Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nE1L2bPsjIgQxMsYuv95LmdBiL4.roa
File: nE1L2bPsjIgQxMsYuv95LmdBiL4.roa (raw, json)
Hash identifier: aVc1hgOJzbKbYm4KzaeeNG8Gb0GjxJeoIs1Zr6cKrok=
Subject key identifier: 9C:4D:4B:D9:B3:EC:8C:88:10:C4:CB:18:BA:FF:79:2E:67:41:88:BE
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0188DA340CF17F16349C27B835A17F3FF0D6
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nE1L2bPsjIgQxMsYuv95LmdBiL4.roa
Signing time: Tue 20 Jun 2023 19:07:04 +0000
ROA not before: Tue 20 Jun 2023 19:07:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50225
IP address blocks: 91.223.110.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
2.56.108.0/24 maxlen: 24
2.56.109.0/24 maxlen: 24
2.56.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:da:34:0c:f1:7f:16:34:9c:27:b8:35:a1:7f:3f:f0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 20 19:07:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c4d4bd9b3ec8c8810c4cb18baff792e674188be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4c:d5:25:2b:86:c6:7f:46:20:2e:c2:0a:13:
ff:25:70:ab:0b:0b:01:46:57:40:4c:76:1d:c6:ba:
c7:63:36:6c:59:45:3d:52:d9:99:4f:34:e6:0b:09:
0b:45:2b:fb:b0:16:a2:b3:05:20:99:d5:12:af:be:
be:6d:b4:3a:a7:44:fd:32:89:6c:b2:e4:9e:4e:73:
a7:73:84:eb:a9:2c:b0:45:76:8e:eb:98:d8:1c:61:
39:78:42:fc:31:8e:26:0a:ad:20:46:32:ac:7a:93:
b9:65:ef:29:fb:2d:6c:0a:83:10:b2:30:ea:4f:a5:
c7:6d:5c:c7:8c:bd:d8:4c:64:55:fd:bf:5b:f0:85:
66:96:66:28:6d:57:60:03:28:7d:e0:03:ec:c4:b6:
42:33:9d:78:4c:57:22:6f:9b:c0:0b:93:55:93:5c:
47:9a:ed:14:35:08:82:5c:88:d6:41:9d:07:8a:90:
f8:ca:24:9e:79:2e:19:c0:82:d0:68:fa:9a:ea:77:
65:8c:a4:d7:39:e9:65:9f:98:97:a8:f5:70:15:6d:
f4:d6:27:76:e2:d1:1c:a7:b3:69:e3:18:d3:70:cb:
99:f7:a2:a1:13:83:8e:db:aa:8e:73:d7:5a:2a:e3:
34:a7:68:f4:85:ee:8e:98:cc:7d:2d:cc:61:b2:4c:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4D:4B:D9:B3:EC:8C:88:10:C4:CB:18:BA:FF:79:2E:67:41:88:BE
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nE1L2bPsjIgQxMsYuv95LmdBiL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0-2.56.110.255
91.223.110.0/24
193.57.41.0/24
Signature Algorithm: sha256WithRSAEncryption
07:af:92:48:65:33:44:ce:f5:c9:07:c5:11:c3:d6:b5:4a:37:
9d:f4:72:26:ed:dd:2c:36:83:b4:4d:64:b1:70:b8:ff:b3:85:
9f:99:92:8f:bc:56:41:c9:b3:2e:ad:a9:b2:d7:9f:28:38:84:
71:1e:19:86:dc:d3:e9:b5:41:5a:c1:59:07:29:7d:81:31:8f:
8f:60:e5:d3:37:b6:f4:57:1c:cc:7a:e4:95:56:9f:57:38:6d:
b2:2a:21:53:1c:61:36:06:9e:33:56:37:24:b9:a1:b2:c4:fb:
9d:bd:64:86:ec:ce:46:ba:d7:b7:75:01:f0:c1:99:63:2d:76:
01:ad:f5:29:5c:13:4b:ee:c0:08:84:b0:29:18:d0:d5:62:e8:
c1:65:c3:aa:24:03:40:cf:32:c1:94:fd:24:51:88:43:bf:0d:
c8:09:5c:e4:ce:3f:bd:ae:ac:78:22:8b:16:b3:2d:30:fc:16:
50:dd:90:3f:b2:2d:00:1d:81:eb:92:af:44:e1:34:f2:a7:ef:
24:4f:f5:f5:23:d6:63:4c:e1:18:db:05:c3:3a:c4:c7:a0:19:
67:d7:67:17:1b:93:da:b3:5a:8c:d5:d0:91:ba:68:7b:06:81:
a0:8d:b7:ab:f7:42:79:32:73:ce:07:21:da:c7:60:6c:2c:1e:
ad:9e:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org