Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/T6jHNmJbLODzCo1EWtpezIeOAlk.roa
File: T6jHNmJbLODzCo1EWtpezIeOAlk.roa (raw, json)
Hash identifier: OHuSqEyyDujsYQm44/sGZhfRFlcysuWa7qHgdgh4z/E=
Subject key identifier: 4F:A8:C7:36:62:5B:2C:E0:F3:0A:8D:44:5A:DA:5E:CC:87:8E:02:59
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E7F93A0935394351EAC0966BC04D3BE30
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/T6jHNmJbLODzCo1EWtpezIeOAlk.roa
Signing time: Wed 27 Mar 2024 11:02:45 +0000
ROA not before: Wed 27 Mar 2024 11:02:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205463
IP address blocks: 2.56.109.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 10:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7f:93:a0:93:53:94:35:1e:ac:09:66:bc:04:d3:be:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 27 11:02:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fa8c736625b2ce0f30a8d445ada5ecc878e0259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:c8:66:47:b3:81:dc:7f:59:7f:4a:b6:68:
62:e8:47:20:4f:09:c2:03:34:f9:4e:56:4d:1f:40:
a4:e0:e5:b8:33:36:9a:d0:65:bc:78:e5:d1:60:95:
c3:a6:2c:eb:6c:3f:ff:51:89:09:69:13:12:96:59:
e4:0f:ee:2f:c4:4b:5c:52:7b:ab:7d:6a:de:97:76:
32:3e:c7:ac:0c:32:a3:a6:dc:44:8f:8a:e8:65:b3:
d7:00:f5:ab:c2:02:e8:bc:0d:a8:97:3c:46:86:07:
c3:1f:22:40:66:3b:52:07:ba:3c:6a:3e:e1:ae:90:
14:db:20:c3:e6:e0:af:1f:ce:52:1d:fb:fa:3c:de:
1a:2e:ce:33:57:7a:8e:d9:c8:5b:ff:6d:ff:f5:d8:
d0:a6:8c:15:18:36:f9:0e:38:44:5e:fd:5d:b9:05:
b6:48:12:85:b8:1f:e4:aa:6e:b8:f4:12:ca:0c:9f:
30:78:42:65:e4:fd:54:f3:0b:2c:b9:1b:03:5e:3d:
6f:d8:d6:3f:e3:28:46:6d:70:4a:ad:a8:5a:d1:35:
4a:d0:8b:99:c6:7a:48:4e:00:c7:b0:43:10:0e:8c:
ff:d9:ea:fd:81:71:7a:0c:5a:13:83:2f:1c:51:ec:
df:28:39:60:99:cc:0f:92:b8:96:81:6d:af:ca:24:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A8:C7:36:62:5B:2C:E0:F3:0A:8D:44:5A:DA:5E:CC:87:8E:02:59
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/T6jHNmJbLODzCo1EWtpezIeOAlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
45.81.113.0/24
45.81.115.0/24
45.132.181.0/24
45.144.215.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:9d:dd:cf:ee:46:ce:6a:e3:d2:73:3c:c5:b3:13:10:30:aa:
e8:02:0e:23:26:cf:c5:0b:2d:a2:f1:8e:e5:80:55:b3:92:73:
86:59:06:30:02:f7:ae:fd:30:e6:76:ee:b5:b3:ae:11:c3:51:
94:8f:aa:9c:f2:db:e2:3b:fc:53:c4:48:1c:f7:3d:39:1a:f2:
2c:77:d9:57:3b:19:94:01:6c:45:16:3b:a5:cc:47:83:a0:df:
63:17:de:01:f5:56:59:b8:2b:d7:a9:9f:e2:28:aa:46:4f:73:
ce:42:13:4e:1b:72:41:5d:c6:1b:44:aa:63:4a:36:ff:77:82:
58:5b:bf:dc:38:2a:a2:1e:4e:8e:6a:7c:39:85:f9:07:6e:da:
ef:2d:ce:7f:78:13:c7:04:ca:2a:99:57:69:f1:67:52:6e:a0:
3a:d3:d7:80:f5:8d:03:44:ce:17:62:54:cc:75:55:47:ad:d1:
4a:9e:4c:2f:86:c5:02:e3:96:e3:c2:fa:fc:85:7a:14:6a:c4:
d6:4f:7e:32:88:15:99:66:8e:0e:b2:79:62:a5:1d:61:cb:fa:
96:9d:c7:1c:f0:f1:4a:fd:e5:aa:f9:4d:bd:d9:3d:86:42:5b:
b3:11:17:58:cb:ec:0a:21:97:5c:b8:bd:3d:a9:23:b3:f4:2b:
64:55:b6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 11:21:44 2024 by rpki-client on console-fra.rpki-client.org