Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_VUuFfKbHo6JchVlI8O9OR6fPpY.roa
File: _VUuFfKbHo6JchVlI8O9OR6fPpY.roa (raw, json)
Hash identifier: N/9eb3PxTwBXheYa26M6YhkEOR4bUGUmVdYE4ni4p1o=
Subject key identifier: FD:55:2E:15:F2:9B:1E:8E:89:72:15:65:23:C3:BD:39:1E:9F:3E:96
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01889EBA08B0E0C79571EB9F8561455DE6C6
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_VUuFfKbHo6JchVlI8O9OR6fPpY.roa
Signing time: Fri 09 Jun 2023 05:56:11 +0000
ROA not before: Fri 09 Jun 2023 05:56:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 2.56.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9e:ba:08:b0:e0:c7:95:71:eb:9f:85:61:45:5d:e6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 9 05:56:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd552e15f29b1e8e8972156523c3bd391e9f3e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9c:ee:7b:97:33:ef:c3:5c:71:f7:41:ba:5e:
58:c3:8a:12:56:ca:e3:1e:0e:2e:73:c0:e9:7f:c9:
cd:a7:ef:0e:1c:23:ec:97:3b:4c:e7:d5:9a:b5:7f:
74:92:2d:97:99:6a:8d:88:ec:7a:31:65:49:db:d5:
bc:17:c9:6d:ba:18:66:c7:0e:2a:5f:f8:b7:0a:c2:
8d:ad:5c:b4:17:98:f0:14:37:0b:69:68:62:fc:eb:
cc:49:ae:12:bb:b5:ae:65:01:c2:54:2e:b6:f5:84:
2f:d8:e0:e9:c0:aa:e8:cf:fd:7c:8c:55:89:13:9d:
1d:49:73:bb:58:6c:fb:af:43:bd:ab:d3:2d:3f:92:
e0:52:ac:5d:0d:c4:d9:4a:2c:1e:90:95:5e:f9:aa:
08:e9:30:af:87:1b:bd:80:80:22:2b:25:12:20:6b:
a9:c4:c6:26:cf:26:3a:9c:23:c8:61:b1:79:24:53:
01:71:0e:d1:df:56:bb:a9:ea:a7:d8:34:cf:f5:81:
48:73:b8:c1:04:f4:35:da:6b:e8:3a:bc:33:97:01:
24:0f:4b:10:27:60:b3:b5:6b:06:92:16:2a:c5:fd:
3c:83:b6:05:9d:e8:6f:5e:4d:e2:1e:da:b7:29:b1:
79:3a:1a:75:58:d6:91:20:2e:71:6b:e1:20:6f:6a:
d4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:55:2E:15:F2:9B:1E:8E:89:72:15:65:23:C3:BD:39:1E:9F:3E:96
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_VUuFfKbHo6JchVlI8O9OR6fPpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a9:a5:ec:ee:98:ec:ec:b2:7e:42:54:dc:5e:26:5e:1d:ca:
07:8f:76:c3:69:67:34:d0:a3:8b:09:5a:42:44:20:04:58:3d:
5e:35:14:50:29:a2:5f:5d:b6:45:57:be:e9:77:fe:d2:6b:1d:
21:22:0d:e7:5e:4a:c4:8a:49:66:77:ef:66:df:7a:ed:05:9d:
c9:94:6b:44:38:8c:0c:a1:9d:35:01:c9:73:80:59:6b:00:6c:
a6:d6:dc:c4:78:33:ad:72:64:1c:29:f5:0e:7a:12:23:3f:35:
c9:31:dc:f8:64:97:79:98:25:13:5f:4f:f0:82:b4:b7:70:2a:
38:68:09:ed:91:b9:23:0c:0d:14:78:a2:56:9f:43:b2:32:93:
d9:dc:73:cb:60:8d:52:44:d6:51:32:9e:65:5a:04:0a:46:30:
c9:da:01:fc:23:c8:0a:02:5a:a4:9c:77:5d:28:f5:5c:f8:8e:
45:74:c7:eb:4f:cc:d4:21:26:18:54:6e:05:04:41:7d:39:36:
7e:39:b1:1b:e0:65:0b:dd:ee:80:f4:58:eb:9c:d9:d2:a1:c3:
a0:77:85:34:37:9d:c9:82:f9:5e:c0:79:9e:b3:d5:98:aa:db:
08:dc:2b:98:8f:74:de:c2:0a:6e:87:79:01:62:bb:dc:d4:36:
d8:90:b0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org