Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U3HyTJrByJQ7-FW0dj6XdOhTY4I.roa
File: U3HyTJrByJQ7-FW0dj6XdOhTY4I.roa (raw, json)
Hash identifier: FfOin9uJOF8qVHRgilWtUFOoZEVSeNm+bWOraP8YKYI=
Subject key identifier: 53:71:F2:4C:9A:C1:C8:94:3B:F8:55:B4:76:3E:97:74:E8:53:63:82
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0189EDCC559B9F386C5A75F9F160985EB802
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U3HyTJrByJQ7-FW0dj6XdOhTY4I.roa
Signing time: Sun 13 Aug 2023 07:28:58 +0000
ROA not before: Sun 13 Aug 2023 07:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 91.223.110.0/24 maxlen: 24
2.56.108.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
2.56.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:cc:55:9b:9f:38:6c:5a:75:f9:f1:60:98:5e:b8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 13 07:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5371f24c9ac1c8943bf855b4763e9774e8536382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2b:0c:98:87:0c:c2:c7:db:d0:73:4a:08:f5:
5b:6f:95:2c:ea:86:fa:d0:22:7f:10:c8:12:5e:e4:
b5:53:f9:4e:5c:33:d0:89:5a:bb:17:f5:a5:90:c6:
22:88:a7:ea:78:3d:73:d3:86:0e:a6:de:32:4c:7c:
67:66:59:8f:5d:18:1d:48:a4:12:f0:46:b6:c1:eb:
6a:37:c3:91:fd:65:93:22:52:a8:cf:e9:da:83:bf:
57:74:56:10:8d:ab:e0:97:7d:20:a1:e5:14:18:fe:
74:d5:60:4c:22:b8:bc:ad:08:28:b9:f0:d7:3f:36:
6a:61:b0:80:5d:a4:7d:b5:13:34:54:88:f8:9b:34:
40:fb:5d:76:9e:25:21:b2:88:51:f6:39:8e:ec:18:
cc:bb:c7:57:02:39:e0:6e:49:41:e5:8c:88:a2:6f:
91:56:09:93:91:2d:da:1f:32:e1:66:aa:1b:00:31:
1d:e0:86:85:d2:ab:8a:f6:4e:bb:55:6e:04:0b:8f:
ca:dc:64:6d:74:62:ec:7e:47:d6:ef:d7:de:d3:11:
2d:99:e1:7e:20:90:2f:65:f7:e3:31:f4:80:08:bc:
da:94:69:16:eb:04:ac:7e:c4:89:56:a9:28:9e:fb:
89:ba:26:56:db:57:5b:83:0b:2f:5b:f4:e8:53:81:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:F2:4C:9A:C1:C8:94:3B:F8:55:B4:76:3E:97:74:E8:53:63:82
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U3HyTJrByJQ7-FW0dj6XdOhTY4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/24
2.56.110.0/23
91.223.110.0/24
Signature Algorithm: sha256WithRSAEncryption
77:8c:38:48:5d:4c:f4:fc:3d:90:aa:5f:e0:ff:ed:e0:20:fc:
9d:02:94:b1:22:70:80:eb:20:01:22:4b:73:c6:5a:36:34:5c:
41:ab:d1:5c:37:7c:c7:0e:9f:38:4a:a4:a7:e3:5a:3a:97:0f:
00:4a:64:e2:43:76:2b:ec:10:63:14:b3:79:17:8d:a0:cc:57:
db:3f:1f:03:fe:56:74:19:a8:13:0b:47:af:d7:bb:68:d9:a7:
02:c8:80:7b:63:bd:0f:03:4b:c0:7f:38:54:64:b6:4a:4b:d9:
5a:0f:11:8a:20:28:9c:01:58:10:e3:8d:37:4f:19:64:16:16:
8a:ef:7e:71:3e:57:e9:74:46:48:73:1c:01:73:6c:81:49:f9:
d8:6d:09:b8:66:1c:00:88:4e:4c:87:92:e3:7a:15:2c:f8:63:
1b:75:30:11:03:52:cc:be:09:92:b3:4d:a7:f3:f0:63:0f:a6:
b6:71:62:66:a7:74:bb:0b:4c:d7:31:33:40:c3:cd:a4:95:9e:
1b:0c:4e:16:d1:d5:b2:75:ed:6d:a4:42:91:b5:ac:cc:0b:1a:
92:d5:bd:f8:d3:18:9d:ab:49:02:ec:93:b7:86:36:4d:8e:58:
4b:07:26:a6:4e:3a:aa:78:99:29:1d:66:4f:53:82:44:a6:a6:
f1:91:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 09:17:11 2023 by rpki-client on console-fra.rpki-client.org