Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/IXen8Q9bv54sY2KySz3ioLepMjI.roa
File: IXen8Q9bv54sY2KySz3ioLepMjI.roa (raw, json)
Hash identifier: F14f3BpYaS9NRKGODVfU7MBPwjf5CGn2RlF+qkNuQvQ=
Subject key identifier: 21:77:A7:F1:0F:5B:BF:9E:2C:63:62:B2:4B:3D:E2:A0:B7:A9:32:32
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E44362F5F2A70729576DBDDFCDD24
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/IXen8Q9bv54sY2KySz3ioLepMjI.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216167
IP address blocks: 2.56.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Mar 2024 14:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:44:36:2f:5f:2a:70:72:95:76:db:dd:fc:dd:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2177a7f10f5bbf9e2c6362b24b3de2a0b7a93232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:89:53:0e:b4:f4:a4:07:27:60:9a:34:77:de:
b1:9c:cb:47:04:7d:17:56:86:6a:23:62:84:07:b0:
17:d6:3e:e9:76:f7:02:73:de:eb:79:6f:ed:bb:61:
1d:be:40:df:24:ae:f2:e8:2a:c9:95:de:d7:6b:b5:
67:07:33:d9:be:a5:1d:b5:5c:fd:3b:b4:da:f3:d7:
d4:a1:34:6d:13:ce:e7:61:bc:0e:20:9a:a0:d3:b4:
75:3b:43:ce:dd:d5:0a:45:f0:37:49:f1:38:79:52:
a6:ed:c1:93:11:88:f2:3a:35:aa:f3:35:b4:ff:f1:
0d:da:35:c4:ff:ee:b1:f2:e3:cd:7a:b3:be:1b:88:
31:89:1a:f1:63:3d:4f:88:b0:c0:38:3c:1f:9e:d8:
75:24:fe:8e:e3:81:c8:ee:07:27:18:15:82:19:35:
57:bb:e8:60:dc:60:3b:26:d8:aa:7c:f8:d8:e2:b8:
8a:4c:75:bd:85:11:04:d2:94:26:d2:a1:d6:08:fb:
a1:68:e3:b7:ed:8d:75:bb:d2:39:21:51:1a:0c:f3:
b0:2c:c5:2c:a3:55:50:03:87:57:02:87:4a:ac:bc:
83:3b:3d:e3:0a:14:67:6e:9a:69:5b:d4:ca:f9:a2:
ba:a1:38:b6:c9:1f:25:00:11:d5:5b:f0:06:f9:68:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:77:A7:F1:0F:5B:BF:9E:2C:63:62:B2:4B:3D:E2:A0:B7:A9:32:32
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/IXen8Q9bv54sY2KySz3ioLepMjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.247.0/24
Signature Algorithm: sha256WithRSAEncryption
64:c7:8a:b0:ed:84:99:8d:f7:1c:c0:0a:a7:5e:34:ea:32:0c:
de:db:92:bf:a7:59:9a:fc:a8:cd:c9:32:1c:e2:c0:19:ba:74:
8c:cc:e7:03:f8:17:4b:63:58:76:e2:91:ca:1e:fb:1c:e7:38:
cd:ea:a8:f5:2f:a5:6f:1d:8f:24:cb:6c:f8:a4:59:07:80:3c:
2a:cb:11:95:7e:c1:47:fc:44:7d:01:13:ad:ff:ca:54:ac:b7:
ac:9d:33:1b:e3:fd:f5:25:29:dd:0f:d2:a7:e8:fe:9e:ef:8f:
c5:83:d1:97:f8:6b:69:0b:3e:df:db:8a:03:5c:e7:0e:12:c5:
56:75:43:aa:46:2c:6b:1d:84:c0:34:55:f5:92:06:12:ad:ce:
2f:8c:c0:06:65:88:12:cc:79:81:0f:68:cd:3c:76:aa:d0:40:
04:f5:81:6e:c2:29:77:61:f6:fa:6c:38:33:47:64:c6:da:b0:
c1:78:96:ae:d8:2d:8f:54:1e:6c:5f:15:59:2e:29:77:6f:9e:
8d:b7:e9:cf:70:72:14:40:19:ac:d5:f4:2a:a2:1f:9d:ef:3e:
ba:a4:40:be:84:38:7a:93:63:90:c5:6d:63:a9:de:75:c7:a4:
56:51:68:ad:02:a4:33:f3:3c:ec:4d:61:a0:16:85:3a:42:73:
53:2c:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org