:
0f:6b:09:03:df:61:3e:12:21:40:00:6e:7b:4f:96:86:72:21:
33:76:f3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org