Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/adWsevSOAJthjsleDUGcif15ki8.roa
File: adWsevSOAJthjsleDUGcif15ki8.roa (raw, json)
Hash identifier: 21UWVYy112MAmHHr07XhOHJje/huu3XdGUOwDWqXO1s=
Subject key identifier: 69:D5:AC:7A:F4:8E:00:9B:61:8E:C9:5E:0D:41:9C:89:FD:79:92:2F
Certificate issuer: /CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Certificate serial: 0185711E3A5B558B6B240760ACD11759C8DB
Authority key identifier: 2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/adWsevSOAJthjsleDUGcif15ki8.roa
Signing time: Mon 02 Jan 2023 06:14:44 +0000
ROA not before: Mon 02 Jan 2023 06:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202598
IP address blocks: 185.156.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:3a:5b:55:8b:6b:24:07:60:ac:d1:17:59:c8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c727d09fbb19a7f985d751a20311c1bad4b071f
Validity
Not Before: Jan 2 06:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69d5ac7af48e009b618ec95e0d419c89fd79922f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:de:3a:67:67:57:8b:9b:64:a8:ba:f0:4d:
d8:a9:45:f4:61:dd:59:5f:17:d9:21:c9:7b:68:55:
2a:36:5e:f3:3c:0a:2e:6f:ff:96:ad:83:c3:fb:f8:
43:e2:30:1a:8c:00:89:fb:85:a5:f4:03:b9:6b:3f:
de:4c:96:4f:e2:48:b0:ab:5f:df:34:b9:10:9a:4e:
90:75:fa:e2:33:13:7a:87:54:7a:70:72:86:15:93:
a9:f7:38:d0:a1:18:ca:6c:a9:41:ed:13:49:1d:56:
e2:c8:15:94:45:4b:88:d1:bb:16:3c:47:04:eb:c9:
41:40:5f:c8:59:4d:09:3c:d5:c0:48:1a:7e:df:c8:
b5:b3:5c:98:bc:b4:4a:0d:a6:aa:bf:fb:98:77:28:
f2:99:39:52:05:e6:db:71:e3:43:5e:c8:e6:a0:1d:
ca:4d:94:eb:61:e1:d7:26:c4:5d:36:ba:55:ac:84:
d2:23:45:7e:ec:32:a5:fb:5b:a8:69:44:50:66:c0:
5f:14:7b:a9:df:7d:fd:f6:53:99:09:16:50:fa:01:
78:1a:e8:43:28:dd:36:4e:4a:9f:ed:ea:ee:95:07:
79:43:38:ac:aa:5c:0b:a8:c6:f8:81:79:cb:ce:8b:
bf:2b:0b:bc:c4:cb:a9:c4:e7:fe:77:e6:bd:18:0a:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D5:AC:7A:F4:8E:00:9B:61:8E:C9:5E:0D:41:9C:89:FD:79:92:2F
X509v3 Authority Key Identifier:
keyid:2C:72:7D:09:FB:B1:9A:7F:98:5D:75:1A:20:31:1C:1B:AD:4B:07:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/adWsevSOAJthjsleDUGcif15ki8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf3eca-171f-401c-9b5d-ccc4f1e00990/1/LHJ9Cfuxmn-YXXUaIDEcG61LBx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.56.0/22
Signature Algorithm: sha256WithRSAEncryption
16:b5:8e:ef:fc:ec:f4:7d:55:36:2a:3e:4d:d6:6b:b5:cc:51:
5b:e4:58:ac:1f:c4:69:3d:64:ff:b8:d2:73:56:5f:4b:ad:3f:
08:26:a8:85:4d:8e:3a:d1:0e:19:de:48:f3:e9:fc:80:1d:28:
ba:fb:bc:e8:e2:a6:0f:da:e7:c2:6d:96:96:99:2f:a8:38:a7:
75:8c:0d:e2:ce:99:f9:16:31:79:79:17:80:96:81:cf:2e:b1:
8c:21:8c:e6:c4:f9:27:de:e1:c0:61:61:fa:97:70:ee:9b:f2:
ed:12:d5:12:28:8b:73:5d:dc:ca:d2:02:31:76:b6:cc:9e:c5:
f3:b6:31:d3:99:48:d2:57:02:99:3c:d9:59:49:d2:90:5d:61:
5f:e9:73:e5:0d:39:dd:3b:fa:0e:e4:bb:65:03:d1:18:fb:7d:
9f:2b:de:27:a3:46:1d:83:fd:d6:e6:22:b6:34:d7:37:d8:fc:
ff:bd:b2:16:86:93:69:08:e8:55:d1:f8:76:b9:55:64:21:87:
e9:6a:57:47:b8:ca:db:7c:87:5f:b6:17:57:f2:62:25:a3:20:
39:60:98:a2:42:fd:f9:72:01:c8:bb:61:8a:92:b7:11:43:4a:
97:d7:e6:ea:7a:27:92:fb:ff:1b:26:aa:c4:2b:ee:97:0e:8e:
2f:5d:de:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:38 2024 by rpki-client on console-ams.rpki-client.org