Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tCfBEIeiR16oqr_KN4mUF5Eg7no.roa
File: tCfBEIeiR16oqr_KN4mUF5Eg7no.roa (raw, json)
Hash identifier: FRP0TFbGg5fiGXmRVDUUD9E3TXJlKquNGE4GAsz3RM8=
Subject key identifier: B4:27:C1:10:87:A2:47:5E:A8:AA:BF:CA:37:89:94:17:91:20:EE:7A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E38A0B22DD1F1471EB9092463038D98C1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tCfBEIeiR16oqr_KN4mUF5Eg7no.roa
Signing time: Wed 13 Mar 2024 16:23:59 +0000
ROA not before: Wed 13 Mar 2024 16:23:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396998
IP address blocks: 2.56.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Mar 2024 17:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:38:a0:b2:2d:d1:f1:47:1e:b9:09:24:63:03:8d:98:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 13 16:23:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b427c11087a2475ea8aabfca378994179120ee7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:f3:15:72:2b:43:a2:0d:01:53:e4:4d:52:
2a:0c:38:1e:67:8c:f2:52:20:78:21:49:66:fd:5c:
77:95:47:40:8b:b2:a2:7e:a0:08:19:a5:48:e9:7f:
48:4d:64:0c:10:ba:cd:e2:c2:db:25:de:ea:31:48:
91:d3:0f:49:e2:e8:d3:bf:c7:ab:37:a3:23:08:09:
40:e2:89:e9:bf:af:90:59:27:da:a2:5c:f0:fb:74:
5a:83:9d:b2:f7:0e:ca:9e:89:4c:29:23:c3:3c:12:
dd:b1:55:85:0c:64:9a:a6:b5:60:80:e6:fc:33:2e:
9e:c7:0c:37:75:22:d3:50:a9:e7:83:45:4c:bf:5b:
bf:bf:6a:9e:b4:2d:54:af:6c:37:0e:77:0b:72:dc:
f2:cf:62:0b:c8:34:af:fd:fb:81:8a:0f:cc:ea:2a:
64:ac:80:42:a5:4a:fa:39:8f:28:57:af:8c:21:15:
f7:cf:ba:b0:f2:4b:66:d8:0e:c9:44:14:8b:31:93:
79:fd:2f:2c:7d:1f:9d:8d:b8:a1:2c:c4:38:4e:16:
2e:51:c2:e7:db:d8:7a:38:5c:cc:79:88:db:3f:5f:
bc:76:05:d1:bd:3b:1f:56:20:c9:cf:0d:1b:07:2a:
ea:64:73:a7:cb:8c:7a:68:c8:69:3b:3d:72:6f:e1:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:27:C1:10:87:A2:47:5E:A8:AA:BF:CA:37:89:94:17:91:20:EE:7A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tCfBEIeiR16oqr_KN4mUF5Eg7no.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.111.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:53:e9:18:73:e5:23:44:73:2b:69:3b:ba:4c:77:d5:62:10:
9c:df:2f:a8:f8:57:57:88:16:12:a7:62:39:1a:a5:40:44:a7:
6a:48:bf:39:b8:b6:27:f6:7a:72:94:ec:25:b1:e3:01:70:41:
02:08:e0:96:b6:55:65:40:b9:f4:a6:81:13:b7:d5:8b:7a:f3:
0d:af:ea:0e:ff:78:c2:67:81:85:eb:04:13:c2:8e:bc:df:cc:
5d:d1:66:2b:97:e1:99:5f:b3:f8:94:db:ca:9c:7a:81:3d:d6:
f0:1d:e3:48:c7:c3:dd:7d:50:5a:22:27:28:d8:59:dd:6c:73:
d9:6d:9e:e4:60:00:f2:5c:2e:d7:d5:95:4c:30:92:17:01:c4:
d0:8a:64:54:0b:24:70:f6:fb:5b:50:21:5b:44:11:e3:e0:82:
96:8f:93:fd:54:38:c7:32:99:58:1e:e0:7d:e5:42:6f:bb:69:
d4:42:04:f2:34:40:2d:b5:1c:34:f5:71:72:ba:c5:d2:fe:2a:
ef:ad:31:22:05:c5:ea:2d:d2:0f:ac:11:d8:43:89:54:3a:07:
06:80:cb:0e:6b:24:0e:00:30:d0:38:99:b8:b8:ec:b0:59:1d:
91:17:07:87:d3:9b:1e:4e:9e:8a:46:2c:45:6b:65:32:2f:61:
5a:63:8d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org