Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BWwIps_zArki1x8cwg-hr_jdYSk.roa
File: BWwIps_zArki1x8cwg-hr_jdYSk.roa (raw, json)
Hash identifier: MmACZGVVfebp2FwRR5fVYVE3kgaLmzEw6RqSqXK1384=
Subject key identifier: 05:6C:08:A6:CF:F3:02:B9:22:D7:1F:1C:C2:0F:A1:AF:F8:DD:61:29
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018BFFE10F2E1B108F44265947C4D396ED37
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BWwIps_zArki1x8cwg-hr_jdYSk.roa
Signing time: Fri 24 Nov 2023 05:50:21 +0000
ROA not before: Fri 24 Nov 2023 05:50:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62816
IP address blocks: 2.56.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ff:e1:0f:2e:1b:10:8f:44:26:59:47:c4:d3:96:ed:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 24 05:50:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=056c08a6cff302b922d71f1cc20fa1aff8dd6129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:d0:9f:7e:a9:bc:3a:10:0e:84:6c:f4:c5:
59:8c:e3:c8:d7:1b:9f:95:e3:4a:de:82:28:28:33:
ec:d1:ec:14:99:af:82:21:c2:cf:b1:dd:5a:ca:35:
14:3d:ea:a3:23:35:97:02:ab:73:0b:01:b9:a0:44:
f4:6a:22:86:6d:20:f7:8b:ed:3d:9d:b9:54:87:82:
d0:e9:70:04:c7:36:c9:62:bd:34:19:03:36:90:7d:
37:a8:c3:94:be:c4:35:fb:61:a1:c4:04:29:2a:15:
d7:a8:74:ba:cf:93:63:c1:0e:10:75:c4:41:3b:c1:
9e:ec:17:74:21:b3:ec:32:3b:09:cd:42:43:2c:97:
5e:76:2a:06:cd:df:df:3a:c4:d5:4e:23:97:0f:b3:
2c:55:5c:db:c8:32:aa:a4:d8:71:4c:a0:d0:a6:ee:
29:fb:07:36:d0:6d:54:cd:3f:79:54:3b:48:bb:c3:
3c:fa:3f:df:01:ce:d2:63:76:43:27:b7:85:8f:f3:
19:76:a9:09:b1:e1:f2:64:25:c9:8b:25:ab:6e:51:
57:77:b4:16:a5:7e:59:93:80:fa:3e:f3:52:e5:30:
a5:12:05:87:98:eb:2c:14:e0:4f:7e:c3:74:15:7e:
c9:69:e1:47:a5:8f:89:8f:cc:31:95:ac:9a:07:56:
7d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6C:08:A6:CF:F3:02:B9:22:D7:1F:1C:C2:0F:A1:AF:F8:DD:61:29
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BWwIps_zArki1x8cwg-hr_jdYSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.110.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:48:42:74:0c:66:3c:7f:14:26:c8:d6:5e:02:67:e1:6f:36:
68:6d:a9:0d:5f:ac:80:18:92:e9:02:9e:44:c9:88:19:4e:11:
88:a8:7b:fe:06:71:df:23:34:5b:87:92:d4:50:d7:ad:42:fd:
a7:6c:8b:ba:a6:d7:ea:7a:81:2f:8a:79:17:79:52:64:0e:e4:
15:65:13:8c:29:ad:e9:1c:b1:9b:cd:ef:9a:20:32:bf:a8:31:
b6:d8:fd:6d:b3:79:b9:8d:64:73:66:f5:14:4a:75:98:04:20:
ec:7d:c4:1b:13:7d:2a:44:a4:18:54:48:02:ec:12:54:a3:f2:
c6:ec:d7:cf:b6:77:89:c4:2a:88:97:4d:51:76:ab:05:68:1c:
a4:61:bc:85:58:1b:1b:ff:1a:f9:59:c7:47:3a:28:be:05:07:
6a:26:8f:2a:5e:c9:ac:d5:cb:07:71:60:58:a4:a2:0d:36:0c:
48:e0:3a:cb:0c:16:52:72:df:bc:b7:4f:01:6c:0f:07:d3:58:
d7:d1:14:13:c3:60:4d:f7:67:66:3f:f3:b9:f1:7b:22:7c:1d:
08:28:da:f9:59:75:3e:f2:94:c7:ca:17:5e:e0:a1:12:8d:8e:
c0:20:89:61:14:22:2b:6a:57:70:f8:44:ba:7f:66:40:ce:cc:
5a:54:7a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org