Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U4f0ZujgP-WMa3UsLCVZRMLKItk.roa
File: U4f0ZujgP-WMa3UsLCVZRMLKItk.roa (raw, json)
Hash identifier: /U85h3O8fEv9y3brFUwYOZ7FLcwwsc/3c9y1eRV35Fw=
Subject key identifier: 53:87:F4:66:E8:E0:3F:E5:8C:6B:75:2C:2C:25:59:44:C2:CA:22:D9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018A2C1579F26CEFBED52D01D97A1CEF25A0
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U4f0ZujgP-WMa3UsLCVZRMLKItk.roa
Signing time: Fri 25 Aug 2023 09:45:19 +0000
ROA not before: Fri 25 Aug 2023 09:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 2.56.109.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Aug 2023 10:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:15:79:f2:6c:ef:be:d5:2d:01:d9:7a:1c:ef:25:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 25 09:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5387f466e8e03fe58c6b752c2c255944c2ca22d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:77:b3:16:2d:78:28:c2:d5:de:f4:65:58:44:
17:ae:6f:2f:f8:4e:52:b0:bf:fc:96:d7:60:8f:34:
e2:94:f1:05:02:3d:a3:51:d5:9c:60:1e:2a:7c:d3:
f4:10:03:5d:8d:57:95:7d:2a:2b:d2:1e:6e:04:dc:
a2:9e:54:fc:69:b6:00:59:47:ec:f2:f4:84:cf:b7:
4e:fa:19:cf:c6:24:b9:a5:89:77:77:7b:8b:4d:94:
2f:82:fd:78:82:1b:53:b8:9e:56:be:77:0a:7a:7a:
25:c0:70:ab:99:b0:18:7d:29:e2:ce:47:6e:77:5a:
c7:e4:60:f9:f7:5c:3e:f6:4b:a0:21:1e:39:fe:a2:
00:46:31:35:65:02:01:8b:8e:28:2c:9a:33:f8:56:
1b:c5:a2:d4:5b:40:80:4f:6a:8d:4e:91:02:86:5b:
08:52:ce:cf:fd:02:49:c6:56:35:e9:16:c6:4e:58:
db:df:70:af:b3:8e:df:e0:39:ed:66:dd:d0:7d:c9:
28:de:74:66:b3:8c:2b:c1:52:a9:4e:10:a1:62:78:
2c:ca:c6:2e:7d:4f:67:a6:be:7f:56:94:47:80:6d:
42:78:05:14:63:97:e0:2d:ef:4b:01:fd:13:f7:8b:
0c:82:e4:a7:63:87:de:35:04:95:e5:a7:98:ee:15:
66:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:87:F4:66:E8:E0:3F:E5:8C:6B:75:2C:2C:25:59:44:C2:CA:22:D9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/U4f0ZujgP-WMa3UsLCVZRMLKItk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
77.83.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:f5:c5:57:3c:7a:39:46:78:69:e9:de:fd:64:26:d2:f5:41:
b3:45:15:73:53:d7:54:2d:0b:44:96:36:00:8f:7b:45:44:f3:
b1:82:91:e9:58:32:63:17:c1:7d:e7:ce:80:2f:e2:e5:54:df:
c6:df:65:b3:b3:1b:41:74:d8:75:cc:2a:06:6f:14:f4:7f:ba:
86:95:05:de:18:1a:af:cf:c1:8a:3f:ee:b7:d2:aa:3e:0c:1c:
fc:a9:1c:66:50:d9:54:14:07:ab:77:02:01:6e:63:55:9c:08:
2c:c1:bd:95:ac:42:34:82:29:aa:e5:cc:81:af:4e:3f:63:5a:
a7:bd:93:0d:89:6a:47:82:be:c7:b8:c3:9d:5e:de:fe:c1:a8:
f8:6e:b0:0d:f5:f6:5a:63:53:c1:97:cd:da:f6:a6:fc:13:7c:
77:37:ca:b8:f1:28:d7:c0:ab:5d:6f:e2:22:58:4e:60:2d:87:
dd:05:fe:47:f0:cd:f9:ed:51:d8:4e:34:69:89:ba:f5:86:bf:
c0:ec:64:e1:0a:f0:8f:da:a2:93:c1:af:55:ac:f0:62:cc:69:
71:5e:d4:d2:f1:39:4d:bf:5f:b8:4f:c5:ac:7f:ec:7f:36:f0:
63:3e:34:85:ea:9b:bd:6f:32:9b:ed:32:a3:f3:20:87:0c:21:
08:5a:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org