Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tDYeQe-tEOzQhFjUGuTx9eT9TW8.roa
File: tDYeQe-tEOzQhFjUGuTx9eT9TW8.roa (raw, json)
Hash identifier: MFWCY+aorm2TcRaP5EbkuOro93BGLmLboxqzWDteLOk=
Subject key identifier: B4:36:1E:41:EF:AD:10:EC:D0:84:58:D4:1A:E4:F1:F5:E4:FD:4D:6F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018DC34A97D01A03FB2B987B013D01C00254
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tDYeQe-tEOzQhFjUGuTx9eT9TW8.roa
Signing time: Mon 19 Feb 2024 21:34:21 +0000
ROA not before: Mon 19 Feb 2024 21:34:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 2.56.108.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 06:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c3:4a:97:d0:1a:03:fb:2b:98:7b:01:3d:01:c0:02:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 19 21:34:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4361e41efad10ecd08458d41ae4f1f5e4fd4d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:57:2a:94:1c:3e:95:fa:6c:f4:0b:c3:75:
65:99:cd:cb:b0:fb:21:65:e2:99:46:74:b9:09:2c:
87:e8:2e:df:11:da:75:40:56:85:a2:d3:59:9c:bf:
16:88:ea:21:6f:ab:33:f3:bd:96:c4:7d:45:50:59:
d2:06:f2:cd:eb:52:41:82:b9:2f:e1:e6:61:32:91:
a0:2f:27:57:ab:a2:ec:c9:d8:9d:17:7b:64:4d:89:
90:60:b9:8a:f3:77:39:14:d9:9f:82:9f:a9:72:52:
ca:08:d7:c8:ba:be:0b:fe:1f:47:bc:e0:81:d5:ed:
25:fc:23:53:a1:24:de:70:f4:a4:6c:77:a4:02:7d:
97:e8:f2:a7:72:1c:29:b1:91:6a:ad:a1:25:a6:e2:
0c:33:b9:c7:b9:fd:a1:70:26:77:77:57:ad:d1:1f:
c2:1f:61:78:d1:cb:d6:f7:cd:2e:d1:ec:3a:f0:d9:
83:df:6d:65:55:17:51:82:1a:50:b3:c9:42:25:21:
33:51:dc:4b:18:22:31:83:8c:62:9f:6f:71:97:16:
a6:c6:c6:3d:fd:51:c1:f5:85:a0:b5:86:6f:72:75:
d9:ae:a0:73:a9:e5:38:97:39:9a:68:1d:d2:9d:d8:
13:48:2b:bc:c8:d3:b6:e6:ed:47:ac:65:c6:01:0c:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:36:1E:41:EF:AD:10:EC:D0:84:58:D4:1A:E4:F1:F5:E4:FD:4D:6F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/tDYeQe-tEOzQhFjUGuTx9eT9TW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/24
45.144.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:15:4d:28:b2:a8:89:fe:cf:18:cf:8b:39:a3:fe:ad:94:f1:
91:ec:d0:39:06:2c:33:46:2f:77:f0:5a:ec:33:65:12:3d:b2:
8b:e4:34:c7:30:c6:26:e4:4a:d0:c8:c1:c1:68:44:5b:19:8a:
dd:e3:e9:ba:fd:a0:07:c2:6f:5a:fc:aa:69:1d:95:97:b0:c8:
e0:03:3b:61:17:3e:72:7b:84:ea:de:7c:4b:37:b9:5d:9b:54:
a0:ff:e3:82:f1:8b:53:97:38:0b:29:7d:27:46:07:d0:7a:a8:
a7:e5:f6:c9:bc:8a:80:01:c6:ca:e6:ad:e8:58:ca:4f:79:fa:
25:31:92:5f:c0:5a:17:83:5a:9a:51:f2:1d:ab:cb:f1:a2:74:
41:31:f7:35:45:f0:9e:3a:5d:cd:44:c2:f7:ca:da:79:a2:d5:
11:4f:1a:d2:ad:31:a6:fc:ec:c9:c4:96:bb:ff:1b:bf:8b:c9:
24:c0:e8:d5:0d:60:e5:4e:85:20:18:dd:df:b7:ec:a6:42:d4:
e6:4a:81:75:d4:0e:e4:04:8d:96:22:9f:c6:fa:98:39:9c:57:
e0:65:e3:cb:b8:d0:18:c5:23:42:c4:7a:a8:56:72:dc:58:0a:
5a:fd:86:c8:2a:43:c0:95:df:d7:7e:a4:af:9f:7c:2f:a5:5d:
fe:85:87:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 08:31:00 2024 by rpki-client on console-ams.rpki-client.org