Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/boNIn1OvmW2B4akrOO5vPGFXE5A.roa
File: boNIn1OvmW2B4akrOO5vPGFXE5A.roa (raw, json)
Hash identifier: PI+xhPOsEIRlvdaBBI0a7+avEPYUUoyFBzj1QYpS7Xg=
Subject key identifier: 6E:83:48:9F:53:AF:99:6D:81:E1:A9:2B:38:EE:6F:3C:61:57:13:90
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F4780FA73C8AF22B312BEDE97A4A2
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/boNIn1OvmW2B4akrOO5vPGFXE5A.roa
Signing time: Tue 02 Jan 2024 04:29:45 +0000
ROA not before: Tue 02 Jan 2024 04:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205463
IP address blocks: 2.56.109.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 15:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:47:80:fa:73:c8:af:22:b3:12:be:de:97:a4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e83489f53af996d81e1a92b38ee6f3c61571390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4d:f3:a4:d7:b5:a6:c8:1a:81:f6:d3:c5:a3:
52:95:aa:98:5d:68:96:0e:3d:4f:49:78:36:3e:40:
9f:af:f8:2f:ea:ca:17:c4:8c:04:12:9c:01:93:0f:
47:e3:6f:d2:7e:bf:b6:d7:29:8f:ab:ae:4c:d4:cc:
a3:37:a6:72:0a:ad:51:f3:e9:20:68:37:5f:8f:4a:
e5:6e:33:2a:19:b4:70:f3:93:ba:b6:6a:07:56:8f:
50:71:54:33:24:24:4b:03:4e:dd:1e:f9:98:81:3d:
13:88:2c:16:5c:a0:bc:a4:b2:8c:6e:9e:18:07:73:
1c:f4:c6:cb:3b:ba:1e:d3:68:ef:31:b3:38:0d:b2:
0f:ce:a4:09:6c:93:2b:66:c7:22:c5:2a:29:1b:dd:
d9:3b:df:40:13:fa:0f:64:38:f5:07:17:c1:fa:92:
b8:fa:20:0d:30:45:fd:a7:44:13:99:bf:49:d3:b2:
9d:07:52:31:94:6b:6d:ad:fd:e0:6d:5d:16:a1:01:
b1:e8:95:3d:e1:b7:12:84:0a:b0:45:f4:4f:ad:ea:
50:ae:ad:7a:33:db:87:c1:49:d5:52:3b:f2:49:c7:
64:41:21:f3:f4:1c:0e:70:cc:7e:e7:f8:bd:ff:37:
a0:77:32:20:7b:38:f5:43:e0:63:00:37:ad:c5:d3:
fd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:83:48:9F:53:AF:99:6D:81:E1:A9:2B:38:EE:6F:3C:61:57:13:90
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/boNIn1OvmW2B4akrOO5vPGFXE5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.109.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:2d:f1:87:c8:6a:f7:be:bf:7f:b3:a9:20:41:0f:f2:ed:b2:
2f:51:82:9b:6c:74:a5:d6:b0:c6:81:2b:74:99:0f:2b:e9:45:
ec:ff:58:fd:96:b8:8e:fe:6c:49:0c:c6:0f:6c:03:87:76:b1:
5a:2e:04:ab:e5:26:32:56:9c:6e:60:88:51:88:e6:f0:1f:b6:
99:87:b7:db:6f:82:ac:a5:ce:3b:2c:07:77:1d:a2:4f:28:09:
88:58:73:23:42:2f:d3:26:28:70:d0:53:04:12:a8:4a:8b:e8:
15:d3:13:a0:7c:3a:1e:e9:32:e7:2a:d7:4e:05:b5:ea:d2:50:
76:ca:03:04:4e:58:65:d0:ab:2d:f3:a1:ed:5e:f9:37:eb:a0:
0e:9d:be:3d:0d:cc:c3:26:ce:01:25:a5:54:79:bf:5e:d7:e7:
89:37:2b:f1:a2:7c:7a:47:06:31:77:fd:fc:56:12:d2:c4:4c:
a5:01:bd:65:62:a5:f5:b0:ad:83:74:eb:80:b1:9c:f5:2d:54:
c1:89:de:66:dc:c0:0a:2b:44:1b:45:b4:67:bc:a1:23:55:7f:
85:3b:5f:98:f7:8a:6c:6e:b7:f9:a3:09:43:0e:69:8f:ea:54:
ed:9c:6b:2d:62:09:df:43:f5:1f:f1:81:61:0e:a8:00:25:fe:
6c:b5:97:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 21:09:42 2024 by rpki-client on console-ams.rpki-client.org