Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TrIzEnl58A8ghLQ4Rlv0T3yRarE.roa
File: TrIzEnl58A8ghLQ4Rlv0T3yRarE.roa (raw, json)
Hash identifier: mccaHRsKEJlMZhQVnbbXt29W8MJxo4mx22a6Yas1iiU=
Subject key identifier: 4E:B2:33:12:79:79:F0:0F:20:84:B4:38:46:5B:F4:4F:7C:91:6A:B1
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A3BC23BE2E0754328351931C838F285B1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TrIzEnl58A8ghLQ4Rlv0T3yRarE.roa
Signing time: Mon 28 Aug 2023 10:48:19 +0000
ROA not before: Mon 28 Aug 2023 10:48:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 2.56.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:c2:3b:e2:e0:75:43:28:35:19:31:c8:38:f2:85:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 28 10:48:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eb233127979f00f2084b438465bf44f7c916ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:77:28:45:04:94:2a:c9:2e:f9:20:65:7d:53:
db:64:62:e8:a8:57:b6:75:00:b6:06:fe:b8:51:36:
5b:ee:46:8d:1c:7f:e0:8a:0e:e7:49:69:79:09:bd:
01:7d:04:15:6a:c3:1f:5b:42:67:97:01:10:63:be:
d7:a8:71:e1:30:40:56:1d:5c:2c:b1:9f:90:1b:07:
30:b4:88:dd:c4:29:77:0d:6a:cc:10:33:34:9c:ed:
10:c6:86:14:69:14:c1:de:34:52:82:e1:38:fd:7d:
ca:92:02:08:b8:f7:dd:38:dc:eb:3a:5a:39:e6:86:
8c:bf:76:13:0e:e5:78:ad:d9:1b:15:0f:ac:43:48:
96:68:50:52:cd:a1:cc:3f:00:1e:03:6e:ef:0d:e1:
2d:cb:a5:20:c2:e3:92:c9:43:15:e9:f5:3f:a4:1d:
68:e6:10:07:0b:29:c1:a2:f1:d4:df:24:85:70:12:
45:0f:1a:b4:30:d6:0b:b1:49:15:95:37:15:fc:a3:
48:9f:0d:8b:23:e3:71:eb:05:b7:68:45:74:cd:0e:
66:b3:7e:16:9c:33:5c:de:8b:81:12:2e:49:b7:91:
9a:d9:e6:93:3e:9a:eb:9c:f4:94:10:73:0a:f3:6f:
0f:ae:ef:24:44:6f:b2:7d:26:49:ce:b4:14:74:37:
1a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B2:33:12:79:79:F0:0F:20:84:B4:38:46:5B:F4:4F:7C:91:6A:B1
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TrIzEnl58A8ghLQ4Rlv0T3yRarE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3e:e6:29:a4:9b:9e:4d:84:d5:53:78:d4:d5:d7:a6:9c:73:
71:46:83:c1:41:87:4b:76:57:db:be:db:d2:a5:a0:24:e8:61:
9a:1c:f0:da:9c:11:46:36:29:8c:60:6b:63:8e:e2:5c:c6:27:
7d:75:00:e6:d7:a0:af:ad:19:76:11:a6:20:35:f1:6f:51:c4:
b9:0c:82:d5:0f:94:6a:ec:a2:33:c3:30:0f:78:eb:1e:19:df:
92:9a:30:1b:b1:0e:0b:d5:8f:be:23:ef:f1:4d:51:fd:5c:d8:
25:30:a5:5d:cd:c2:05:35:b1:4a:00:ee:84:e5:2f:fb:02:1c:
4f:2f:d8:08:86:08:de:2e:a3:50:1c:15:8a:ae:f6:01:b1:4d:
da:39:5a:5b:10:83:e9:2b:9c:45:57:b2:35:ad:71:df:ce:b3:
28:e1:7c:50:41:65:0c:06:8f:03:fc:69:54:3f:02:6b:ed:f3:
3c:8c:79:06:93:7a:28:95:9e:e3:90:87:55:5a:52:60:f6:e5:
eb:f1:2b:81:b7:82:d5:78:62:9d:10:39:03:5a:89:b1:78:30:
bc:c8:67:6c:fd:57:99:d8:a2:73:a4:29:c2:39:6a:2b:af:a5:
52:4a:50:6f:23:46:b2:0f:01:e6:7b:57:da:4f:21:3c:2c:4a:
64:40:e1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 10:21:38 2023 by rpki-client on console-ams.rpki-client.org